ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor1668343542 <...> Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor1668343542", ["ci2-upstream-fs/syz-executor1668343542"], 0x7ffe1ea3e170 /* 10 vars */) = 0 brk(NULL) = 0x55556782a000 brk(0x55556782ad80) = 0x55556782ad80 arch_prctl(ARCH_SET_FS, 0x55556782a400) = 0 set_tid_address(0x55556782a6d0) = 5606 set_robust_list(0x55556782a6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor1668343542", 4096) = 44 getrandom("\xe0\x4d\xae\xfd\x76\x92\x32\xce", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556782ad80 brk(0x55556784bd80) = 0x55556784bd80 brk(0x55556784c000) = 0x55556784c000 mprotect(0x7f2f45d05000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 getrandom("\x2a\x68\xf1\xa7\x17\x0c\x5b\x7f", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.EE4bNE", 0700) = 0 chmod("./syzkaller.EE4bNE", 0777) = 0 chdir("./syzkaller.EE4bNE") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5607 attached , child_tidptr=0x55556782a6d0) = 5607 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5607] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5607] chdir("./0") = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5607] setpgid(0, 0) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5607] write(3, "1000", 4) = 4 [pid 5607] close(3) = 0 [pid 5607] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5607] write(1, "executing program\n", 18) = 18 [pid 5607] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5607] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5607] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5608 attached => {parent_tid=[5608]}, 88) = 5608 [pid 5608] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5607] rt_sigprocmask(SIG_SETMASK, [] [pid 5608] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5608] <... set_robust_list resumed>) = 0 [pid 5607] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5607] <... futex resumed>) = 0 [pid 5608] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5607] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5608] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5608] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = 0 [pid 5608] <... futex resumed>) = 1 [pid 5607] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5608] memfd_create("syzkaller", 0 [pid 5607] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5608] <... memfd_create resumed>) = 3 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5608] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5608] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5608] close(3) = 0 [pid 5608] close(4) = 0 [pid 5608] mkdir("./file0", 0777) = 0 [ 104.312142][ T5608] loop0: detected capacity change from 0 to 32768 [pid 5608] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5608] chdir("./file0") = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5608] ioctl(4, LOOP_CLR_FD) = 0 [pid 5608] close(4) = 0 [pid 5608] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5607] <... futex resumed>) = 0 [pid 5608] openat(AT_FDCWD, NULL, O_RDWR [pid 5607] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5608] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = 0 [pid 5608] <... futex resumed>) = 0 [pid 5608] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5607] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5607] exit_group(0 [pid 5608] <... futex resumed>) = ? [pid 5607] <... exit_group resumed>) = ? [pid 5608] +++ exited with 0 +++ [pid 5607] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5609 attached , child_tidptr=0x55556782a6d0) = 5609 [pid 5609] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] chdir("./1") = 0 [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5609] setpgid(0, 0) = 0 [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1000", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5609] write(1, "executing program\n", 18) = 18 executing program [pid 5609] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5609] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5610 attached [pid 5610] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5610] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] <... clone3 resumed> => {parent_tid=[5610]}, 88) = 5610 [pid 5610] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = 1 [pid 5610] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5609] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5610] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5610] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5609] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] memfd_create("syzkaller", 0) = 3 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5610] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5610] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5610] close(3) = 0 [pid 5610] close(4) = 0 [pid 5610] mkdir("./file0", 0777) = 0 [pid 5610] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5610] chdir("./file0") = 0 [ 104.965468][ T5610] loop0: detected capacity change from 0 to 32768 [pid 5610] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5610] ioctl(4, LOOP_CLR_FD) = 0 [pid 5610] close(4) = 0 [pid 5610] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... futex resumed>) = 0 [pid 5609] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = 1 [pid 5610] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5609] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] exit_group(0) = ? [pid 5610] <... futex resumed>) = ? [pid 5610] +++ exited with 0 +++ [pid 5609] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5611 attached [pid 5611] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5611 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] chdir("./2") = 0 [pid 5611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5611] setpgid(0, 0) = 0 [pid 5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5611] write(3, "1000", 4) = 4 [pid 5611] close(3) = 0 [pid 5611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] write(1, "executing program\n", 18) = 18 executing program [pid 5611] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5611] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5612 attached [pid 5612] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5612] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5611] <... clone3 resumed> => {parent_tid=[5612]}, 88) = 5612 [pid 5612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = 0 [pid 5611] <... futex resumed>) = 1 [pid 5612] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5611] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5612] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5612] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... futex resumed>) = 0 [pid 5611] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = 0 [pid 5611] <... futex resumed>) = 1 [pid 5611] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] memfd_create("syzkaller", 0) = 3 [pid 5612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5612] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5612] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5612] close(3) = 0 [pid 5612] close(4) = 0 [pid 5612] mkdir("./file0", 0777) = 0 [pid 5612] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5612] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] chdir("./file0") = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5612] ioctl(4, LOOP_CLR_FD) = 0 [pid 5612] close(4) = 0 [pid 5612] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... futex resumed>) = 0 [ 105.600903][ T5612] loop0: detected capacity change from 0 to 32768 [pid 5611] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = 0 [pid 5611] <... futex resumed>) = 1 [pid 5612] openat(AT_FDCWD, NULL, O_RDWR [pid 5611] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5612] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5612] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] exit_group(0) = ? [pid 5612] <... futex resumed>) = ? [pid 5612] +++ exited with 0 +++ [pid 5611] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5613 attached , child_tidptr=0x55556782a6d0) = 5613 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5613] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5613] <... set_robust_list resumed>) = 0 [pid 5613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5613] chdir("./3") = 0 [pid 5613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5613] setpgid(0, 0) = 0 [pid 5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5613] write(3, "1000", 4) = 4 [pid 5613] close(3) = 0 [pid 5613] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5613] write(1, "executing program\n", 18) = 18 [pid 5613] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5613] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5614 attached [pid 5614] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5613] <... clone3 resumed> => {parent_tid=[5614]}, 88) = 5614 [pid 5614] <... rseq resumed>) = 0 [pid 5613] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5613] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5613] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5613] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5613] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5614] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] <... futex resumed>) = 0 [pid 5614] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5613] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5613] <... futex resumed>) = 0 [pid 5614] memfd_create("syzkaller", 0 [pid 5613] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... memfd_create resumed>) = 3 [pid 5614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5614] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5614] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5614] close(3) = 0 [pid 5614] close(4) = 0 [pid 5614] mkdir("./file0", 0777) = 0 [pid 5614] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5614] chdir("./file0") = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5614] ioctl(4, LOOP_CLR_FD) = 0 [pid 5614] close(4) = 0 [pid 5614] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] <... futex resumed>) = 0 [pid 5614] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5613] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... futex resumed>) = 0 [pid 5613] <... futex resumed>) = 1 [pid 5614] openat(AT_FDCWD, NULL, O_RDWR [pid 5613] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5614] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] <... futex resumed>) = 0 [pid 5613] exit_group(0 [pid 5614] ???( [pid 5613] <... exit_group resumed>) = ? [pid 5614] <... ??? resumed>) = ? [pid 5614] +++ exited with 0 +++ [pid 5613] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5613, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 106.218918][ T5614] loop0: detected capacity change from 0 to 32768 umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5615 attached [pid 5615] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5615 [pid 5615] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5615] chdir("./4") = 0 [pid 5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5615] setpgid(0, 0) = 0 [pid 5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5615] write(3, "1000", 4) = 4 [pid 5615] close(3) = 0 [pid 5615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5615] write(1, "executing program\n", 18) = 18 executing program [pid 5615] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5615] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5615] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5616 attached => {parent_tid=[5616]}, 88) = 5616 [pid 5616] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5615] rt_sigprocmask(SIG_SETMASK, [] [pid 5616] <... rseq resumed>) = 0 [pid 5615] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5616] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5615] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... set_robust_list resumed>) = 0 [pid 5615] <... futex resumed>) = 0 [pid 5616] rt_sigprocmask(SIG_SETMASK, [] [pid 5615] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5616] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5616] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5616] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5616] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5615] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5616] memfd_create("syzkaller", 0) = 3 [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5616] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5616] close(3) = 0 [pid 5616] close(4) = 0 [pid 5616] mkdir("./file0", 0777) = 0 [pid 5616] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5616] chdir("./file0") = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5616] ioctl(4, LOOP_CLR_FD) = 0 [pid 5616] close(4) = 0 [pid 5616] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5616] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 106.826751][ T5616] loop0: detected capacity change from 0 to 32768 [pid 5616] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5616] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5616] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] exit_group(0) = ? [pid 5616] <... futex resumed>) = ? [pid 5616] +++ exited with 0 +++ [pid 5615] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5615, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5617 attached , child_tidptr=0x55556782a6d0) = 5617 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5617] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5617] chdir("./5") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5617] write(1, "executing program\n", 18) = 18 [pid 5617] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5617] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5618 attached [pid 5618] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5617] <... clone3 resumed> => {parent_tid=[5618]}, 88) = 5618 [pid 5618] <... rseq resumed>) = 0 [pid 5618] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5617] rt_sigprocmask(SIG_SETMASK, [] [pid 5618] <... set_robust_list resumed>) = 0 [pid 5617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5618] rt_sigprocmask(SIG_SETMASK, [] [pid 5617] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5617] <... futex resumed>) = 0 [pid 5618] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5617] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5618] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5617] <... futex resumed>) = 0 [pid 5618] memfd_create("syzkaller", 0 [pid 5617] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5618] <... memfd_create resumed>) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5618] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5618] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5618] close(3) = 0 [pid 5618] close(4) = 0 [pid 5618] mkdir("./file0", 0777) = 0 [pid 5618] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5618] chdir("./file0") = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5618] ioctl(4, LOOP_CLR_FD) = 0 [pid 5618] close(4) = 0 [pid 5618] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = 0 [pid 5618] <... futex resumed>) = 1 [pid 5617] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] openat(AT_FDCWD, NULL, O_RDWR [pid 5617] <... futex resumed>) = 0 [pid 5618] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5617] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5618] <... futex resumed>) = 0 [pid 5618] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] exit_group(0 [pid 5618] <... futex resumed>) = ? [pid 5617] <... exit_group resumed>) = ? [pid 5618] +++ exited with 0 +++ [pid 5617] +++ exited with 0 +++ [ 107.452089][ T5618] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5619 attached , child_tidptr=0x55556782a6d0) = 5619 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5619] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5619] <... set_robust_list resumed>) = 0 [pid 5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5619] chdir("./6") = 0 [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5619] setpgid(0, 0) = 0 [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5619] write(3, "1000", 4) = 4 [pid 5619] close(3) = 0 [pid 5619] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5619] write(1, "executing program\n", 18) = 18 [pid 5619] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5619] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5619] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5620 attached => {parent_tid=[5620]}, 88) = 5620 [pid 5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5619] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5620] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5619] <... futex resumed>) = 0 [pid 5620] <... rseq resumed>) = 0 [pid 5619] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5620] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5620] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5620] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5619] <... futex resumed>) = 0 [pid 5620] <... futex resumed>) = 1 [pid 5619] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] memfd_create("syzkaller", 0 [pid 5619] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5620] <... memfd_create resumed>) = 3 [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5620] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5620] close(3) = 0 [pid 5620] close(4) = 0 [pid 5620] mkdir("./file0", 0777) = 0 [pid 5620] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 107.983803][ T5620] loop0: detected capacity change from 0 to 32768 [pid 5620] chdir("./file0") = 0 [pid 5620] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5620] ioctl(4, LOOP_CLR_FD) = 0 [pid 5620] close(4) = 0 [pid 5620] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5619] <... futex resumed>) = 0 [pid 5620] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5619] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5619] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5620] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5620] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5619] <... futex resumed>) = 0 [pid 5620] <... futex resumed>) = 1 [pid 5620] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5619] exit_group(0 [pid 5620] <... futex resumed>) = ? [pid 5619] <... exit_group resumed>) = ? [pid 5620] +++ exited with 0 +++ [pid 5619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5622 attached [pid 5622] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5622 [pid 5622] <... set_robust_list resumed>) = 0 [pid 5622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5622] chdir("./7") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5622] write(3, "1000", 4) = 4 [pid 5622] close(3) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5622] write(1, "executing program\n", 18) = 18 [pid 5622] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5622] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5623 attached [pid 5623] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5622] <... clone3 resumed> => {parent_tid=[5623]}, 88) = 5623 [pid 5623] <... rseq resumed>) = 0 [pid 5623] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5622] rt_sigprocmask(SIG_SETMASK, [] [pid 5623] <... set_robust_list resumed>) = 0 [pid 5622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5622] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5622] <... futex resumed>) = 0 [pid 5623] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5622] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5623] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5623] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5622] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] memfd_create("syzkaller", 0 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5623] <... memfd_create resumed>) = 3 [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5623] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5623] close(3) = 0 [pid 5623] close(4) = 0 [pid 5623] mkdir("./file0", 0777) = 0 [pid 5623] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5623] chdir("./file0") = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5623] ioctl(4, LOOP_CLR_FD) = 0 [pid 5623] close(4) = 0 [pid 5623] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5623] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5622] <... futex resumed>) = 0 [pid 5623] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5622] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5622] exit_group(0) = ? [pid 5623] <... futex resumed>) = ? [ 108.586398][ T5623] loop0: detected capacity change from 0 to 32768 [pid 5623] +++ exited with 0 +++ [pid 5622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5624 attached [pid 5624] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5624 [pid 5624] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5624] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5624] chdir("./8") = 0 [pid 5624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5624] setpgid(0, 0) = 0 [pid 5624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5624] write(3, "1000", 4) = 4 [pid 5624] close(3) = 0 [pid 5624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5624] write(1, "executing program\n", 18) = 18 [pid 5624] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5624] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5624] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5625 attached [pid 5625] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5624] <... clone3 resumed> => {parent_tid=[5625]}, 88) = 5625 [pid 5625] <... rseq resumed>) = 0 [pid 5624] rt_sigprocmask(SIG_SETMASK, [] [pid 5625] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5625] <... set_robust_list resumed>) = 0 [pid 5624] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] rt_sigprocmask(SIG_SETMASK, [] [pid 5624] <... futex resumed>) = 0 [pid 5625] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5624] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5625] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5625] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5625] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5624] <... futex resumed>) = 0 [pid 5625] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5624] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5624] <... futex resumed>) = 1 [pid 5624] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5625] memfd_create("syzkaller", 0) = 3 [pid 5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5625] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5625] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5625] close(3) = 0 [pid 5625] close(4) = 0 [pid 5625] mkdir("./file0", 0777) = 0 [pid 5625] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5625] chdir("./file0") = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5625] ioctl(4, LOOP_CLR_FD) = 0 [pid 5625] close(4) = 0 [pid 5625] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5624] <... futex resumed>) = 0 [pid 5625] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5624] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5624] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5625] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5625] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5624] <... futex resumed>) = 0 [pid 5625] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5624] exit_group(0) = ? [pid 5625] <... futex resumed>) = ? [pid 5625] +++ exited with 0 +++ [pid 5624] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5624, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 109.130994][ T5625] loop0: detected capacity change from 0 to 32768 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5626 attached [pid 5626] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5626 [pid 5626] <... set_robust_list resumed>) = 0 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] chdir("./9") = 0 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5626] setpgid(0, 0) = 0 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5626] write(3, "1000", 4) = 4 [pid 5626] close(3) = 0 [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] write(1, "executing program\n", 18) = 18 executing program [pid 5626] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5626] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5627 attached [pid 5627] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5626] <... clone3 resumed> => {parent_tid=[5627]}, 88) = 5627 [pid 5627] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5626] rt_sigprocmask(SIG_SETMASK, [] [pid 5627] <... set_robust_list resumed>) = 0 [pid 5626] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5626] <... futex resumed>) = 0 [pid 5627] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5626] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5627] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5627] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5627] memfd_create("syzkaller", 0 [pid 5626] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] <... memfd_create resumed>) = 3 [pid 5626] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5627] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5627] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5627] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5627] close(3) = 0 [pid 5627] close(4) = 0 [pid 5627] mkdir("./file0", 0777) = 0 [pid 5627] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5627] chdir("./file0") = 0 [pid 5627] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5627] ioctl(4, LOOP_CLR_FD) = 0 [pid 5627] close(4) = 0 [pid 5627] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5627] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] <... futex resumed>) = 0 [pid 5626] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] <... futex resumed>) = 0 [pid 5626] <... futex resumed>) = 1 [pid 5627] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5626] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5627] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5627] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] exit_group(0 [pid 5627] <... futex resumed>) = ? [pid 5626] <... exit_group resumed>) = ? [pid 5627] +++ exited with 0 +++ [pid 5626] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [ 109.653417][ T5627] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5628 attached [pid 5628] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5628 [pid 5628] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5628] chdir("./10") = 0 [pid 5628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5628] setpgid(0, 0) = 0 [pid 5628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5628] write(3, "1000", 4) = 4 [pid 5628] close(3) = 0 [pid 5628] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5628] write(1, "executing program\n", 18) = 18 [pid 5628] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5628] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5628] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5628] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5629 attached [pid 5629] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5628] <... clone3 resumed> => {parent_tid=[5629]}, 88) = 5629 [pid 5629] <... rseq resumed>) = 0 [pid 5628] rt_sigprocmask(SIG_SETMASK, [] [pid 5629] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5628] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5628] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... set_robust_list resumed>) = 0 [pid 5628] <... futex resumed>) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [] [pid 5628] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5629] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5629] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5629] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5628] <... futex resumed>) = 0 [pid 5629] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] memfd_create("syzkaller", 0 [pid 5628] <... futex resumed>) = 0 [pid 5628] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5629] <... memfd_create resumed>) = 3 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5629] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5629] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5629] close(3) = 0 [pid 5629] close(4) = 0 [pid 5629] mkdir("./file0", 0777) = 0 [pid 5629] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5629] chdir("./file0") = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5629] ioctl(4, LOOP_CLR_FD) = 0 [pid 5629] close(4) = 0 [pid 5629] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5628] <... futex resumed>) = 0 [pid 5628] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... futex resumed>) = 0 [pid 5628] <... futex resumed>) = 1 [pid 5629] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [ 110.199582][ T5629] loop0: detected capacity change from 0 to 32768 [pid 5628] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5628] <... futex resumed>) = 0 [pid 5628] exit_group(0) = ? [pid 5629] +++ exited with 0 +++ [pid 5628] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5628, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5630 attached , child_tidptr=0x55556782a6d0) = 5630 [pid 5630] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5630] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5630] chdir("./11") = 0 [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5630] setpgid(0, 0) = 0 [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5630] write(3, "1000", 4) = 4 [pid 5630] close(3) = 0 [pid 5630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5630] write(1, "executing program\n", 18) = 18 [pid 5630] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5630] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5630] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5631 attached [pid 5631] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5630] <... clone3 resumed> => {parent_tid=[5631]}, 88) = 5631 [pid 5631] <... rseq resumed>) = 0 [pid 5631] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5630] rt_sigprocmask(SIG_SETMASK, [] [pid 5631] <... set_robust_list resumed>) = 0 [pid 5630] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [] [pid 5630] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5630] <... futex resumed>) = 0 [pid 5630] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5631] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5631] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5630] <... futex resumed>) = 0 [pid 5631] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5630] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5630] <... futex resumed>) = 0 [pid 5630] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5631] memfd_create("syzkaller", 0) = 3 [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5631] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5631] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5631] close(3) = 0 [pid 5631] close(4) = 0 [pid 5631] mkdir("./file0", 0777) = 0 [pid 5631] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5631] chdir("./file0") = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5631] ioctl(4, LOOP_CLR_FD) = 0 [pid 5631] close(4) = 0 [pid 5631] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5630] <... futex resumed>) = 0 [pid 5631] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5630] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5630] <... futex resumed>) = 0 [pid 5630] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [ 110.785165][ T5631] loop0: detected capacity change from 0 to 32768 [pid 5631] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5630] <... futex resumed>) = 0 [pid 5630] exit_group(0 [pid 5631] ???() = ? [pid 5630] <... exit_group resumed>) = ? [pid 5631] +++ exited with 0 +++ [pid 5630] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5630, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5632 attached , child_tidptr=0x55556782a6d0) = 5632 [pid 5632] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5632] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5632] chdir("./12") = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5632] write(1, "executing program\n", 18) = 18 executing program [pid 5632] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5632] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5632] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5633 attached => {parent_tid=[5633]}, 88) = 5633 [pid 5633] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5632] rt_sigprocmask(SIG_SETMASK, [] [pid 5633] <... rseq resumed>) = 0 [pid 5632] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5633] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5632] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... set_robust_list resumed>) = 0 [pid 5632] <... futex resumed>) = 0 [pid 5633] rt_sigprocmask(SIG_SETMASK, [] [pid 5632] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5633] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5633] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5633] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5633] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5632] <... futex resumed>) = 0 [pid 5633] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5632] <... futex resumed>) = 0 [pid 5633] memfd_create("syzkaller", 0 [pid 5632] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5633] <... memfd_create resumed>) = 3 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5633] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5633] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5633] close(3) = 0 [pid 5633] close(4) = 0 [pid 5633] mkdir("./file0", 0777) = 0 [pid 5633] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5633] chdir("./file0") = 0 [ 111.310900][ T5633] loop0: detected capacity change from 0 to 32768 [pid 5633] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5633] ioctl(4, LOOP_CLR_FD) = 0 [pid 5633] close(4) = 0 [pid 5633] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = 0 [pid 5632] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = 1 [pid 5632] <... futex resumed>) = 0 [pid 5633] openat(AT_FDCWD, NULL, O_RDWR [pid 5632] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5633] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5633] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5632] <... futex resumed>) = 0 [pid 5633] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] exit_group(0 [pid 5633] <... futex resumed>) = ? [pid 5632] <... exit_group resumed>) = ? [pid 5633] +++ exited with 0 +++ [pid 5632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5634 attached [pid 5634] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5634 [pid 5634] <... set_robust_list resumed>) = 0 [pid 5634] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5634] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5634] chdir("./13") = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5634] write(3, "1000", 4) = 4 [pid 5634] close(3) = 0 [pid 5634] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5634] write(1, "executing program\n", 18) = 18 [pid 5634] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5634] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5635 attached [pid 5635] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5634] <... clone3 resumed> => {parent_tid=[5635]}, 88) = 5635 [pid 5635] <... rseq resumed>) = 0 [pid 5634] rt_sigprocmask(SIG_SETMASK, [] [pid 5635] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5634] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5635] rt_sigprocmask(SIG_SETMASK, [] [pid 5634] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5634] <... futex resumed>) = 0 [pid 5635] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5634] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5635] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5635] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5635] memfd_create("syzkaller", 0) = 3 [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5635] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5635] close(3) = 0 [pid 5635] close(4) = 0 [pid 5635] mkdir("./file0", 0777) = 0 [pid 5635] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5635] chdir("./file0") = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5635] ioctl(4, LOOP_CLR_FD) = 0 [pid 5635] close(4) = 0 [pid 5635] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.961642][ T5635] loop0: detected capacity change from 0 to 32768 [pid 5634] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5635] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5635] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] exit_group(0 [pid 5635] <... futex resumed>) = ? [pid 5634] <... exit_group resumed>) = ? [pid 5635] +++ exited with 0 +++ [pid 5634] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5634, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5636 attached , child_tidptr=0x55556782a6d0) = 5636 [pid 5636] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] chdir("./14") = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] setpgid(0, 0) = 0 [pid 5636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1000", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5636] write(1, "executing program\n", 18) = 18 executing program [pid 5636] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5636] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5637 attached [pid 5637] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5636] <... clone3 resumed> => {parent_tid=[5637]}, 88) = 5637 [pid 5637] <... rseq resumed>) = 0 [pid 5637] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... set_robust_list resumed>) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5636] <... futex resumed>) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY [pid 5636] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5637] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5637] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5637] memfd_create("syzkaller", 0) = 3 [pid 5637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5637] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5637] close(3) = 0 [pid 5637] close(4) = 0 [pid 5637] mkdir("./file0", 0777) = 0 [pid 5637] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5637] chdir("./file0") = 0 [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5637] ioctl(4, LOOP_CLR_FD) = 0 [pid 5637] close(4) = 0 [pid 5637] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5637] openat(AT_FDCWD, NULL, O_RDWR [pid 5636] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5637] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [ 112.524091][ T5637] loop0: detected capacity change from 0 to 32768 [pid 5636] exit_group(0 [pid 5637] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... exit_group resumed>) = ? [pid 5637] <... futex resumed>) = ? [pid 5637] +++ exited with 0 +++ [pid 5636] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5636, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5638 attached , child_tidptr=0x55556782a6d0) = 5638 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5638] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5638] chdir("./15") = 0 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] setpgid(0, 0) = 0 [pid 5638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1000", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5638] write(1, "executing program\n", 18) = 18 executing program [pid 5638] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5638] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5638] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5638] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5638] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5638] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5639 attached [pid 5639] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5638] <... clone3 resumed> => {parent_tid=[5639]}, 88) = 5639 [pid 5639] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5638] rt_sigprocmask(SIG_SETMASK, [] [pid 5639] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5639] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5639] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5638] <... futex resumed>) = 0 [pid 5639] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5638] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5639] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5639] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = 0 [pid 5639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5639] memfd_create("syzkaller", 0 [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5639] <... memfd_create resumed>) = 3 [pid 5639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5639] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5639] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5639] close(3) = 0 [pid 5639] close(4) = 0 [pid 5639] mkdir("./file0", 0777) = 0 [pid 5639] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5639] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5639] chdir("./file0") = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5639] ioctl(4, LOOP_CLR_FD) = 0 [pid 5639] close(4) = 0 [pid 5639] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5639] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] <... futex resumed>) = 0 [pid 5639] openat(AT_FDCWD, NULL, O_RDWR [pid 5638] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5639] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5639] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5639] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] exit_group(0 [pid 5639] <... futex resumed>) = ? [pid 5638] <... exit_group resumed>) = ? [pid 5639] +++ exited with 0 +++ [pid 5638] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5638, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [ 113.105400][ T5639] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556782a6d0) = 5640 rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5640 attached , NULL, 8) = 0 [pid 5640] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5640] chdir("./16") = 0 [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5640] setpgid(0, 0) = 0 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5640] write(3, "1000", 4) = 4 [pid 5640] close(3) = 0 [pid 5640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5640] write(1, "executing program\n", 18) = 18 executing program [pid 5640] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5640] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5640] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5641]}, 88) = 5641 ci2-upstream-fs/strace-static-x86_64: Process 5641 attached [pid 5640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5640] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5640] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5641] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5641] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5641] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5640] <... futex resumed>) = 0 [pid 5641] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5640] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5640] <... futex resumed>) = 0 [pid 5640] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5641] memfd_create("syzkaller", 0) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5641] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5641] close(3) = 0 [pid 5641] close(4) = 0 [pid 5641] mkdir("./file0", 0777) = 0 [pid 5641] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5641] chdir("./file0") = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5640] <... futex resumed>) = 0 [pid 5641] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [ 113.626389][ T5641] loop0: detected capacity change from 0 to 32768 [pid 5640] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5640] <... futex resumed>) = 0 [pid 5641] openat(AT_FDCWD, NULL, O_RDWR [pid 5640] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5641] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5640] <... futex resumed>) = 0 [pid 5640] exit_group(0) = ? [pid 5641] +++ exited with 0 +++ [pid 5640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5640, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5642 attached [pid 5642] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5642 [pid 5642] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5642] chdir("./17") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5642] write(1, "executing program\n", 18) = 18 [pid 5642] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5642] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5642] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5643 attached => {parent_tid=[5643]}, 88) = 5643 [pid 5642] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] <... rseq resumed>) = 0 [pid 5643] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5642] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... set_robust_list resumed>) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5643] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5643] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5643] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5642] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5643] memfd_create("syzkaller", 0) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5643] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5643] close(3) = 0 [pid 5643] close(4) = 0 [pid 5643] mkdir("./file0", 0777) = 0 [ 114.233935][ T5643] loop0: detected capacity change from 0 to 32768 [pid 5643] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5643] chdir("./file0") = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5643] close(4) = 0 [pid 5643] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5643] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] openat(AT_FDCWD, NULL, O_RDWR [pid 5642] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5643] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5642] exit_group(0 [pid 5643] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5642] <... exit_group resumed>) = ? [pid 5643] +++ exited with 0 +++ [pid 5642] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5644 attached , child_tidptr=0x55556782a6d0) = 5644 [pid 5644] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] <... set_robust_list resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] chdir("./18") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5644] write(1, "executing program\n", 18) = 18 executing program [pid 5644] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5644] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5644] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5645 attached [pid 5645] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5644] <... clone3 resumed> => {parent_tid=[5645]}, 88) = 5645 [pid 5645] <... rseq resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] <... set_robust_list resumed>) = 0 [pid 5644] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... futex resumed>) = 0 [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5644] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5645] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5645] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = 0 [pid 5645] <... futex resumed>) = 1 [pid 5644] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] memfd_create("syzkaller", 0 [pid 5644] <... futex resumed>) = 0 [pid 5645] <... memfd_create resumed>) = 3 [pid 5644] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5645] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5645] close(3) = 0 [pid 5645] close(4) = 0 [pid 5645] mkdir("./file0", 0777) = 0 [pid 5645] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5645] chdir("./file0") = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5645] ioctl(4, LOOP_CLR_FD) = 0 [pid 5645] close(4) = 0 [pid 5645] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5644] <... futex resumed>) = 0 [pid 5645] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5644] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5644] <... futex resumed>) = 0 [pid 5645] openat(AT_FDCWD, NULL, O_RDWR [pid 5644] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5645] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5644] <... futex resumed>) = 0 [pid 5645] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5644] exit_group(0 [pid 5645] <... futex resumed>) = ? [pid 5644] <... exit_group resumed>) = ? [pid 5645] +++ exited with 0 +++ [pid 5644] +++ exited with 0 +++ [ 114.893847][ T5645] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5646 attached , child_tidptr=0x55556782a6d0) = 5646 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... set_robust_list resumed>) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5646] chdir("./19") = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] write(1, "executing program\n", 18) = 18 executing program [pid 5646] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5646] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5647 attached [pid 5647] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5646] <... clone3 resumed> => {parent_tid=[5647]}, 88) = 5647 [pid 5647] <... rseq resumed>) = 0 [pid 5647] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] <... set_robust_list resumed>) = 0 [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... futex resumed>) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5646] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5647] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] <... futex resumed>) = 0 [pid 5647] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] <... futex resumed>) = 0 [pid 5647] memfd_create("syzkaller", 0 [pid 5646] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5647] <... memfd_create resumed>) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5647] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] mkdir("./file0", 0777) = 0 [pid 5647] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file0") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [pid 5647] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] <... futex resumed>) = 0 [pid 5647] openat(AT_FDCWD, NULL, O_RDWR [pid 5646] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5646] <... futex resumed>) = 0 [pid 5647] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] <... futex resumed>) = 0 [pid 5646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] exit_group(0) = ? [pid 5647] <... futex resumed>) = ? [ 115.467822][ T5647] loop0: detected capacity change from 0 to 32768 [pid 5647] +++ exited with 0 +++ [pid 5646] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5646, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5648 attached [pid 5648] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5648 [pid 5648] <... set_robust_list resumed>) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5648] chdir("./20") = 0 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5648] setpgid(0, 0) = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5648] write(1, "executing program\n", 18) = 18 [pid 5648] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5648] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5648] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5649 attached [pid 5649] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5648] <... clone3 resumed> => {parent_tid=[5649]}, 88) = 5649 [pid 5649] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] <... set_robust_list resumed>) = 0 [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5648] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5649] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5648] <... futex resumed>) = 0 [pid 5648] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5649] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5649] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5649] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5648] <... futex resumed>) = 0 [pid 5649] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5648] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5649] <... futex resumed>) = 0 [pid 5648] <... futex resumed>) = 1 [pid 5648] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5649] memfd_create("syzkaller", 0) = 3 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5649] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5649] close(3) = 0 [pid 5649] close(4) = 0 [pid 5649] mkdir("./file0", 0777) = 0 [pid 5649] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5649] chdir("./file0") = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5649] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] close(4) = 0 [pid 5649] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5648] <... futex resumed>) = 0 [pid 5649] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5649] openat(AT_FDCWD, NULL, O_RDWR [pid 5648] <... futex resumed>) = 0 [pid 5648] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5649] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5649] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5648] <... futex resumed>) = 0 [pid 5649] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5648] exit_group(0 [pid 5649] <... futex resumed>) = ? [pid 5648] <... exit_group resumed>) = ? [pid 5649] +++ exited with 0 +++ [pid 5648] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5648, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 116.013357][ T5649] loop0: detected capacity change from 0 to 32768 umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5650 attached [pid 5650] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5650 [pid 5650] <... set_robust_list resumed>) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5650] chdir("./21") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] <... openat resumed>) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5650] write(1, "executing program\n", 18) = 18 [pid 5650] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5650] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5650] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5651 attached [pid 5651] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5650] <... clone3 resumed> => {parent_tid=[5651]}, 88) = 5651 [pid 5651] <... rseq resumed>) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] <... futex resumed>) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5650] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5651] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5651] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5651] memfd_create("syzkaller", 0) = 3 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5651] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5651] close(3) = 0 [pid 5651] close(4) = 0 [pid 5651] mkdir("./file0", 0777) = 0 [pid 5651] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5651] chdir("./file0") = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5651] ioctl(4, LOOP_CLR_FD) = 0 [pid 5651] close(4) = 0 [pid 5651] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5651] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5651] openat(AT_FDCWD, NULL, O_RDWR [pid 5650] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5651] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] <... futex resumed>) = 0 [pid 5650] exit_group(0 [pid 5651] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5650] <... exit_group resumed>) = ? [pid 5651] <... futex resumed>) = ? [pid 5651] +++ exited with 0 +++ [pid 5650] +++ exited with 0 +++ [ 116.509005][ T5651] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5652 attached , child_tidptr=0x55556782a6d0) = 5652 [pid 5652] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5652] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] chdir("./22") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5652] write(1, "executing program\n", 18) = 18 [pid 5652] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5652] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5652] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5653 attached [pid 5653] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5652] <... clone3 resumed> => {parent_tid=[5653]}, 88) = 5653 [pid 5653] <... rseq resumed>) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] <... set_robust_list resumed>) = 0 [pid 5652] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] <... futex resumed>) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5652] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5653] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5653] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5653] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5652] <... futex resumed>) = 0 [pid 5653] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5652] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5653] memfd_create("syzkaller", 0) = 3 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5653] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5653] close(3) = 0 [pid 5653] close(4) = 0 [pid 5653] mkdir("./file0", 0777) = 0 [pid 5653] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5653] chdir("./file0") = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5653] ioctl(4, LOOP_CLR_FD) = 0 [pid 5653] close(4) = 0 [pid 5653] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5652] <... futex resumed>) = 0 [pid 5652] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] <... futex resumed>) = 0 [pid 5652] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5653] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5653] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5652] <... futex resumed>) = 0 [ 117.015992][ T5653] loop0: detected capacity change from 0 to 32768 [pid 5653] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5652] exit_group(0 [pid 5653] <... futex resumed>) = ? [pid 5652] <... exit_group resumed>) = ? [pid 5653] +++ exited with 0 +++ [pid 5652] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5652, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556782a6d0) = 5654 ci2-upstream-fs/strace-static-x86_64: Process 5654 attached [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] chdir("./23") = 0 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5654] setpgid(0, 0) = 0 [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5654] write(3, "1000", 4) = 4 [pid 5654] close(3) = 0 [pid 5654] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5654] write(1, "executing program\n", 18) = 18 [pid 5654] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5654] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5654] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5654] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5655 attached [pid 5655] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5654] <... clone3 resumed> => {parent_tid=[5655]}, 88) = 5655 [pid 5655] <... rseq resumed>) = 0 [pid 5655] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [] [pid 5655] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5655] <... futex resumed>) = 0 [pid 5654] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5655] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5655] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5655] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5655] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5654] <... futex resumed>) = 0 [pid 5655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5654] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] memfd_create("syzkaller", 0 [pid 5654] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5655] <... memfd_create resumed>) = 3 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5655] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5655] close(3) = 0 [pid 5655] close(4) = 0 [pid 5655] mkdir("./file0", 0777) = 0 [pid 5655] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [ 117.599788][ T5655] loop0: detected capacity change from 0 to 32768 [pid 5655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5655] chdir("./file0") = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5655] ioctl(4, LOOP_CLR_FD) = 0 [pid 5655] close(4) = 0 [pid 5655] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5654] <... futex resumed>) = 0 [pid 5655] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5654] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5654] <... futex resumed>) = 0 [pid 5655] openat(AT_FDCWD, NULL, O_RDWR [pid 5654] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5655] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5655] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5655] <... futex resumed>) = 0 [pid 5655] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5654] exit_group(0 [pid 5655] <... futex resumed>) = ? [pid 5654] <... exit_group resumed>) = ? [pid 5655] +++ exited with 0 +++ [pid 5654] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5654, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5656 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] chdir("./24") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5656] write(1, "executing program\n", 18) = 18 [pid 5656] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5656] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5657 attached [pid 5657] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5657] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] <... clone3 resumed> => {parent_tid=[5657]}, 88) = 5657 [pid 5657] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5657] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5656] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5657] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5657] memfd_create("syzkaller", 0 [pid 5656] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5657] <... memfd_create resumed>) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5657] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] close(4) = 0 [pid 5657] mkdir("./file0", 0777) = 0 [pid 5657] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file0") = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [pid 5657] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] openat(AT_FDCWD, NULL, O_RDWR [pid 5656] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5657] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] exit_group(0 [pid 5657] <... futex resumed>) = ? [pid 5657] +++ exited with 0 +++ [pid 5656] <... exit_group resumed>) = ? [pid 5656] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5656, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 118.179299][ T5657] loop0: detected capacity change from 0 to 32768 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5658 attached [pid 5658] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5658 [pid 5658] <... set_robust_list resumed>) = 0 [pid 5658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5658] chdir("./25") = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5658] setpgid(0, 0) = 0 [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5658] write(3, "1000", 4) = 4 [pid 5658] close(3) = 0 [pid 5658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5658] write(1, "executing program\n", 18) = 18 [pid 5658] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5658] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5658] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5659 attached [pid 5659] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5658] <... clone3 resumed> => {parent_tid=[5659]}, 88) = 5659 [pid 5659] <... rseq resumed>) = 0 [pid 5658] rt_sigprocmask(SIG_SETMASK, [] [pid 5659] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5659] <... set_robust_list resumed>) = 0 [pid 5659] rt_sigprocmask(SIG_SETMASK, [] [pid 5658] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5659] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] <... futex resumed>) = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5658] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5659] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5659] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5659] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5658] <... futex resumed>) = 0 [pid 5658] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5659] <... futex resumed>) = 0 [pid 5658] <... futex resumed>) = 1 [pid 5658] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5659] memfd_create("syzkaller", 0) = 3 [pid 5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5659] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5659] close(3) = 0 [pid 5659] close(4) = 0 [pid 5659] mkdir("./file0", 0777) = 0 [pid 5659] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5659] chdir("./file0") = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5659] ioctl(4, LOOP_CLR_FD) = 0 [pid 5659] close(4) = 0 [pid 5659] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5658] <... futex resumed>) = 0 [pid 5658] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5658] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5659] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5659] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5658] <... futex resumed>) = 0 [pid 5659] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5658] exit_group(0) = ? [pid 5659] <... futex resumed>) = ? [pid 5659] +++ exited with 0 +++ [pid 5658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5658, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 118.643115][ T5659] loop0: detected capacity change from 0 to 32768 umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5660 attached , child_tidptr=0x55556782a6d0) = 5660 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5660] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5660] <... set_robust_list resumed>) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5660] chdir("./26") = 0 [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5660] setpgid(0, 0) = 0 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5660] write(3, "1000", 4) = 4 [pid 5660] close(3) = 0 [pid 5660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5660] write(1, "executing program\n", 18) = 18 [pid 5660] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 executing program [pid 5660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5660] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5660] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5661 attached => {parent_tid=[5661]}, 88) = 5661 [pid 5661] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5660] rt_sigprocmask(SIG_SETMASK, [] [pid 5661] <... rseq resumed>) = 0 [pid 5661] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5660] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5661] <... set_robust_list resumed>) = 0 [pid 5660] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5660] <... futex resumed>) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5660] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5661] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5661] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5661] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] <... futex resumed>) = 0 [pid 5661] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5660] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5661] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5661] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5661] close(3) = 0 [pid 5661] close(4) = 0 [pid 5661] mkdir("./file0", 0777) = 0 [pid 5661] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file0") = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [pid 5661] close(4) = 0 [pid 5661] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] <... futex resumed>) = 0 [pid 5661] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5660] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] <... futex resumed>) = 0 [pid 5661] openat(AT_FDCWD, NULL, O_RDWR [pid 5660] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5661] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5661] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] <... futex resumed>) = 0 [pid 5661] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5660] exit_group(0) = ? [pid 5661] <... futex resumed>) = ? [pid 5661] +++ exited with 0 +++ [pid 5660] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5660, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 119.138895][ T5661] loop0: detected capacity change from 0 to 32768 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5662 attached , child_tidptr=0x55556782a6d0) = 5662 [pid 5662] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] chdir("./27") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5662] write(1, "executing program\n", 18) = 18 [pid 5662] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5662] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5662] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5662] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5663 attached [pid 5663] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5662] <... clone3 resumed> => {parent_tid=[5663]}, 88) = 5663 [pid 5663] <... rseq resumed>) = 0 [pid 5663] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5662] rt_sigprocmask(SIG_SETMASK, [] [pid 5663] <... set_robust_list resumed>) = 0 [pid 5662] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5663] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] <... futex resumed>) = 0 [pid 5663] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5662] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5663] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] <... futex resumed>) = 0 [pid 5663] memfd_create("syzkaller", 0 [pid 5662] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5663] <... memfd_create resumed>) = 3 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5663] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5663] close(3) = 0 [pid 5663] close(4) = 0 [pid 5663] mkdir("./file0", 0777) = 0 [pid 5663] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5663] chdir("./file0") = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [pid 5663] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5662] <... futex resumed>) = 0 [pid 5663] openat(AT_FDCWD, NULL, O_RDWR [pid 5662] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5663] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] exit_group(0 [pid 5663] <... futex resumed>) = ? [pid 5662] <... exit_group resumed>) = ? [pid 5663] +++ exited with 0 +++ [pid 5662] +++ exited with 0 +++ [ 119.668442][ T5663] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5662, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5664 attached , child_tidptr=0x55556782a6d0) = 5664 [pid 5664] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5664] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5664] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5664] chdir("./28") = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5664] setpgid(0, 0) = 0 [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5664] write(3, "1000", 4) = 4 [pid 5664] close(3) = 0 [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5664] write(1, "executing program\n", 18) = 18 executing program [pid 5664] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5664] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5664] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5665 attached => {parent_tid=[5665]}, 88) = 5665 [pid 5664] rt_sigprocmask(SIG_SETMASK, [] [pid 5665] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5665] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5664] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5665] <... set_robust_list resumed>) = 0 [pid 5664] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] rt_sigprocmask(SIG_SETMASK, [] [pid 5664] <... futex resumed>) = 0 [pid 5665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5664] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5665] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5665] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5665] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5664] <... futex resumed>) = 0 [pid 5665] memfd_create("syzkaller", 0 [pid 5664] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] <... memfd_create resumed>) = 3 [pid 5664] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5665] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5665] close(3) = 0 [pid 5665] close(4) = 0 [pid 5665] mkdir("./file0", 0777) = 0 [pid 5665] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5665] chdir("./file0") = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5665] ioctl(4, LOOP_CLR_FD) = 0 [pid 5665] close(4) = 0 [pid 5665] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5664] <... futex resumed>) = 0 [pid 5665] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5664] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] openat(AT_FDCWD, NULL, O_RDWR [pid 5664] <... futex resumed>) = 0 [pid 5665] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5664] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5665] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5664] <... futex resumed>) = 0 [pid 5665] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5664] exit_group(0) = ? [pid 5665] <... futex resumed>) = ? [pid 5665] +++ exited with 0 +++ [ 120.210089][ T5665] loop0: detected capacity change from 0 to 32768 [pid 5664] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5664, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5666 attached [pid 5666] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5666 [pid 5666] <... set_robust_list resumed>) = 0 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5666] chdir("./29") = 0 [pid 5666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5666] setpgid(0, 0) = 0 [pid 5666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5666] write(3, "1000", 4) = 4 [pid 5666] close(3) = 0 [pid 5666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5666] write(1, "executing program\n", 18) = 18 [pid 5666] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5666] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5666] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5667 attached [pid 5667] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5666] <... clone3 resumed> => {parent_tid=[5667]}, 88) = 5667 [pid 5667] <... rseq resumed>) = 0 [pid 5667] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5666] rt_sigprocmask(SIG_SETMASK, [] [pid 5667] <... set_robust_list resumed>) = 0 [pid 5666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] rt_sigprocmask(SIG_SETMASK, [] [pid 5666] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5666] <... futex resumed>) = 0 [pid 5667] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5666] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5667] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = 0 [pid 5667] <... futex resumed>) = 1 [pid 5666] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] memfd_create("syzkaller", 0 [pid 5666] <... futex resumed>) = 0 [pid 5666] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5667] <... memfd_create resumed>) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5667] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5667] close(3) = 0 [pid 5667] close(4) = 0 [pid 5667] mkdir("./file0", 0777) = 0 [pid 5667] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5667] chdir("./file0") = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5667] ioctl(4, LOOP_CLR_FD) = 0 [pid 5667] close(4) = 0 [pid 5667] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5667] openat(AT_FDCWD, NULL, O_RDWR [pid 5666] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5666] <... futex resumed>) = 0 [pid 5667] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5667] <... futex resumed>) = 0 [pid 5667] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] exit_group(0 [pid 5667] <... futex resumed>) = ? [pid 5666] <... exit_group resumed>) = ? [pid 5667] +++ exited with 0 +++ [ 120.783837][ T5667] loop0: detected capacity change from 0 to 32768 [pid 5666] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5666, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5668 attached [pid 5668] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5668 [pid 5668] <... set_robust_list resumed>) = 0 [pid 5668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5668] chdir("./30") = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] setpgid(0, 0) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5668] write(3, "1000", 4) = 4 [pid 5668] close(3) = 0 [pid 5668] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5668] write(1, "executing program\n", 18) = 18 [pid 5668] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5668] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5668] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5668] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5669 attached [pid 5669] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5668] <... clone3 resumed> => {parent_tid=[5669]}, 88) = 5669 [pid 5669] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5668] rt_sigprocmask(SIG_SETMASK, [] [pid 5669] <... set_robust_list resumed>) = 0 [pid 5668] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5668] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5669] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5669] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5669] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] memfd_create("syzkaller", 0 [pid 5668] <... futex resumed>) = 0 [pid 5669] <... memfd_create resumed>) = 3 [pid 5668] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5669] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5669] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5669] close(3) = 0 [pid 5669] close(4) = 0 [pid 5669] mkdir("./file0", 0777) = 0 [pid 5669] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5669] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5669] chdir("./file0") = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5669] ioctl(4, LOOP_CLR_FD) = 0 [pid 5669] close(4) = 0 [ 121.349303][ T5669] loop0: detected capacity change from 0 to 32768 [pid 5669] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] openat(AT_FDCWD, NULL, O_RDWR [pid 5668] <... futex resumed>) = 0 [pid 5669] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5668] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] <... futex resumed>) = 0 [pid 5668] exit_group(0 [pid 5669] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] <... exit_group resumed>) = ? [pid 5669] +++ exited with 0 +++ [pid 5668] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5668, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5670 attached , child_tidptr=0x55556782a6d0) = 5670 [pid 5670] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5670] <... set_robust_list resumed>) = 0 [pid 5670] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] chdir("./31") = 0 [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5670] setpgid(0, 0) = 0 [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5670] write(3, "1000", 4) = 4 [pid 5670] close(3) = 0 [pid 5670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5670] write(1, "executing program\n", 18) = 18 executing program [pid 5670] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5670] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5670] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5670] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5671 attached [pid 5671] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5671] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5670] <... clone3 resumed> => {parent_tid=[5671]}, 88) = 5671 [pid 5671] <... set_robust_list resumed>) = 0 [pid 5670] rt_sigprocmask(SIG_SETMASK, [] [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5671] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5670] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5670] <... futex resumed>) = 1 [pid 5671] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5670] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5671] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5671] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5671] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5670] <... futex resumed>) = 0 [pid 5670] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5670] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5671] <... futex resumed>) = 0 [pid 5671] memfd_create("syzkaller", 0) = 3 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5671] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5671] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5671] close(3) = 0 [pid 5671] close(4) = 0 [pid 5671] mkdir("./file0", 0777) = 0 [pid 5671] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5671] chdir("./file0") = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 121.956136][ T5671] loop0: detected capacity change from 0 to 32768 [pid 5671] ioctl(4, LOOP_CLR_FD) = 0 [pid 5671] close(4) = 0 [pid 5671] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5670] <... futex resumed>) = 0 [pid 5670] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5670] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5671] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5671] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5670] <... futex resumed>) = 0 [pid 5671] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5670] exit_group(0 [pid 5671] <... futex resumed>) = ? [pid 5670] <... exit_group resumed>) = ? [pid 5671] +++ exited with 0 +++ [pid 5670] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5670, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5672 attached , child_tidptr=0x55556782a6d0) = 5672 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5672] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5672] <... set_robust_list resumed>) = 0 [pid 5672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5672] chdir("./32") = 0 [pid 5672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5672] setpgid(0, 0) = 0 [pid 5672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5672] write(3, "1000", 4) = 4 [pid 5672] close(3) = 0 [pid 5672] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5672] write(1, "executing program\n", 18) = 18 executing program [pid 5672] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5672] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5672] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5673 attached => {parent_tid=[5673]}, 88) = 5673 [pid 5673] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5672] rt_sigprocmask(SIG_SETMASK, [] [pid 5673] <... rseq resumed>) = 0 [pid 5672] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5672] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] <... set_robust_list resumed>) = 0 [pid 5672] <... futex resumed>) = 0 [pid 5673] rt_sigprocmask(SIG_SETMASK, [] [pid 5672] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5673] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5673] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5672] <... futex resumed>) = 0 [pid 5672] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5673] memfd_create("syzkaller", 0) = 3 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5673] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5673] close(3) = 0 [pid 5673] close(4) = 0 [pid 5673] mkdir("./file0", 0777) = 0 [pid 5673] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5673] chdir("./file0") = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5673] ioctl(4, LOOP_CLR_FD) = 0 [pid 5673] close(4) = 0 [pid 5673] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5672] <... futex resumed>) = 0 [pid 5672] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] openat(AT_FDCWD, NULL, O_RDWR [pid 5672] <... futex resumed>) = 0 [pid 5673] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5672] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5673] <... futex resumed>) = 0 [pid 5673] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5672] exit_group(0 [pid 5673] <... futex resumed>) = ? [pid 5672] <... exit_group resumed>) = ? [pid 5673] +++ exited with 0 +++ [pid 5672] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5672, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [ 122.442764][ T5673] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5674 attached [pid 5674] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5674 [pid 5674] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5674] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] chdir("./33") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5674] write(1, "executing program\n", 18) = 18 [pid 5674] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5674] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5674] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5675 attached [pid 5675] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5674] <... clone3 resumed> => {parent_tid=[5675]}, 88) = 5675 [pid 5675] <... rseq resumed>) = 0 [pid 5674] rt_sigprocmask(SIG_SETMASK, [] [pid 5675] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5675] <... set_robust_list resumed>) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [] [pid 5674] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] <... futex resumed>) = 0 [pid 5675] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5674] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5675] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5675] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5674] <... futex resumed>) = 0 [pid 5674] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5675] memfd_create("syzkaller", 0 [pid 5674] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5675] <... memfd_create resumed>) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5675] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5675] close(3) = 0 [pid 5675] close(4) = 0 [pid 5675] mkdir("./file0", 0777) = 0 [pid 5675] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file0") = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... futex resumed>) = 0 [pid 5675] <... futex resumed>) = 1 [pid 5674] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] openat(AT_FDCWD, NULL, O_RDWR [pid 5674] <... futex resumed>) = 0 [pid 5675] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5675] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 0 [pid 5674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5674] exit_group(0 [pid 5675] <... futex resumed>) = ? [pid 5674] <... exit_group resumed>) = ? [pid 5675] +++ exited with 0 +++ [pid 5674] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5674, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 122.980738][ T5675] loop0: detected capacity change from 0 to 32768 umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5676 attached , child_tidptr=0x55556782a6d0) = 5676 [pid 5676] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5676] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] chdir("./34") = 0 [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5676] setpgid(0, 0) = 0 [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5676] write(3, "1000", 4) = 4 [pid 5676] close(3) = 0 [pid 5676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5676] write(1, "executing program\n", 18) = 18 executing program [pid 5676] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5676] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5677 attached [pid 5677] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5676] <... clone3 resumed> => {parent_tid=[5677]}, 88) = 5677 [pid 5677] <... rseq resumed>) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [] [pid 5677] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5676] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5677] <... set_robust_list resumed>) = 0 [pid 5676] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] rt_sigprocmask(SIG_SETMASK, [] [pid 5676] <... futex resumed>) = 0 [pid 5677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5676] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5677] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5677] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5676] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5677] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5677] close(3) = 0 [pid 5677] close(4) = 0 [pid 5677] mkdir("./file0", 0777) = 0 [pid 5677] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5677] chdir("./file0") = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5677] ioctl(4, LOOP_CLR_FD) = 0 [pid 5677] close(4) = 0 [pid 5677] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5677] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] <... futex resumed>) = 0 [pid 5677] openat(AT_FDCWD, NULL, O_RDWR [pid 5676] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5677] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5677] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] exit_group(0 [pid 5677] <... futex resumed>) = ? [pid 5676] <... exit_group resumed>) = ? [pid 5677] +++ exited with 0 +++ [pid 5676] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5676, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 123.508313][ T5677] loop0: detected capacity change from 0 to 32768 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5678 attached , child_tidptr=0x55556782a6d0) = 5678 [pid 5678] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5678] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5678] chdir("./35") = 0 [pid 5678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5678] setpgid(0, 0) = 0 [pid 5678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5678] write(3, "1000", 4) = 4 [pid 5678] close(3) = 0 [pid 5678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5678] write(1, "executing program\n", 18) = 18 executing program [pid 5678] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5678] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5678] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5679]}, 88) = 5679 [pid 5678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5679 attached [pid 5678] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5679] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5678] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... rseq resumed>) = 0 [pid 5679] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5679] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5679] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5679] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5678] <... futex resumed>) = 0 [pid 5679] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5678] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] memfd_create("syzkaller", 0 [pid 5678] <... futex resumed>) = 0 [pid 5678] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5679] <... memfd_create resumed>) = 3 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5679] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5679] close(3) = 0 [pid 5679] close(4) = 0 [pid 5679] mkdir("./file0", 0777) = 0 [pid 5679] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5679] chdir("./file0") = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5679] ioctl(4, LOOP_CLR_FD) = 0 [pid 5679] close(4) = 0 [pid 5679] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5678] <... futex resumed>) = 0 [pid 5679] openat(AT_FDCWD, NULL, O_RDWR [ 124.032936][ T5679] loop0: detected capacity change from 0 to 32768 [pid 5678] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5679] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = 0 [pid 5679] <... futex resumed>) = 0 [pid 5679] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5678] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5678] exit_group(0) = ? [pid 5679] <... futex resumed>) = ? [pid 5679] +++ exited with 0 +++ [pid 5678] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5678, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5680 attached , child_tidptr=0x55556782a6d0) = 5680 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5680] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5680] <... set_robust_list resumed>) = 0 [pid 5680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5680] chdir("./36") = 0 [pid 5680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5680] setpgid(0, 0) = 0 [pid 5680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5680] write(3, "1000", 4) = 4 [pid 5680] close(3) = 0 [pid 5680] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5680] write(1, "executing program\n", 18) = 18 executing program [pid 5680] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5680] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5680] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5680] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5680] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5681 attached [pid 5681] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5680] <... clone3 resumed> => {parent_tid=[5681]}, 88) = 5681 [pid 5681] <... rseq resumed>) = 0 [pid 5681] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5680] rt_sigprocmask(SIG_SETMASK, [] [pid 5681] <... set_robust_list resumed>) = 0 [pid 5680] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [] [pid 5680] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5680] <... futex resumed>) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5680] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5681] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5681] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5680] <... futex resumed>) = 0 [pid 5681] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5680] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 0 [pid 5680] <... futex resumed>) = 1 [pid 5681] memfd_create("syzkaller", 0 [pid 5680] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5681] <... memfd_create resumed>) = 3 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5681] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5681] close(3) = 0 [pid 5681] close(4) = 0 [pid 5681] mkdir("./file0", 0777) = 0 [pid 5681] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5681] chdir("./file0") = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5681] ioctl(4, LOOP_CLR_FD) = 0 [ 124.570967][ T5681] loop0: detected capacity change from 0 to 32768 [pid 5681] close(4) = 0 [pid 5681] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5680] <... futex resumed>) = 0 [pid 5681] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5680] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5680] <... futex resumed>) = 0 [pid 5681] openat(AT_FDCWD, NULL, O_RDWR [pid 5680] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5681] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5680] <... futex resumed>) = 0 [pid 5681] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5680] exit_group(0 [pid 5681] <... futex resumed>) = ? [pid 5680] <... exit_group resumed>) = ? [pid 5681] +++ exited with 0 +++ [pid 5680] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5680, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556782a6d0) = 5682 ci2-upstream-fs/strace-static-x86_64: Process 5682 attached [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5682] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5682] chdir("./37") = 0 [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5682] setpgid(0, 0) = 0 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5682] write(3, "1000", 4) = 4 [pid 5682] close(3) = 0 [pid 5682] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5682] write(1, "executing program\n", 18) = 18 [pid 5682] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5682] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5682] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5682] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5683 attached => {parent_tid=[5683]}, 88) = 5683 [pid 5683] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5683] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5682] rt_sigprocmask(SIG_SETMASK, [] [pid 5683] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5683] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5682] <... futex resumed>) = 0 [pid 5683] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5682] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5683] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5683] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5683] memfd_create("syzkaller", 0 [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5683] <... memfd_create resumed>) = 3 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5683] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5683] close(3) = 0 [pid 5683] close(4) = 0 [pid 5683] mkdir("./file0", 0777) = 0 [pid 5683] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5683] chdir("./file0") = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5683] ioctl(4, LOOP_CLR_FD) = 0 [pid 5683] close(4) = 0 [pid 5683] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5683] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5683] <... futex resumed>) = 0 [pid 5682] <... futex resumed>) = 1 [pid 5682] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5683] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5683] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5683] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] <... futex resumed>) = 0 [pid 5682] exit_group(0) = ? [pid 5683] <... futex resumed>) = ? [ 125.151089][ T5683] loop0: detected capacity change from 0 to 32768 [pid 5683] +++ exited with 0 +++ [pid 5682] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5682, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file0") = 0 umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5684 attached , child_tidptr=0x55556782a6d0) = 5684 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] chdir("./38") = 0 [pid 5684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5684] setpgid(0, 0) = 0 [pid 5684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5684] write(3, "1000", 4) = 4 [pid 5684] close(3) = 0 [pid 5684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5684] write(1, "executing program\n", 18) = 18 executing program [pid 5684] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5684] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5685]}, 88) = 5685 ci2-upstream-fs/strace-static-x86_64: Process 5685 attached [pid 5684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5684] <... futex resumed>) = 0 [pid 5685] <... rseq resumed>) = 0 [pid 5684] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5685] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5685] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = 0 [pid 5685] <... futex resumed>) = 1 [pid 5684] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] memfd_create("syzkaller", 0 [pid 5684] <... futex resumed>) = 0 [pid 5684] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5685] <... memfd_create resumed>) = 3 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5685] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5685] close(3) = 0 [pid 5685] close(4) = 0 [pid 5685] mkdir("./file0", 0777) = 0 [pid 5685] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5685] chdir("./file0") = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5685] ioctl(4, LOOP_CLR_FD) = 0 [pid 5685] close(4) = 0 [pid 5685] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = 0 [pid 5685] <... futex resumed>) = 1 [pid 5684] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] openat(AT_FDCWD, NULL, O_RDWR [pid 5684] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5685] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5684] <... futex resumed>) = 0 [ 125.657270][ T5685] loop0: detected capacity change from 0 to 32768 [pid 5684] exit_group(0 [pid 5685] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] <... exit_group resumed>) = ? [pid 5685] +++ exited with 0 +++ [pid 5684] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5684, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file0") = 0 umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5686 attached , child_tidptr=0x55556782a6d0) = 5686 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5686] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] <... set_robust_list resumed>) = 0 [pid 5686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5686] chdir("./39") = 0 [pid 5686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5686] setpgid(0, 0) = 0 [pid 5686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5686] write(3, "1000", 4) = 4 [pid 5686] close(3) = 0 [pid 5686] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5686] write(1, "executing program\n", 18) = 18 [pid 5686] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5686] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5686] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5686] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5686] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5687 attached [pid 5687] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5686] <... clone3 resumed> => {parent_tid=[5687]}, 88) = 5687 [pid 5687] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5686] rt_sigprocmask(SIG_SETMASK, [] [pid 5687] <... set_robust_list resumed>) = 0 [pid 5686] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5687] rt_sigprocmask(SIG_SETMASK, [] [pid 5686] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5687] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5687] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5686] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5687] memfd_create("syzkaller", 0) = 3 [pid 5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5687] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5687] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5687] close(3) = 0 [pid 5687] close(4) = 0 [pid 5687] mkdir("./file0", 0777) = 0 [pid 5687] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5687] chdir("./file0") = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5687] ioctl(4, LOOP_CLR_FD) = 0 [pid 5687] close(4) = 0 [pid 5687] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5686] <... futex resumed>) = 0 [pid 5687] openat(AT_FDCWD, NULL, O_RDWR [pid 5686] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5686] <... futex resumed>) = 0 [pid 5687] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] <... futex resumed>) = 0 [pid 5686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5687] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5686] exit_group(0 [pid 5687] <... futex resumed>) = ? [ 126.208372][ T5687] loop0: detected capacity change from 0 to 32768 [pid 5686] <... exit_group resumed>) = ? [pid 5687] +++ exited with 0 +++ [pid 5686] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5686, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file0") = 0 umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5688 attached , child_tidptr=0x55556782a6d0) = 5688 [pid 5688] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5688] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5688] chdir("./40") = 0 [pid 5688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5688] setpgid(0, 0) = 0 [pid 5688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5688] write(3, "1000", 4) = 4 [pid 5688] close(3) = 0 [pid 5688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5688] write(1, "executing program\n", 18) = 18 executing program [pid 5688] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5688] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5688] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5689 attached [pid 5689] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5688] <... clone3 resumed> => {parent_tid=[5689]}, 88) = 5689 [pid 5689] <... rseq resumed>) = 0 [pid 5689] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5688] rt_sigprocmask(SIG_SETMASK, [] [pid 5689] <... set_robust_list resumed>) = 0 [pid 5688] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5689] rt_sigprocmask(SIG_SETMASK, [] [pid 5688] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5688] <... futex resumed>) = 0 [pid 5688] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5689] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5689] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5689] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... futex resumed>) = 0 [pid 5689] <... futex resumed>) = 1 [pid 5688] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5689] memfd_create("syzkaller", 0) = 3 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5689] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5689] close(3) = 0 [pid 5689] close(4) = 0 [pid 5689] mkdir("./file0", 0777) = 0 [pid 5689] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5689] chdir("./file0") = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5689] ioctl(4, LOOP_CLR_FD) = 0 [pid 5689] close(4) = 0 [pid 5689] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] <... futex resumed>) = 0 [pid 5689] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5688] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5688] <... futex resumed>) = 0 [pid 5689] openat(AT_FDCWD, NULL, O_RDWR [pid 5688] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5689] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5689] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] <... futex resumed>) = 0 [pid 5689] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5688] exit_group(0 [pid 5689] <... futex resumed>) = ? [pid 5688] <... exit_group resumed>) = ? [pid 5689] +++ exited with 0 +++ [pid 5688] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5688, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 126.800903][ T5689] loop0: detected capacity change from 0 to 32768 umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file0") = 0 umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5690 attached , child_tidptr=0x55556782a6d0) = 5690 [pid 5690] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5690] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5690] chdir("./41") = 0 [pid 5690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5690] setpgid(0, 0) = 0 [pid 5690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5690] write(3, "1000", 4) = 4 [pid 5690] close(3) = 0 [pid 5690] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5690] write(1, "executing program\n", 18) = 18 [pid 5690] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5690] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5690] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5691 attached [pid 5691] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5690] <... clone3 resumed> => {parent_tid=[5691]}, 88) = 5691 [pid 5691] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5690] rt_sigprocmask(SIG_SETMASK, [] [pid 5691] <... set_robust_list resumed>) = 0 [pid 5690] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5690] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5690] <... futex resumed>) = 0 [pid 5691] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5690] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5691] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 1 [pid 5690] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] memfd_create("syzkaller", 0 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5691] <... memfd_create resumed>) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5691] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5691] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5691] close(3) = 0 [pid 5691] close(4) = 0 [pid 5691] mkdir("./file0", 0777) = 0 [pid 5691] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5691] chdir("./file0") = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5691] ioctl(4, LOOP_CLR_FD) = 0 [pid 5691] close(4) = 0 [pid 5691] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5691] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = 0 [pid 5691] openat(AT_FDCWD, NULL, O_RDWR [pid 5690] <... futex resumed>) = 1 [pid 5691] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5690] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5691] <... futex resumed>) = 0 [pid 5690] exit_group(0 [pid 5691] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] <... exit_group resumed>) = ? [pid 5691] <... futex resumed>) = ? [pid 5691] +++ exited with 0 +++ [ 127.381853][ T5691] loop0: detected capacity change from 0 to 32768 [pid 5690] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5690, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file0") = 0 umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5692 attached [pid 5692] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5692 [pid 5692] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5692] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5692] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5692] chdir("./42") = 0 [pid 5692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5692] setpgid(0, 0) = 0 [pid 5692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5692] write(3, "1000", 4) = 4 [pid 5692] close(3) = 0 [pid 5692] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5692] write(1, "executing program\n", 18) = 18 executing program [pid 5692] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5692] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5692] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5692] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5692] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5693 attached [pid 5693] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5692] <... clone3 resumed> => {parent_tid=[5693]}, 88) = 5693 [pid 5693] <... rseq resumed>) = 0 [pid 5692] rt_sigprocmask(SIG_SETMASK, [] [pid 5693] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5692] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5693] <... set_robust_list resumed>) = 0 [pid 5693] rt_sigprocmask(SIG_SETMASK, [] [pid 5692] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5692] <... futex resumed>) = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5692] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5693] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5693] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5693] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5692] <... futex resumed>) = 0 [pid 5693] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5692] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5692] <... futex resumed>) = 0 [pid 5693] memfd_create("syzkaller", 0 [pid 5692] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5693] <... memfd_create resumed>) = 3 [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5693] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5693] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5693] close(3) = 0 [pid 5693] close(4) = 0 [pid 5693] mkdir("./file0", 0777) = 0 [pid 5693] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [ 127.945739][ T5693] loop0: detected capacity change from 0 to 32768 [pid 5693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5693] chdir("./file0") = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5693] ioctl(4, LOOP_CLR_FD) = 0 [pid 5693] close(4) = 0 [pid 5693] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5692] <... futex resumed>) = 0 [pid 5693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5692] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] openat(AT_FDCWD, NULL, O_RDWR [pid 5692] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5693] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5693] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5692] <... futex resumed>) = 0 [pid 5693] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5692] exit_group(0 [pid 5693] <... futex resumed>) = ? [pid 5692] <... exit_group resumed>) = ? [pid 5693] +++ exited with 0 +++ [pid 5692] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5692, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file0") = 0 umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5694 attached [pid 5694] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5694 [pid 5694] <... set_robust_list resumed>) = 0 [pid 5694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5694] chdir("./43") = 0 [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5694] setpgid(0, 0) = 0 [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5694] write(3, "1000", 4) = 4 [pid 5694] close(3) = 0 [pid 5694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5694] write(1, "executing program\n", 18) = 18 executing program [pid 5694] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5694] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5694] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5695 attached [pid 5695] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5695] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5694] <... clone3 resumed> => {parent_tid=[5695]}, 88) = 5695 [pid 5695] <... set_robust_list resumed>) = 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [] [pid 5694] rt_sigprocmask(SIG_SETMASK, [] [pid 5695] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5695] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5694] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] <... futex resumed>) = 0 [pid 5694] <... futex resumed>) = 1 [pid 5695] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5694] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5695] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] <... futex resumed>) = 0 [pid 5695] memfd_create("syzkaller", 0 [pid 5694] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] <... memfd_create resumed>) = 3 [pid 5694] <... futex resumed>) = 0 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5694] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5695] <... mmap resumed>) = 0x7f2f3d80a000 [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5695] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5695] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5695] close(3) = 0 [pid 5695] close(4) = 0 [pid 5695] mkdir("./file0", 0777) = 0 [pid 5695] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5695] chdir("./file0") = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5695] ioctl(4, LOOP_CLR_FD) = 0 [pid 5695] close(4) = 0 [pid 5695] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] <... futex resumed>) = 0 [pid 5694] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5695] openat(AT_FDCWD, NULL, O_RDWR [pid 5694] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5695] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] <... futex resumed>) = 0 [ 128.508561][ T5695] loop0: detected capacity change from 0 to 32768 [pid 5695] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] exit_group(0 [pid 5695] <... futex resumed>) = ? [pid 5694] <... exit_group resumed>) = ? [pid 5695] +++ exited with 0 +++ [pid 5694] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5694, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file0") = 0 umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5696 attached [pid 5696] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5696 [pid 5696] <... set_robust_list resumed>) = 0 [pid 5696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5696] chdir("./44") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5696] setpgid(0, 0) = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5696] write(1, "executing program\n", 18) = 18 [pid 5696] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5696] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5696] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5697 attached [pid 5697] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5696] <... clone3 resumed> => {parent_tid=[5697]}, 88) = 5697 [pid 5697] <... rseq resumed>) = 0 [pid 5697] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5696] rt_sigprocmask(SIG_SETMASK, [] [pid 5697] <... set_robust_list resumed>) = 0 [pid 5696] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] rt_sigprocmask(SIG_SETMASK, [] [pid 5696] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5696] <... futex resumed>) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5696] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5697] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5697] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = 0 [pid 5697] <... futex resumed>) = 1 [pid 5696] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] memfd_create("syzkaller", 0 [pid 5696] <... futex resumed>) = 0 [pid 5696] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5697] <... memfd_create resumed>) = 3 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5697] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5697] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5697] close(3) = 0 [pid 5697] close(4) = 0 [pid 5697] mkdir("./file0", 0777) = 0 [pid 5697] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5697] chdir("./file0") = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5697] ioctl(4, LOOP_CLR_FD) = 0 [pid 5697] close(4) = 0 [pid 5697] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5696] <... futex resumed>) = 0 [pid 5696] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] openat(AT_FDCWD, NULL, O_RDWR [pid 5696] <... futex resumed>) = 0 [pid 5697] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5696] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5697] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] <... futex resumed>) = 0 [pid 5697] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] exit_group(0 [pid 5697] <... futex resumed>) = ? [pid 5696] <... exit_group resumed>) = ? [pid 5697] +++ exited with 0 +++ [pid 5696] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5696, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 129.068858][ T5697] loop0: detected capacity change from 0 to 32768 umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file0") = 0 umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5698 attached [pid 5698] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5698 [pid 5698] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5698] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5698] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5698] chdir("./45") = 0 [pid 5698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5698] setpgid(0, 0) = 0 [pid 5698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5698] write(3, "1000", 4) = 4 [pid 5698] close(3) = 0 [pid 5698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5698] write(1, "executing program\n", 18) = 18 [pid 5698] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 executing program [pid 5698] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5698] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5698] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5698] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5699 attached [pid 5699] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5699] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5698] <... clone3 resumed> => {parent_tid=[5699]}, 88) = 5699 [pid 5699] <... set_robust_list resumed>) = 0 [pid 5698] rt_sigprocmask(SIG_SETMASK, [] [pid 5699] rt_sigprocmask(SIG_SETMASK, [] [pid 5698] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5699] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5698] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5698] <... futex resumed>) = 0 [pid 5699] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5698] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5699] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5699] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 1 [pid 5698] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] memfd_create("syzkaller", 0 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5699] <... memfd_create resumed>) = 3 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5699] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5699] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5699] close(3) = 0 [pid 5699] close(4) = 0 [pid 5699] mkdir("./file0", 0777) = 0 [pid 5699] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5699] chdir("./file0") = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5699] ioctl(4, LOOP_CLR_FD) = 0 [pid 5699] close(4) = 0 [pid 5699] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5698] <... futex resumed>) = 0 [pid 5699] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5698] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5698] <... futex resumed>) = 0 [ 129.534611][ T5699] loop0: detected capacity change from 0 to 32768 [pid 5699] openat(AT_FDCWD, NULL, O_RDWR [pid 5698] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5699] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5699] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] <... futex resumed>) = 0 [pid 5698] exit_group(0 [pid 5699] ???( [pid 5698] <... exit_group resumed>) = ? [pid 5699] <... ??? resumed>) = ? [pid 5699] +++ exited with 0 +++ [pid 5698] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5698, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file0") = 0 umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5700 attached , child_tidptr=0x55556782a6d0) = 5700 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5700] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5700] chdir("./46") = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5700] write(3, "1000", 4) = 4 [pid 5700] close(3) = 0 [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5700] write(1, "executing program\n", 18) = 18 [pid 5700] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5700] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5700] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5701 attached [pid 5701] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5701] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5700] <... clone3 resumed> => {parent_tid=[5701]}, 88) = 5701 [pid 5701] rt_sigprocmask(SIG_SETMASK, [] [pid 5700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5700] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5700] <... futex resumed>) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY [pid 5700] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5701] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5701] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5700] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5701] memfd_create("syzkaller", 0 [pid 5700] <... futex resumed>) = 0 [pid 5700] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5701] <... memfd_create resumed>) = 3 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5701] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5701] close(3) = 0 [pid 5701] close(4) = 0 [pid 5701] mkdir("./file0", 0777) = 0 [pid 5701] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./file0") = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5701] ioctl(4, LOOP_CLR_FD) = 0 [pid 5701] close(4) = 0 [pid 5701] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5701] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5700] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5700] <... futex resumed>) = 0 [pid 5700] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5701] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5701] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5700] exit_group(0) = ? [pid 5701] <... futex resumed>) = ? [ 130.052779][ T5701] loop0: detected capacity change from 0 to 32768 [pid 5701] +++ exited with 0 +++ [pid 5700] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5700, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file0") = 0 umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5702 attached , child_tidptr=0x55556782a6d0) = 5702 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5702] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5702] <... set_robust_list resumed>) = 0 [pid 5702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5702] chdir("./47") = 0 [pid 5702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5702] setpgid(0, 0) = 0 [pid 5702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5702] write(3, "1000", 4) = 4 [pid 5702] close(3) = 0 [pid 5702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5702] write(1, "executing program\n", 18) = 18 executing program [pid 5702] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5702] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5702] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5702] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5703 attached => {parent_tid=[5703]}, 88) = 5703 [pid 5702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5703] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5702] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5702] <... futex resumed>) = 0 [pid 5703] <... set_robust_list resumed>) = 0 [pid 5702] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5703] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5703] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5703] memfd_create("syzkaller", 0) = 3 [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5703] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5703] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5703] close(3) = 0 [pid 5703] close(4) = 0 [pid 5703] mkdir("./file0", 0777) = 0 [pid 5703] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5703] chdir("./file0") = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5703] ioctl(4, LOOP_CLR_FD) = 0 [pid 5703] close(4) = 0 [pid 5703] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5703] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5702] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5703] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5702] exit_group(0 [pid 5703] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5702] <... exit_group resumed>) = ? [pid 5703] +++ exited with 0 +++ [pid 5702] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5702, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 130.580463][ T5703] loop0: detected capacity change from 0 to 32768 umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file0") = 0 umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5704 attached [pid 5704] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5704 [pid 5704] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5704] chdir("./48") = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] setpgid(0, 0) = 0 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] write(3, "1000", 4) = 4 [pid 5704] close(3) = 0 [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5704] write(1, "executing program\n", 18) = 18 executing program [pid 5704] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5704] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5704] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5704] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5705 attached => {parent_tid=[5705]}, 88) = 5705 [pid 5704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5704] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5704] <... futex resumed>) = 0 [pid 5705] <... rseq resumed>) = 0 [pid 5704] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5705] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5705] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5705] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5704] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5705] memfd_create("syzkaller", 0) = 3 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5705] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5705] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5705] close(3) = 0 [pid 5705] close(4) = 0 [pid 5705] mkdir("./file0", 0777) = 0 [pid 5705] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5705] chdir("./file0") = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5705] ioctl(4, LOOP_CLR_FD) = 0 [pid 5705] close(4) = 0 [pid 5705] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5705] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5704] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] openat(AT_FDCWD, NULL, O_RDWR [pid 5704] <... futex resumed>) = 0 [pid 5705] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5704] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [ 131.110394][ T5705] loop0: detected capacity change from 0 to 32768 [pid 5704] exit_group(0 [pid 5705] <... futex resumed>) = ? [pid 5704] <... exit_group resumed>) = ? [pid 5705] +++ exited with 0 +++ [pid 5704] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5704, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file0") = 0 umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5706 attached , child_tidptr=0x55556782a6d0) = 5706 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5706] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5706] chdir("./49") = 0 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] setpgid(0, 0) = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5706] write(3, "1000", 4) = 4 [pid 5706] close(3) = 0 [pid 5706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5706] write(1, "executing program\n", 18) = 18 executing program [pid 5706] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5706] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5706] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5707 attached [pid 5707] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5706] <... clone3 resumed> => {parent_tid=[5707]}, 88) = 5707 [pid 5707] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5706] rt_sigprocmask(SIG_SETMASK, [] [pid 5707] rt_sigprocmask(SIG_SETMASK, [] [pid 5706] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5707] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5706] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5706] <... futex resumed>) = 0 [pid 5707] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY [pid 5706] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5707] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] memfd_create("syzkaller", 0 [pid 5706] <... futex resumed>) = 0 [pid 5707] <... memfd_create resumed>) = 3 [pid 5706] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5707] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5707] close(3) = 0 [pid 5707] close(4) = 0 [pid 5707] mkdir("./file0", 0777) = 0 [pid 5707] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5707] chdir("./file0") = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5707] ioctl(4, LOOP_CLR_FD) = 0 [pid 5707] close(4) = 0 [pid 5707] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] <... futex resumed>) = 0 [pid 5707] openat(AT_FDCWD, NULL, O_RDWR [pid 5706] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5706] <... futex resumed>) = 0 [pid 5707] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [ 131.694957][ T5707] loop0: detected capacity change from 0 to 32768 [pid 5706] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... futex resumed>) = 0 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] exit_group(0 [pid 5707] <... futex resumed>) = ? [pid 5706] <... exit_group resumed>) = ? [pid 5707] +++ exited with 0 +++ [pid 5706] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5706, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/file0") = 0 umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./49/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5708 attached [pid 5708] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5708 [pid 5708] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5708] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5708] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5708] chdir("./50") = 0 [pid 5708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5708] setpgid(0, 0) = 0 [pid 5708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5708] write(3, "1000", 4) = 4 [pid 5708] close(3) = 0 [pid 5708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5708] write(1, "executing program\n", 18) = 18 [pid 5708] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5708] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5708] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5708] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5709 attached [pid 5709] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5708] <... clone3 resumed> => {parent_tid=[5709]}, 88) = 5709 [pid 5709] <... rseq resumed>) = 0 [pid 5708] rt_sigprocmask(SIG_SETMASK, [] [pid 5709] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5708] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5709] <... set_robust_list resumed>) = 0 [pid 5708] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5708] <... futex resumed>) = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5708] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5709] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5709] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5709] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] <... futex resumed>) = 0 [pid 5709] <... futex resumed>) = 1 [pid 5708] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] memfd_create("syzkaller", 0 [pid 5708] <... futex resumed>) = 0 [pid 5708] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5709] <... memfd_create resumed>) = 3 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5709] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5709] close(3) = 0 [pid 5709] close(4) = 0 [pid 5709] mkdir("./file0", 0777) = 0 [pid 5709] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5709] chdir("./file0") = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5709] ioctl(4, LOOP_CLR_FD) = 0 [pid 5709] close(4) = 0 [pid 5709] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] <... futex resumed>) = 0 [pid 5709] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5708] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5708] <... futex resumed>) = 0 [ 132.273110][ T5709] loop0: detected capacity change from 0 to 32768 [pid 5709] openat(AT_FDCWD, NULL, O_RDWR [pid 5708] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5709] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5709] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] <... futex resumed>) = 0 [pid 5709] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5708] exit_group(0 [pid 5709] <... futex resumed>) = ? [pid 5709] +++ exited with 0 +++ [pid 5708] <... exit_group resumed>) = ? [pid 5708] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5708, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/file0") = 0 umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./50/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5710 attached , child_tidptr=0x55556782a6d0) = 5710 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5710] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5710] <... set_robust_list resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5710] chdir("./51") = 0 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5710] setpgid(0, 0) = 0 [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5710] write(3, "1000", 4) = 4 [pid 5710] close(3) = 0 [pid 5710] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5710] write(1, "executing program\n", 18) = 18 [pid 5710] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5710] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5710] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5710] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5711 attached [pid 5711] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5711] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5710] <... clone3 resumed> => {parent_tid=[5711]}, 88) = 5711 [pid 5711] <... set_robust_list resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [] [pid 5711] rt_sigprocmask(SIG_SETMASK, [] [pid 5710] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5711] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5710] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5710] <... futex resumed>) = 0 [pid 5711] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5710] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5711] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5711] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5711] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5710] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5711] memfd_create("syzkaller", 0 [pid 5710] <... futex resumed>) = 0 [pid 5710] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5711] <... memfd_create resumed>) = 3 [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5711] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5711] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5711] close(3) = 0 [pid 5711] close(4) = 0 [pid 5711] mkdir("./file0", 0777) = 0 [pid 5711] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5711] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5711] chdir("./file0") = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5711] ioctl(4, LOOP_CLR_FD) = 0 [ 132.804732][ T5711] loop0: detected capacity change from 0 to 32768 [pid 5711] close(4) = 0 [pid 5711] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5710] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] openat(AT_FDCWD, NULL, O_RDWR [pid 5710] <... futex resumed>) = 0 [pid 5711] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5710] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5711] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5711] <... futex resumed>) = 0 [pid 5710] exit_group(0 [pid 5711] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5710] <... exit_group resumed>) = ? [pid 5711] +++ exited with 0 +++ [pid 5710] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5710, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/file0") = 0 umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./51/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5712 attached , child_tidptr=0x55556782a6d0) = 5712 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5712] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5712] chdir("./52") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5712] write(1, "executing program\n", 18) = 18 [pid 5712] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5712] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5712] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5713 attached [pid 5713] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5712] <... clone3 resumed> => {parent_tid=[5713]}, 88) = 5713 [pid 5713] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5712] rt_sigprocmask(SIG_SETMASK, [] [pid 5713] <... set_robust_list resumed>) = 0 [pid 5712] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5712] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5712] <... futex resumed>) = 0 [pid 5713] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5712] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5713] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... futex resumed>) = 0 [pid 5713] <... futex resumed>) = 1 [pid 5712] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] memfd_create("syzkaller", 0 [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5713] <... memfd_create resumed>) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5713] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [pid 5713] close(4) = 0 [pid 5713] mkdir("./file0", 0777) = 0 [pid 5713] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5713] chdir("./file0") = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5713] ioctl(4, LOOP_CLR_FD) = 0 [pid 5713] close(4) = 0 [pid 5713] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5713] openat(AT_FDCWD, NULL, O_RDWR [pid 5712] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5713] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] exit_group(0 [pid 5713] <... futex resumed>) = ? [pid 5712] <... exit_group resumed>) = ? [pid 5713] +++ exited with 0 +++ [pid 5712] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5712, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 133.365142][ T5713] loop0: detected capacity change from 0 to 32768 umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/file0") = 0 umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./52/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5714 attached [pid 5714] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5714 [pid 5714] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5714] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] chdir("./53") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5714] write(1, "executing program\n", 18) = 18 executing program [pid 5714] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5714] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5714] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5716 attached => {parent_tid=[5716]}, 88) = 5716 [pid 5716] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5714] rt_sigprocmask(SIG_SETMASK, [] [pid 5716] <... rseq resumed>) = 0 [pid 5716] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5714] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5716] <... set_robust_list resumed>) = 0 [pid 5714] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] rt_sigprocmask(SIG_SETMASK, [] [pid 5714] <... futex resumed>) = 0 [pid 5716] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5716] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5716] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5716] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] <... futex resumed>) = 0 [pid 5716] <... futex resumed>) = 1 [pid 5714] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5716] memfd_create("syzkaller", 0 [pid 5714] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5716] <... memfd_create resumed>) = 3 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5716] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5716] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5716] close(3) = 0 [pid 5716] close(4) = 0 [pid 5716] mkdir("./file0", 0777) = 0 [pid 5716] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5716] chdir("./file0") = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5716] ioctl(4, LOOP_CLR_FD) = 0 [pid 5716] close(4) = 0 [pid 5716] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5714] <... futex resumed>) = 0 [pid 5714] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] openat(AT_FDCWD, NULL, O_RDWR [pid 5714] <... futex resumed>) = 0 [pid 5716] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5714] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5716] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5716] <... futex resumed>) = 0 [pid 5716] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5714] exit_group(0 [pid 5716] <... futex resumed>) = ? [pid 5714] <... exit_group resumed>) = ? [pid 5716] +++ exited with 0 +++ [pid 5714] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5714, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 133.896162][ T5716] loop0: detected capacity change from 0 to 32768 umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/file0") = 0 umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./53/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5718 attached , child_tidptr=0x55556782a6d0) = 5718 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5718] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5718] <... set_robust_list resumed>) = 0 [pid 5718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5718] chdir("./54") = 0 [pid 5718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5718] setpgid(0, 0) = 0 [pid 5718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5718] write(3, "1000", 4) = 4 [pid 5718] close(3) = 0 [pid 5718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5718] write(1, "executing program\n", 18) = 18 executing program [pid 5718] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5718] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5718] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5719 attached [pid 5719] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5718] <... clone3 resumed> => {parent_tid=[5719]}, 88) = 5719 [pid 5719] <... rseq resumed>) = 0 [pid 5718] rt_sigprocmask(SIG_SETMASK, [] [pid 5719] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5719] <... set_robust_list resumed>) = 0 [pid 5718] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5719] rt_sigprocmask(SIG_SETMASK, [] [pid 5718] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5719] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5719] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5719] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5719] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5718] <... futex resumed>) = 0 [pid 5718] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5719] memfd_create("syzkaller", 0 [pid 5718] <... futex resumed>) = 0 [pid 5718] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5719] <... memfd_create resumed>) = 3 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5719] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5719] close(3) = 0 [pid 5719] close(4) = 0 [pid 5719] mkdir("./file0", 0777) = 0 [pid 5719] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5719] chdir("./file0") = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5719] ioctl(4, LOOP_CLR_FD) = 0 [ 134.390864][ T5719] loop0: detected capacity change from 0 to 32768 [pid 5719] close(4) = 0 [pid 5719] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5718] <... futex resumed>) = 0 [pid 5718] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5718] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5719] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5719] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5718] <... futex resumed>) = 0 [pid 5719] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5718] exit_group(0 [pid 5719] <... futex resumed>) = ? [pid 5718] <... exit_group resumed>) = ? [pid 5719] +++ exited with 0 +++ [pid 5718] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5718, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/file0") = 0 umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./54/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5721 attached , child_tidptr=0x55556782a6d0) = 5721 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5721] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5721] chdir("./55") = 0 [pid 5721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5721] setpgid(0, 0) = 0 [pid 5721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5721] write(3, "1000", 4) = 4 [pid 5721] close(3) = 0 [pid 5721] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5721] write(1, "executing program\n", 18) = 18 [pid 5721] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5721] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5721] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5721] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5721] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5721] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5722 attached => {parent_tid=[5722]}, 88) = 5722 [pid 5721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5722] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5721] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5721] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5722] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5722] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5722] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5721] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] memfd_create("syzkaller", 0 [pid 5721] <... futex resumed>) = 0 [pid 5721] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5722] <... memfd_create resumed>) = 3 [pid 5722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5722] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5722] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5722] close(3) = 0 [pid 5722] close(4) = 0 [pid 5722] mkdir("./file0", 0777) = 0 [pid 5722] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5722] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5722] chdir("./file0") = 0 [pid 5722] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5722] ioctl(4, LOOP_CLR_FD) = 0 [pid 5722] close(4) = 0 [pid 5722] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5721] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5721] <... futex resumed>) = 0 [pid 5722] openat(AT_FDCWD, NULL, O_RDWR [pid 5721] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5722] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5722] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [ 134.897851][ T5722] loop0: detected capacity change from 0 to 32768 [pid 5721] exit_group(0) = ? [pid 5722] <... futex resumed>) = ? [pid 5722] +++ exited with 0 +++ [pid 5721] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5721, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/file0") = 0 umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./55/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5724 attached , child_tidptr=0x55556782a6d0) = 5724 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5724] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5724] <... set_robust_list resumed>) = 0 [pid 5724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] chdir("./56") = 0 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5724] setpgid(0, 0) = 0 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5724] write(3, "1000", 4) = 4 [pid 5724] close(3) = 0 [pid 5724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5724] write(1, "executing program\n", 18) = 18 executing program [pid 5724] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5724] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5724] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5724] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5725 attached => {parent_tid=[5725]}, 88) = 5725 [pid 5725] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] <... rseq resumed>) = 0 [pid 5725] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5724] <... futex resumed>) = 0 [pid 5725] <... set_robust_list resumed>) = 0 [pid 5725] rt_sigprocmask(SIG_SETMASK, [] [pid 5724] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5725] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5725] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5725] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5724] <... futex resumed>) = 0 [pid 5724] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5724] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5725] memfd_create("syzkaller", 0) = 3 [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5725] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5725] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5725] close(3) = 0 [pid 5725] close(4) = 0 [pid 5725] mkdir("./file0", 0777) = 0 [pid 5725] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5725] chdir("./file0") = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5725] ioctl(4, LOOP_CLR_FD) = 0 [pid 5725] close(4) = 0 [pid 5725] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5724] <... futex resumed>) = 0 [pid 5724] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] <... futex resumed>) = 0 [pid 5724] <... futex resumed>) = 1 [pid 5725] openat(AT_FDCWD, NULL, O_RDWR [pid 5724] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5725] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] <... futex resumed>) = 0 [pid 5725] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5724] exit_group(0 [pid 5725] <... futex resumed>) = ? [pid 5724] <... exit_group resumed>) = ? [pid 5725] +++ exited with 0 +++ [pid 5724] +++ exited with 0 +++ [ 135.419705][ T5725] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5724, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/file0") = 0 umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./56/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556782a6d0) = 5728 ci2-upstream-fs/strace-static-x86_64: Process 5728 attached [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5728] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] <... set_robust_list resumed>) = 0 [pid 5728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5728] chdir("./57") = 0 [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5728] setpgid(0, 0) = 0 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5728] write(3, "1000", 4) = 4 [pid 5728] close(3) = 0 [pid 5728] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5728] write(1, "executing program\n", 18) = 18 [pid 5728] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5728] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5728] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5728] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5729 attached [pid 5729] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5728] <... clone3 resumed> => {parent_tid=[5729]}, 88) = 5729 [pid 5729] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5728] rt_sigprocmask(SIG_SETMASK, [] [pid 5729] <... set_robust_list resumed>) = 0 [pid 5728] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5729] rt_sigprocmask(SIG_SETMASK, [] [pid 5728] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] <... futex resumed>) = 0 [pid 5729] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5728] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5729] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5729] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5729] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5728] <... futex resumed>) = 0 [pid 5729] memfd_create("syzkaller", 0 [pid 5728] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5729] <... memfd_create resumed>) = 3 [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5729] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5729] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5729] close(3) = 0 [pid 5729] close(4) = 0 [pid 5729] mkdir("./file0", 0777) = 0 [pid 5729] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5729] chdir("./file0") = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5729] ioctl(4, LOOP_CLR_FD) = 0 [pid 5729] close(4) = 0 [ 135.966116][ T5729] loop0: detected capacity change from 0 to 32768 [pid 5729] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5729] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5728] <... futex resumed>) = 0 [pid 5729] openat(AT_FDCWD, NULL, O_RDWR [pid 5728] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5729] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5729] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5729] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] exit_group(0 [pid 5729] <... futex resumed>) = ? [pid 5728] <... exit_group resumed>) = ? [pid 5729] +++ exited with 0 +++ [pid 5728] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5728, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/file0") = 0 umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./57/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5730 attached [pid 5730] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5730 [pid 5730] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5730] chdir("./58") = 0 [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5730] setpgid(0, 0) = 0 [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5730] write(3, "1000", 4) = 4 [pid 5730] close(3) = 0 [pid 5730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5730] write(1, "executing program\n", 18) = 18 executing program [pid 5730] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5730] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5730] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5730] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5731 attached [pid 5731] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5730] <... clone3 resumed> => {parent_tid=[5731]}, 88) = 5731 [pid 5731] <... rseq resumed>) = 0 [pid 5731] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5730] rt_sigprocmask(SIG_SETMASK, [] [pid 5731] <... set_robust_list resumed>) = 0 [pid 5730] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5730] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5730] <... futex resumed>) = 0 [pid 5731] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5730] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5731] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5731] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] <... futex resumed>) = 0 [pid 5731] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5730] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] memfd_create("syzkaller", 0 [pid 5730] <... futex resumed>) = 0 [pid 5730] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5731] <... memfd_create resumed>) = 3 [pid 5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5731] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5731] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5731] close(3) = 0 [pid 5731] close(4) = 0 [pid 5731] mkdir("./file0", 0777) = 0 [pid 5731] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5731] chdir("./file0") = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5731] ioctl(4, LOOP_CLR_FD) = 0 [pid 5731] close(4) = 0 [pid 5731] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] <... futex resumed>) = 0 [pid 5730] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] openat(AT_FDCWD, NULL, O_RDWR [pid 5730] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5731] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5731] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] <... futex resumed>) = 0 [pid 5730] exit_group(0) = ? [pid 5731] +++ exited with 0 +++ [pid 5730] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5730, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 136.513440][ T5731] loop0: detected capacity change from 0 to 32768 umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./58/file0") = 0 umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./58/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5732 attached , child_tidptr=0x55556782a6d0) = 5732 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5732] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5732] <... set_robust_list resumed>) = 0 [pid 5732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5732] chdir("./59") = 0 [pid 5732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5732] setpgid(0, 0) = 0 [pid 5732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5732] write(3, "1000", 4) = 4 [pid 5732] close(3) = 0 [pid 5732] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5732] write(1, "executing program\n", 18) = 18 [pid 5732] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5732] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5732] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5733 attached => {parent_tid=[5733]}, 88) = 5733 [pid 5733] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5732] rt_sigprocmask(SIG_SETMASK, [] [pid 5733] <... rseq resumed>) = 0 [pid 5732] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5733] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5732] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... set_robust_list resumed>) = 0 [pid 5732] <... futex resumed>) = 0 [pid 5733] rt_sigprocmask(SIG_SETMASK, [] [pid 5732] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5733] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5733] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5732] <... futex resumed>) = 1 [pid 5733] memfd_create("syzkaller", 0 [pid 5732] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5733] <... memfd_create resumed>) = 3 [pid 5733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5733] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5733] close(3) = 0 [pid 5733] close(4) = 0 [pid 5733] mkdir("./file0", 0777) = 0 [pid 5733] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5733] chdir("./file0") = 0 [pid 5733] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5733] ioctl(4, LOOP_CLR_FD) = 0 [pid 5733] close(4) = 0 [pid 5733] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5732] <... futex resumed>) = 0 [pid 5733] openat(AT_FDCWD, NULL, O_RDWR [pid 5732] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5732] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] exit_group(0 [pid 5733] <... futex resumed>) = ? [pid 5732] <... exit_group resumed>) = ? [pid 5733] +++ exited with 0 +++ [pid 5732] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5732, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 136.948579][ T5733] loop0: detected capacity change from 0 to 32768 umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./59/file0") = 0 umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./59/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5734 attached [pid 5734] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5734 [pid 5734] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5734] chdir("./60") = 0 [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5734] setpgid(0, 0) = 0 [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5734] write(3, "1000", 4) = 4 [pid 5734] close(3) = 0 [pid 5734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5734] write(1, "executing program\n", 18) = 18 executing program [pid 5734] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5734] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5734] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5734] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5735 attached [pid 5735] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5734] <... clone3 resumed> => {parent_tid=[5735]}, 88) = 5735 [pid 5735] <... rseq resumed>) = 0 [pid 5734] rt_sigprocmask(SIG_SETMASK, [] [pid 5735] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5734] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5735] <... set_robust_list resumed>) = 0 [pid 5734] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5735] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5734] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5735] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5735] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5735] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5734] <... futex resumed>) = 0 [pid 5735] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5734] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5734] <... futex resumed>) = 0 [pid 5735] memfd_create("syzkaller", 0 [pid 5734] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5735] <... memfd_create resumed>) = 3 [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5735] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5735] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5735] close(3) = 0 [pid 5735] close(4) = 0 [pid 5735] mkdir("./file0", 0777) = 0 [pid 5735] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5735] chdir("./file0") = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5735] ioctl(4, LOOP_CLR_FD) = 0 [pid 5735] close(4) = 0 [pid 5735] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5734] <... futex resumed>) = 0 [pid 5735] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5734] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5734] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5735] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5735] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5734] <... futex resumed>) = 0 [pid 5735] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5734] exit_group(0 [pid 5735] <... futex resumed>) = ? [pid 5734] <... exit_group resumed>) = ? [pid 5735] +++ exited with 0 +++ [pid 5734] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5734, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 137.478880][ T5735] loop0: detected capacity change from 0 to 32768 umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./60/file0") = 0 umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./60/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5736 attached , child_tidptr=0x55556782a6d0) = 5736 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5736] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5736] <... set_robust_list resumed>) = 0 [pid 5736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5736] chdir("./61") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] write(1, "executing program\n", 18) = 18 executing program [pid 5736] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5736] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5736] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5736] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5736] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5737 attached [pid 5737] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5736] <... clone3 resumed> => {parent_tid=[5737]}, 88) = 5737 [pid 5737] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5736] rt_sigprocmask(SIG_SETMASK, [] [pid 5737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5736] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5737] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] <... futex resumed>) = 0 [pid 5737] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5737] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5737] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... futex resumed>) = 0 [pid 5736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = 0 [pid 5736] <... futex resumed>) = 1 [pid 5737] memfd_create("syzkaller", 0 [pid 5736] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5737] <... memfd_create resumed>) = 3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5737] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5737] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5737] close(3) = 0 [pid 5737] close(4) = 0 [pid 5737] mkdir("./file0", 0777) = 0 [pid 5737] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5737] chdir("./file0") = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5737] ioctl(4, LOOP_CLR_FD) = 0 [pid 5737] close(4) = 0 [pid 5737] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5737] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] openat(AT_FDCWD, NULL, O_RDWR [pid 5736] <... futex resumed>) = 0 [pid 5737] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5737] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... futex resumed>) = 0 [pid 5737] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] exit_group(0 [pid 5737] <... futex resumed>) = ? [pid 5736] <... exit_group resumed>) = ? [ 137.946717][ T5737] loop0: detected capacity change from 0 to 32768 [pid 5737] +++ exited with 0 +++ [pid 5736] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5736, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./61/file0") = 0 umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./61/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5738 attached , child_tidptr=0x55556782a6d0) = 5738 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5738] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5738] chdir("./62") = 0 [pid 5738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5738] setpgid(0, 0) = 0 [pid 5738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5738] write(3, "1000", 4) = 4 [pid 5738] close(3) = 0 [pid 5738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5738] write(1, "executing program\n", 18) = 18 executing program [pid 5738] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5738] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5738] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5738] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5738] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5739 attached [pid 5739] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5738] <... clone3 resumed> => {parent_tid=[5739]}, 88) = 5739 [pid 5739] <... rseq resumed>) = 0 [pid 5738] rt_sigprocmask(SIG_SETMASK, [] [pid 5739] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5738] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5739] <... set_robust_list resumed>) = 0 [pid 5738] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] rt_sigprocmask(SIG_SETMASK, [] [pid 5738] <... futex resumed>) = 0 [pid 5739] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5738] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5739] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5739] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5738] <... futex resumed>) = 0 [pid 5739] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5738] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] memfd_create("syzkaller", 0 [pid 5738] <... futex resumed>) = 0 [pid 5738] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] <... memfd_create resumed>) = 3 [pid 5739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5739] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5739] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5739] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5739] close(3) = 0 [pid 5739] close(4) = 0 [pid 5739] mkdir("./file0", 0777) = 0 [ 138.519142][ T5739] loop0: detected capacity change from 0 to 32768 [pid 5739] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5739] chdir("./file0") = 0 [pid 5739] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5739] ioctl(4, LOOP_CLR_FD) = 0 [pid 5739] close(4) = 0 [pid 5739] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5738] <... futex resumed>) = 0 [pid 5739] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5738] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5739] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5738] <... futex resumed>) = 0 [pid 5739] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5738] exit_group(0 [pid 5739] <... futex resumed>) = ? [pid 5738] <... exit_group resumed>) = ? [pid 5739] +++ exited with 0 +++ [pid 5738] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5738, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./62/file0") = 0 umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./62/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5740 attached [pid 5740] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5740 [pid 5740] <... set_robust_list resumed>) = 0 [pid 5740] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5740] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5740] chdir("./63") = 0 [pid 5740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5740] setpgid(0, 0) = 0 [pid 5740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5740] write(3, "1000", 4) = 4 [pid 5740] close(3) = 0 [pid 5740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5740] write(1, "executing program\n", 18) = 18 executing program [pid 5740] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5740] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5740] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5741 attached [pid 5741] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5740] <... clone3 resumed> => {parent_tid=[5741]}, 88) = 5741 [pid 5741] <... rseq resumed>) = 0 [pid 5741] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5740] rt_sigprocmask(SIG_SETMASK, [] [pid 5741] <... set_robust_list resumed>) = 0 [pid 5740] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5741] rt_sigprocmask(SIG_SETMASK, [] [pid 5740] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5741] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5741] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5740] <... futex resumed>) = 0 [pid 5741] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5740] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5741] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5741] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5740] <... futex resumed>) = 0 [pid 5741] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5740] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5740] <... futex resumed>) = 0 [pid 5741] memfd_create("syzkaller", 0 [pid 5740] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5741] <... memfd_create resumed>) = 3 [pid 5741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5741] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5741] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5741] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5741] close(3) = 0 [pid 5741] close(4) = 0 [pid 5741] mkdir("./file0", 0777) = 0 [pid 5741] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5741] chdir("./file0") = 0 [pid 5741] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5741] ioctl(4, LOOP_CLR_FD) = 0 [pid 5741] close(4) = 0 [pid 5741] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... futex resumed>) = 0 [pid 5741] <... futex resumed>) = 1 [pid 5740] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5741] openat(AT_FDCWD, NULL, O_RDWR [pid 5740] <... futex resumed>) = 0 [pid 5741] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5740] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5741] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5741] <... futex resumed>) = 0 [ 139.136997][ T5741] loop0: detected capacity change from 0 to 32768 [pid 5740] exit_group(0) = ? [pid 5741] +++ exited with 0 +++ [pid 5740] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5740, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./63/file0") = 0 umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./63/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5742 attached , child_tidptr=0x55556782a6d0) = 5742 [pid 5742] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5742] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5742] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5742] chdir("./64") = 0 [pid 5742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5742] setpgid(0, 0) = 0 [pid 5742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5742] write(3, "1000", 4) = 4 [pid 5742] close(3) = 0 [pid 5742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5742] write(1, "executing program\n", 18) = 18 executing program [pid 5742] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5742] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5742] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5743 attached [pid 5743] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5742] <... clone3 resumed> => {parent_tid=[5743]}, 88) = 5743 [pid 5743] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5742] rt_sigprocmask(SIG_SETMASK, [] [pid 5743] <... set_robust_list resumed>) = 0 [pid 5742] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5743] rt_sigprocmask(SIG_SETMASK, [] [pid 5742] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5743] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5742] <... futex resumed>) = 0 [pid 5743] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5742] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5743] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5743] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5743] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5742] <... futex resumed>) = 0 [pid 5742] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5743] memfd_create("syzkaller", 0 [pid 5742] <... futex resumed>) = 0 [pid 5742] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5743] <... memfd_create resumed>) = 3 [pid 5743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5743] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5743] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5743] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5743] close(3) = 0 [pid 5743] close(4) = 0 [pid 5743] mkdir("./file0", 0777) = 0 [pid 5743] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5743] chdir("./file0") = 0 [pid 5743] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5743] ioctl(4, LOOP_CLR_FD) = 0 [pid 5743] close(4) = 0 [pid 5743] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = 0 [pid 5743] <... futex resumed>) = 1 [pid 5742] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5743] openat(AT_FDCWD, NULL, O_RDWR [pid 5742] <... futex resumed>) = 0 [pid 5743] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5742] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5743] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5743] <... futex resumed>) = 0 [pid 5742] exit_group(0 [pid 5743] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5742] <... exit_group resumed>) = ? [pid 5743] +++ exited with 0 +++ [pid 5742] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5742, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 139.677086][ T5743] loop0: detected capacity change from 0 to 32768 umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./64/file0") = 0 umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./64/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5744 attached , child_tidptr=0x55556782a6d0) = 5744 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5744] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5744] <... set_robust_list resumed>) = 0 [pid 5744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5744] chdir("./65") = 0 [pid 5744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5744] setpgid(0, 0) = 0 [pid 5744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5744] write(3, "1000", 4) = 4 [pid 5744] close(3) = 0 [pid 5744] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5744] write(1, "executing program\n", 18) = 18 [pid 5744] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5744] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5744] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5745 attached [pid 5745] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5744] <... clone3 resumed> => {parent_tid=[5745]}, 88) = 5745 [pid 5745] <... rseq resumed>) = 0 [pid 5744] rt_sigprocmask(SIG_SETMASK, [] [pid 5745] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5744] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5745] rt_sigprocmask(SIG_SETMASK, [] [pid 5744] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5744] <... futex resumed>) = 0 [pid 5745] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5744] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5745] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5745] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5745] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5744] <... futex resumed>) = 0 [pid 5745] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5744] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5744] <... futex resumed>) = 0 [pid 5745] memfd_create("syzkaller", 0 [pid 5744] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5745] <... memfd_create resumed>) = 3 [pid 5745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5745] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5745] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5745] close(3) = 0 [pid 5745] close(4) = 0 [pid 5745] mkdir("./file0", 0777) = 0 [pid 5745] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5745] chdir("./file0") = 0 [pid 5745] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5745] ioctl(4, LOOP_CLR_FD) = 0 [pid 5745] close(4) = 0 [pid 5745] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5744] <... futex resumed>) = 0 [pid 5744] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] openat(AT_FDCWD, NULL, O_RDWR [pid 5744] <... futex resumed>) = 0 [pid 5745] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5745] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5744] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5744] exit_group(0 [pid 5745] <... futex resumed>) = ? [pid 5744] <... exit_group resumed>) = ? [pid 5745] +++ exited with 0 +++ [ 140.190819][ T5745] loop0: detected capacity change from 0 to 32768 [pid 5744] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5744, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./65/file0") = 0 umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./65/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./65") = 0 mkdir("./66", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5746 attached , child_tidptr=0x55556782a6d0) = 5746 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5746] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5746] <... set_robust_list resumed>) = 0 [pid 5746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5746] chdir("./66") = 0 [pid 5746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5746] setpgid(0, 0) = 0 [pid 5746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5746] write(3, "1000", 4) = 4 [pid 5746] close(3) = 0 [pid 5746] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5746] write(1, "executing program\n", 18) = 18 [pid 5746] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5746] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5747]}, 88) = 5747 [pid 5746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5746] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-upstream-fs/strace-static-x86_64: Process 5747 attached [pid 5747] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5747] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5747] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5747] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5747] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5747] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5747] memfd_create("syzkaller", 0) = 3 [pid 5747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5747] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5747] close(3) = 0 [pid 5747] close(4) = 0 [pid 5747] mkdir("./file0", 0777) = 0 [pid 5747] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5747] chdir("./file0") = 0 [pid 5747] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5747] ioctl(4, LOOP_CLR_FD) = 0 [pid 5747] close(4) = 0 [pid 5747] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5747] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] <... futex resumed>) = 0 [pid 5746] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5747] <... futex resumed>) = 0 [pid 5746] <... futex resumed>) = 1 [pid 5747] openat(AT_FDCWD, NULL, O_RDWR [pid 5746] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5747] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5747] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5747] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] exit_group(0 [pid 5747] <... futex resumed>) = ? [pid 5746] <... exit_group resumed>) = ? [ 140.654992][ T5747] loop0: detected capacity change from 0 to 32768 [pid 5747] +++ exited with 0 +++ [pid 5746] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5746, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./66/file0") = 0 umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./66/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5748 attached , child_tidptr=0x55556782a6d0) = 5748 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5748] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5748] <... set_robust_list resumed>) = 0 [pid 5748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5748] chdir("./67") = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5748] setpgid(0, 0) = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] write(1, "executing program\n", 18) = 18 executing program [pid 5748] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5748] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5748] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5749 attached => {parent_tid=[5749]}, 88) = 5749 [pid 5749] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5748] rt_sigprocmask(SIG_SETMASK, [] [pid 5749] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5748] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5749] <... set_robust_list resumed>) = 0 [pid 5748] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5748] <... futex resumed>) = 0 [pid 5749] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5748] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5749] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5749] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] <... futex resumed>) = 0 [pid 5749] <... futex resumed>) = 1 [pid 5748] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] memfd_create("syzkaller", 0 [pid 5748] <... futex resumed>) = 0 [pid 5748] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5749] <... memfd_create resumed>) = 3 [pid 5749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5749] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5749] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5749] close(3) = 0 [pid 5749] close(4) = 0 [pid 5749] mkdir("./file0", 0777) = 0 [pid 5749] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5749] chdir("./file0") = 0 [pid 5749] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5749] ioctl(4, LOOP_CLR_FD) = 0 [pid 5749] close(4) = 0 [pid 5749] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] <... futex resumed>) = 0 [pid 5748] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] <... futex resumed>) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5749] openat(AT_FDCWD, NULL, O_RDWR [pid 5748] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5749] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5749] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5748] exit_group(0 [pid 5749] <... futex resumed>) = ? [pid 5748] <... exit_group resumed>) = ? [pid 5749] +++ exited with 0 +++ [pid 5748] +++ exited with 0 +++ [ 141.152291][ T5749] loop0: detected capacity change from 0 to 32768 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5748, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./67/file0") = 0 umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./67/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5750 attached , child_tidptr=0x55556782a6d0) = 5750 [pid 5750] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5750] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5750] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5750] chdir("./68") = 0 [pid 5750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5750] setpgid(0, 0) = 0 [pid 5750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5750] write(3, "1000", 4) = 4 [pid 5750] close(3) = 0 [pid 5750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5750] write(1, "executing program\n", 18) = 18 executing program [pid 5750] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5750] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5751 attached [pid 5751] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5750] <... clone3 resumed> => {parent_tid=[5751]}, 88) = 5751 [pid 5751] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5750] rt_sigprocmask(SIG_SETMASK, [] [pid 5751] <... set_robust_list resumed>) = 0 [pid 5750] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5751] rt_sigprocmask(SIG_SETMASK, [] [pid 5750] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5751] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5750] <... futex resumed>) = 0 [pid 5751] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5750] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5751] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5750] <... futex resumed>) = 0 [pid 5751] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5751] memfd_create("syzkaller", 0) = 3 [pid 5751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5751] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5751] close(3) = 0 [pid 5751] close(4) = 0 [pid 5751] mkdir("./file0", 0777) = 0 [pid 5751] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5751] chdir("./file0") = 0 [pid 5751] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5751] ioctl(4, LOOP_CLR_FD) = 0 [pid 5751] close(4) = 0 [pid 5751] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5751] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5751] <... futex resumed>) = 0 [pid 5751] openat(AT_FDCWD, NULL, O_RDWR [pid 5750] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5751] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5751] <... futex resumed>) = 0 [ 141.676573][ T5751] loop0: detected capacity change from 0 to 32768 [pid 5751] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] exit_group(0 [pid 5751] <... futex resumed>) = ? [pid 5750] <... exit_group resumed>) = ? [pid 5751] +++ exited with 0 +++ [pid 5750] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5750, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./68/file0") = 0 umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./68/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5752 attached , child_tidptr=0x55556782a6d0) = 5752 [pid 5752] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5752] chdir("./69") = 0 [pid 5752] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5752] setpgid(0, 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5752] <... setpgid resumed>) = 0 [pid 5752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5752] write(3, "1000", 4) = 4 [pid 5752] close(3) = 0 [pid 5752] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5752] write(1, "executing program\n", 18) = 18 [pid 5752] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5752] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5752] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5752] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5753 attached executing program [pid 5753] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5752] <... clone3 resumed> => {parent_tid=[5753]}, 88) = 5753 [pid 5753] <... rseq resumed>) = 0 [pid 5753] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5752] rt_sigprocmask(SIG_SETMASK, [] [pid 5753] <... set_robust_list resumed>) = 0 [pid 5752] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5753] rt_sigprocmask(SIG_SETMASK, [] [pid 5752] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5752] <... futex resumed>) = 0 [pid 5753] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5752] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5753] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5753] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5753] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = 0 [pid 5753] <... futex resumed>) = 1 [pid 5752] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] memfd_create("syzkaller", 0) = 3 [pid 5752] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5753] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5753] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5753] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5753] close(3) = 0 [pid 5753] close(4) = 0 [pid 5753] mkdir("./file0", 0777) = 0 [pid 5753] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5753] chdir("./file0") = 0 [pid 5753] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5753] ioctl(4, LOOP_CLR_FD) = 0 [pid 5753] close(4) = 0 [pid 5753] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5752] <... futex resumed>) = 0 [pid 5753] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5752] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5752] <... futex resumed>) = 0 [pid 5753] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [ 142.165318][ T5753] loop0: detected capacity change from 0 to 32768 [pid 5752] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5753] <... futex resumed>) = 0 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5753] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5752] exit_group(0) = ? [pid 5753] <... futex resumed>) = ? [pid 5753] +++ exited with 0 +++ [pid 5752] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5752, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./69/file0") = 0 umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./69/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556782a6d0) = 5754 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5754 attached [pid 5754] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5754] chdir("./70") = 0 [pid 5754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5754] setpgid(0, 0) = 0 [pid 5754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5754] write(3, "1000", 4) = 4 [pid 5754] close(3) = 0 [pid 5754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5754] write(1, "executing program\n", 18) = 18 executing program [pid 5754] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5754] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5754] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5755 attached [pid 5755] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5754] <... clone3 resumed> => {parent_tid=[5755]}, 88) = 5755 [pid 5755] <... rseq resumed>) = 0 [pid 5754] rt_sigprocmask(SIG_SETMASK, [] [pid 5755] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5754] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5754] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] <... set_robust_list resumed>) = 0 [pid 5755] rt_sigprocmask(SIG_SETMASK, [] [pid 5754] <... futex resumed>) = 0 [pid 5755] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5754] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5755] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5755] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5755] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5754] <... futex resumed>) = 0 [pid 5755] <... futex resumed>) = 1 [pid 5754] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] memfd_create("syzkaller", 0) = 3 [pid 5754] <... futex resumed>) = 0 [pid 5755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5754] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5755] <... mmap resumed>) = 0x7f2f3d80a000 [pid 5755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5755] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5755] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5755] close(3) = 0 [pid 5755] close(4) = 0 [pid 5755] mkdir("./file0", 0777) = 0 [pid 5755] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5755] chdir("./file0") = 0 [pid 5755] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5755] ioctl(4, LOOP_CLR_FD) = 0 [pid 5755] close(4) = 0 [pid 5755] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5754] <... futex resumed>) = 0 [pid 5755] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [ 142.652630][ T5755] loop0: detected capacity change from 0 to 32768 [pid 5754] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] <... futex resumed>) = 0 [pid 5754] <... futex resumed>) = 1 [pid 5754] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5755] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5755] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5754] <... futex resumed>) = 0 [pid 5755] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5754] exit_group(0) = ? [pid 5755] <... futex resumed>) = ? [pid 5755] +++ exited with 0 +++ [pid 5754] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5754, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./70/file0") = 0 umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./70/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5756 attached , child_tidptr=0x55556782a6d0) = 5756 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5756] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5756] chdir("./71") = 0 [pid 5756] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5756] setpgid(0, 0) = 0 [pid 5756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5756] write(3, "1000", 4) = 4 [pid 5756] close(3) = 0 [pid 5756] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5756] write(1, "executing program\n", 18) = 18 executing program [pid 5756] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5756] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5756] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5756] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5756] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5757 attached [pid 5757] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5756] <... clone3 resumed> => {parent_tid=[5757]}, 88) = 5757 [pid 5757] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5757] rt_sigprocmask(SIG_SETMASK, [] [pid 5756] rt_sigprocmask(SIG_SETMASK, [] [pid 5757] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5756] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5757] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5756] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5756] <... futex resumed>) = 0 [pid 5757] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5756] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5757] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5757] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5757] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5756] <... futex resumed>) = 0 [pid 5756] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5757] memfd_create("syzkaller", 0) = 3 [pid 5756] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5757] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5757] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5757] close(3) = 0 [pid 5757] close(4) = 0 [pid 5757] mkdir("./file0", 0777) = 0 [pid 5757] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5757] chdir("./file0") = 0 [pid 5757] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5757] ioctl(4, LOOP_CLR_FD) = 0 [pid 5757] close(4) = 0 [pid 5757] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5756] <... futex resumed>) = 0 [pid 5757] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5756] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5756] <... futex resumed>) = 0 [pid 5757] openat(AT_FDCWD, NULL, O_RDWR [pid 5756] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5757] <... openat resumed>) = -1 EFAULT (Bad address) [ 143.184882][ T5757] loop0: detected capacity change from 0 to 32768 [pid 5757] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5756] <... futex resumed>) = 0 [pid 5757] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5756] exit_group(0 [pid 5757] <... futex resumed>) = ? [pid 5756] <... exit_group resumed>) = ? [pid 5757] +++ exited with 0 +++ [pid 5756] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5756, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./71/file0") = 0 umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./71/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5758 attached , child_tidptr=0x55556782a6d0) = 5758 [pid 5758] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5758] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5758] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5758] chdir("./72") = 0 [pid 5758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5758] setpgid(0, 0) = 0 [pid 5758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5758] write(3, "1000", 4) = 4 [pid 5758] close(3) = 0 [pid 5758] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5758] write(1, "executing program\n", 18) = 18 [pid 5758] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5758] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5758] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5758] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5759 attached [pid 5759] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5758] <... clone3 resumed> => {parent_tid=[5759]}, 88) = 5759 [pid 5759] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5758] rt_sigprocmask(SIG_SETMASK, [] [pid 5759] <... set_robust_list resumed>) = 0 [pid 5758] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5759] rt_sigprocmask(SIG_SETMASK, [] [pid 5758] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5759] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5758] <... futex resumed>) = 0 [pid 5759] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5758] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5759] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5759] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] <... futex resumed>) = 0 [pid 5759] memfd_create("syzkaller", 0 [pid 5758] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5759] <... memfd_create resumed>) = 3 [pid 5758] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5759] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5759] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5759] close(3) = 0 [pid 5759] close(4) = 0 [pid 5759] mkdir("./file0", 0777) = 0 [pid 5759] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5759] chdir("./file0") = 0 [pid 5759] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5759] ioctl(4, LOOP_CLR_FD) = 0 [pid 5759] close(4) = 0 [pid 5759] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] <... futex resumed>) = 0 [pid 5758] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] openat(AT_FDCWD, NULL, O_RDWR [pid 5758] <... futex resumed>) = 0 [pid 5759] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5759] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5759] <... futex resumed>) = 0 [pid 5759] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] exit_group(0) = ? [pid 5759] <... futex resumed>) = ? [pid 5759] +++ exited with 0 +++ [pid 5758] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5758, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 143.714104][ T5759] loop0: detected capacity change from 0 to 32768 openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./72/file0") = 0 umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./72/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5760 attached , child_tidptr=0x55556782a6d0) = 5760 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5760] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5760] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5760] chdir("./73") = 0 [pid 5760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5760] setpgid(0, 0) = 0 [pid 5760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5760] write(3, "1000", 4) = 4 [pid 5760] close(3) = 0 [pid 5760] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5760] write(1, "executing program\n", 18) = 18 executing program [pid 5760] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5760] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5760] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5760] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5760] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5761 attached [pid 5761] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5760] <... clone3 resumed> => {parent_tid=[5761]}, 88) = 5761 [pid 5761] <... rseq resumed>) = 0 [pid 5760] rt_sigprocmask(SIG_SETMASK, [] [pid 5761] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5760] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5761] <... set_robust_list resumed>) = 0 [pid 5761] rt_sigprocmask(SIG_SETMASK, [] [pid 5760] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5761] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5760] <... futex resumed>) = 0 [pid 5761] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5760] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5761] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5761] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5761] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5761] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] <... futex resumed>) = 0 [pid 5760] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5761] <... futex resumed>) = 0 [pid 5760] <... futex resumed>) = 1 [pid 5760] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5761] memfd_create("syzkaller", 0) = 3 [pid 5761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5761] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5761] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5761] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5761] close(3) = 0 [pid 5761] close(4) = 0 [pid 5761] mkdir("./file0", 0777) = 0 [pid 5761] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5761] chdir("./file0") = 0 [pid 5761] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5761] ioctl(4, LOOP_CLR_FD) = 0 [pid 5761] close(4) = 0 [pid 5761] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5761] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5760] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5761] openat(AT_FDCWD, NULL, O_RDWR [pid 5760] <... futex resumed>) = 0 [pid 5761] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5761] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5761] <... futex resumed>) = 0 [pid 5760] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5761] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] exit_group(0 [pid 5761] <... futex resumed>) = ? [pid 5760] <... exit_group resumed>) = ? [pid 5761] +++ exited with 0 +++ [pid 5760] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5760, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 144.285165][ T5761] loop0: detected capacity change from 0 to 32768 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./73/file0") = 0 umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./73/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5762 attached , child_tidptr=0x55556782a6d0) = 5762 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5762] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5762] chdir("./74") = 0 [pid 5762] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5762] setpgid(0, 0) = 0 [pid 5762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5762] write(3, "1000", 4) = 4 [pid 5762] close(3) = 0 [pid 5762] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5762] write(1, "executing program\n", 18) = 18 executing program [pid 5762] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5762] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5762] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5762] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5762] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5762] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5763 attached => {parent_tid=[5763]}, 88) = 5763 [pid 5763] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5762] rt_sigprocmask(SIG_SETMASK, [] [pid 5763] <... rseq resumed>) = 0 [pid 5762] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5763] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5762] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5763] <... set_robust_list resumed>) = 0 [pid 5762] <... futex resumed>) = 0 [pid 5763] rt_sigprocmask(SIG_SETMASK, [] [pid 5762] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5763] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5763] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5763] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5763] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5762] <... futex resumed>) = 0 [pid 5763] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5762] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5763] <... futex resumed>) = 0 [pid 5762] <... futex resumed>) = 1 [pid 5762] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5763] memfd_create("syzkaller", 0) = 3 [pid 5763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5763] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5763] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5763] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5763] close(3) = 0 [pid 5763] close(4) = 0 [pid 5763] mkdir("./file0", 0777) = 0 [pid 5763] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5763] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5763] chdir("./file0") = 0 [pid 5763] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5763] ioctl(4, LOOP_CLR_FD) = 0 [pid 5763] close(4) = 0 [pid 5763] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5762] <... futex resumed>) = 0 [pid 5763] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5762] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5762] <... futex resumed>) = 0 [pid 5763] openat(AT_FDCWD, NULL, O_RDWR [pid 5762] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5763] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5763] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5762] <... futex resumed>) = 0 [pid 5763] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5762] exit_group(0 [pid 5763] <... futex resumed>) = ? [pid 5762] <... exit_group resumed>) = ? [pid 5763] +++ exited with 0 +++ [pid 5762] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5762, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 144.763210][ T5763] loop0: detected capacity change from 0 to 32768 umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./74/file0") = 0 umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./74/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5764 attached [pid 5764] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5764 [pid 5764] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5764] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5764] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5764] chdir("./75") = 0 [pid 5764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5764] setpgid(0, 0) = 0 [pid 5764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5764] write(3, "1000", 4) = 4 [pid 5764] close(3) = 0 [pid 5764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5764] write(1, "executing program\n", 18) = 18 executing program [pid 5764] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5764] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5764] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5764] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5764] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5765 attached [pid 5765] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5764] <... clone3 resumed> => {parent_tid=[5765]}, 88) = 5765 [pid 5765] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5764] rt_sigprocmask(SIG_SETMASK, [] [pid 5765] <... set_robust_list resumed>) = 0 [pid 5764] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5765] rt_sigprocmask(SIG_SETMASK, [] [pid 5764] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5765] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5764] <... futex resumed>) = 0 [pid 5764] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5765] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5765] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5765] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5764] <... futex resumed>) = 0 [pid 5764] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] memfd_create("syzkaller", 0 [pid 5764] <... futex resumed>) = 0 [pid 5765] <... memfd_create resumed>) = 3 [pid 5764] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5765] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5765] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5765] close(3) = 0 [pid 5765] close(4) = 0 [pid 5765] mkdir("./file0", 0777) = 0 [pid 5765] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5765] chdir("./file0") = 0 [pid 5765] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5765] ioctl(4, LOOP_CLR_FD) = 0 [pid 5765] close(4) = 0 [pid 5765] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5764] <... futex resumed>) = 0 [pid 5765] openat(AT_FDCWD, NULL, O_RDWR [pid 5764] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5764] <... futex resumed>) = 0 [pid 5765] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5765] <... futex resumed>) = 0 [pid 5765] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 145.259235][ T5765] loop0: detected capacity change from 0 to 32768 [pid 5764] exit_group(0 [pid 5765] <... futex resumed>) = ? [pid 5764] <... exit_group resumed>) = ? [pid 5765] +++ exited with 0 +++ [pid 5764] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5764, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./75/file0") = 0 umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./75/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5766 attached , child_tidptr=0x55556782a6d0) = 5766 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5766] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5766] chdir("./76") = 0 [pid 5766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5766] setpgid(0, 0) = 0 [pid 5766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5766] write(3, "1000", 4) = 4 [pid 5766] close(3) = 0 [pid 5766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5766] write(1, "executing program\n", 18) = 18 [pid 5766] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5766] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 executing program [pid 5766] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5766] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5767 attached [pid 5767] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5766] <... clone3 resumed> => {parent_tid=[5767]}, 88) = 5767 [pid 5767] <... rseq resumed>) = 0 [pid 5767] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5766] rt_sigprocmask(SIG_SETMASK, [] [pid 5767] <... set_robust_list resumed>) = 0 [pid 5767] rt_sigprocmask(SIG_SETMASK, [] [pid 5766] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5767] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5766] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5766] <... futex resumed>) = 0 [pid 5767] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5766] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5767] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5767] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5766] <... futex resumed>) = 0 [pid 5767] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5766] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5766] <... futex resumed>) = 0 [pid 5767] memfd_create("syzkaller", 0 [pid 5766] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5767] <... memfd_create resumed>) = 3 [pid 5767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5767] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5767] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5767] close(3) = 0 [pid 5767] close(4) = 0 [pid 5767] mkdir("./file0", 0777) = 0 [pid 5767] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5767] chdir("./file0") = 0 [pid 5767] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 145.848775][ T5767] loop0: detected capacity change from 0 to 32768 [pid 5767] ioctl(4, LOOP_CLR_FD) = 0 [pid 5767] close(4) = 0 [pid 5767] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5766] <... futex resumed>) = 0 [pid 5767] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5766] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5766] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5767] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5767] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5766] <... futex resumed>) = 0 [pid 5767] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5766] exit_group(0 [pid 5767] <... futex resumed>) = ? [pid 5766] <... exit_group resumed>) = ? [pid 5767] +++ exited with 0 +++ [pid 5766] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5766, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./76/file0") = 0 umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./76/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./76") = 0 mkdir("./77", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556782a6d0) = 5768 ci2-upstream-fs/strace-static-x86_64: Process 5768 attached [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5768] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5768] <... set_robust_list resumed>) = 0 [pid 5768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5768] chdir("./77") = 0 [pid 5768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5768] setpgid(0, 0) = 0 [pid 5768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5768] write(3, "1000", 4) = 4 [pid 5768] close(3) = 0 [pid 5768] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5768] write(1, "executing program\n", 18) = 18 executing program [pid 5768] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5768] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5768] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5768] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5769]}, 88) = 5769 ci2-upstream-fs/strace-static-x86_64: Process 5769 attached [pid 5768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5768] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5769] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5769] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5769] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5769] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5769] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5769] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] <... futex resumed>) = 0 [pid 5768] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5769] memfd_create("syzkaller", 0) = 3 [pid 5769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5769] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5769] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5769] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5769] close(3) = 0 [pid 5769] close(4) = 0 [pid 5769] mkdir("./file0", 0777) = 0 [pid 5769] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5769] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5769] chdir("./file0") = 0 [pid 5769] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5769] ioctl(4, LOOP_CLR_FD) = 0 [pid 5769] close(4) = 0 [pid 5769] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5769] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] openat(AT_FDCWD, NULL, O_RDWR [pid 5768] <... futex resumed>) = 0 [pid 5769] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5768] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5769] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5769] <... futex resumed>) = 0 [pid 5769] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] exit_group(0 [pid 5769] <... futex resumed>) = ? [ 146.409140][ T5769] loop0: detected capacity change from 0 to 32768 [pid 5768] <... exit_group resumed>) = ? [pid 5769] +++ exited with 0 +++ [pid 5768] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5768, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./77/file0") = 0 umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./77/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./77") = 0 mkdir("./78", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5770 attached , child_tidptr=0x55556782a6d0) = 5770 [pid 5770] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5770] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5770] chdir("./78") = 0 [pid 5770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5770] setpgid(0, 0) = 0 [pid 5770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5770] write(3, "1000", 4) = 4 [pid 5770] close(3) = 0 [pid 5770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5770] write(1, "executing program\n", 18) = 18 executing program [pid 5770] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5770] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5770] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5770] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5770] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5771 attached [pid 5771] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5771] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5770] <... clone3 resumed> => {parent_tid=[5771]}, 88) = 5771 [pid 5771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5770] rt_sigprocmask(SIG_SETMASK, [] [pid 5771] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5770] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5770] <... futex resumed>) = 1 [pid 5771] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5770] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5771] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5771] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5771] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5771] memfd_create("syzkaller", 0 [pid 5770] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... memfd_create resumed>) = 3 [pid 5770] <... futex resumed>) = 0 [pid 5770] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5771] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5771] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5771] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5771] close(3) = 0 [pid 5771] close(4) = 0 [pid 5771] mkdir("./file0", 0777) = 0 [pid 5771] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5771] chdir("./file0") = 0 [pid 5771] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5771] ioctl(4, LOOP_CLR_FD) = 0 [pid 5771] close(4) = 0 [pid 5771] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5770] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] openat(AT_FDCWD, NULL, O_RDWR [pid 5770] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5771] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5771] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5771] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] exit_group(0 [pid 5771] <... futex resumed>) = ? [pid 5770] <... exit_group resumed>) = ? [pid 5771] +++ exited with 0 +++ [pid 5770] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5770, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 146.896054][ T5771] loop0: detected capacity change from 0 to 32768 umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./78/file0") = 0 umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./78/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./78") = 0 mkdir("./79", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5772 attached , child_tidptr=0x55556782a6d0) = 5772 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5772] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5772] chdir("./79") = 0 [pid 5772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5772] setpgid(0, 0) = 0 [pid 5772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5772] write(3, "1000", 4) = 4 [pid 5772] close(3) = 0 [pid 5772] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5772] write(1, "executing program\n", 18) = 18 executing program [pid 5772] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5772] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5772] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5772] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5772] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5773 attached [pid 5773] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5772] <... clone3 resumed> => {parent_tid=[5773]}, 88) = 5773 [pid 5773] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5773] rt_sigprocmask(SIG_SETMASK, [] [pid 5772] rt_sigprocmask(SIG_SETMASK, [] [pid 5773] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5773] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5772] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5773] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5772] <... futex resumed>) = 0 [pid 5773] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5772] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5773] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5773] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] <... futex resumed>) = 0 [pid 5773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5772] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5773] memfd_create("syzkaller", 0 [pid 5772] <... futex resumed>) = 0 [pid 5772] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5773] <... memfd_create resumed>) = 3 [pid 5773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5773] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5773] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5773] close(3) = 0 [pid 5773] close(4) = 0 [pid 5773] mkdir("./file0", 0777) = 0 [pid 5773] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5773] chdir("./file0") = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5773] ioctl(4, LOOP_CLR_FD) = 0 [pid 5773] close(4) = 0 [pid 5773] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5772] <... futex resumed>) = 0 [pid 5773] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5772] <... futex resumed>) = 0 [pid 5772] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5773] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5772] <... futex resumed>) = 0 [pid 5773] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] exit_group(0) = ? [pid 5773] <... futex resumed>) = ? [ 147.399549][ T5773] loop0: detected capacity change from 0 to 32768 [pid 5773] +++ exited with 0 +++ [pid 5772] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5772, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./79/file0") = 0 umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./79/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./79") = 0 mkdir("./80", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5774 attached , child_tidptr=0x55556782a6d0) = 5774 [pid 5774] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5774] chdir("./80") = 0 [pid 5774] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5774] setpgid(0, 0) = 0 [pid 5774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5774] write(3, "1000", 4) = 4 [pid 5774] close(3) = 0 [pid 5774] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5774] write(1, "executing program\n", 18) = 18 [pid 5774] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5774] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5774] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5774] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5775 attached [pid 5775] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5774] <... clone3 resumed> => {parent_tid=[5775]}, 88) = 5775 [pid 5775] <... rseq resumed>) = 0 [pid 5774] rt_sigprocmask(SIG_SETMASK, [] [pid 5775] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5774] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5775] <... set_robust_list resumed>) = 0 [pid 5774] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] rt_sigprocmask(SIG_SETMASK, [] [pid 5774] <... futex resumed>) = 0 [pid 5775] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5775] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5774] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5775] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5775] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5774] <... futex resumed>) = 0 [pid 5775] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5774] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5774] <... futex resumed>) = 0 [pid 5774] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5775] memfd_create("syzkaller", 0) = 3 [pid 5775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5775] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5775] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5775] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5775] close(3) = 0 [pid 5775] close(4) = 0 [pid 5775] mkdir("./file0", 0777) = 0 [pid 5775] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5775] chdir("./file0") = 0 [pid 5775] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5775] ioctl(4, LOOP_CLR_FD) = 0 [pid 5775] close(4) = 0 [pid 5775] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5774] <... futex resumed>) = 0 [pid 5774] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] openat(AT_FDCWD, NULL, O_RDWR [pid 5774] <... futex resumed>) = 0 [pid 5775] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5774] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5774] <... futex resumed>) = 0 [pid 5774] exit_group(0 [pid 5775] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5774] <... exit_group resumed>) = ? [pid 5775] <... futex resumed>) = ? [pid 5775] +++ exited with 0 +++ [ 147.934761][ T5775] loop0: detected capacity change from 0 to 32768 [pid 5774] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5774, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./80/file0") = 0 umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./80/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./80") = 0 mkdir("./81", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5776 attached , child_tidptr=0x55556782a6d0) = 5776 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5776] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5776] chdir("./81") = 0 [pid 5776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5776] setpgid(0, 0) = 0 [pid 5776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5776] write(3, "1000", 4) = 4 [pid 5776] close(3) = 0 [pid 5776] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5776] write(1, "executing program\n", 18) = 18 [pid 5776] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5776] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5776] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5776] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5776] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5777 attached [pid 5777] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5776] <... clone3 resumed> => {parent_tid=[5777]}, 88) = 5777 [pid 5777] <... rseq resumed>) = 0 [pid 5776] rt_sigprocmask(SIG_SETMASK, [] [pid 5777] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5776] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5777] <... set_robust_list resumed>) = 0 [pid 5776] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5777] rt_sigprocmask(SIG_SETMASK, [] [pid 5776] <... futex resumed>) = 0 [pid 5777] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5777] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5776] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5777] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5777] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5777] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5776] <... futex resumed>) = 0 [pid 5776] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5777] <... futex resumed>) = 1 [pid 5776] <... futex resumed>) = 0 [pid 5777] memfd_create("syzkaller", 0 [pid 5776] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5777] <... memfd_create resumed>) = 3 [pid 5777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5777] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5777] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5777] close(3) = 0 [pid 5777] close(4) = 0 [pid 5777] mkdir("./file0", 0777) = 0 [pid 5777] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5777] chdir("./file0") = 0 [pid 5777] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5777] ioctl(4, LOOP_CLR_FD) = 0 [pid 5777] close(4) = 0 [pid 5777] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5776] <... futex resumed>) = 0 [pid 5777] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5776] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5776] <... futex resumed>) = 0 [pid 5777] openat(AT_FDCWD, NULL, O_RDWR [pid 5776] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5777] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5777] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5776] <... futex resumed>) = 0 [pid 5777] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5776] exit_group(0 [pid 5777] <... futex resumed>) = ? [pid 5776] <... exit_group resumed>) = ? [pid 5777] +++ exited with 0 +++ [pid 5776] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5776, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [ 148.432898][ T5777] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./81/file0") = 0 umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./81/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./81") = 0 mkdir("./82", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5778 attached , child_tidptr=0x55556782a6d0) = 5778 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5778] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5778] <... set_robust_list resumed>) = 0 [pid 5778] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5778] chdir("./82") = 0 [pid 5778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5778] setpgid(0, 0) = 0 [pid 5778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5778] write(3, "1000", 4) = 4 [pid 5778] close(3) = 0 [pid 5778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5778] write(1, "executing program\n", 18) = 18 executing program [pid 5778] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5778] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5778] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5778] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5779 attached [pid 5779] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5778] <... clone3 resumed> => {parent_tid=[5779]}, 88) = 5779 [pid 5779] <... rseq resumed>) = 0 [pid 5779] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5778] rt_sigprocmask(SIG_SETMASK, [] [pid 5779] <... set_robust_list resumed>) = 0 [pid 5778] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5779] rt_sigprocmask(SIG_SETMASK, [] [pid 5778] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5778] <... futex resumed>) = 0 [pid 5779] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5778] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5779] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5779] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5779] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] <... futex resumed>) = 0 [pid 5779] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5778] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5778] <... futex resumed>) = 0 [pid 5778] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5779] memfd_create("syzkaller", 0) = 3 [pid 5779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5779] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5779] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5779] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5779] close(3) = 0 [pid 5779] close(4) = 0 [pid 5779] mkdir("./file0", 0777) = 0 [pid 5779] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5779] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5779] chdir("./file0") = 0 [pid 5779] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5779] ioctl(4, LOOP_CLR_FD) = 0 [pid 5779] close(4) = 0 [pid 5779] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] <... futex resumed>) = 0 [pid 5779] openat(AT_FDCWD, NULL, O_RDWR [pid 5778] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5778] <... futex resumed>) = 0 [pid 5779] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5778] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5779] <... futex resumed>) = 0 [pid 5778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5779] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [ 148.909606][ T5779] loop0: detected capacity change from 0 to 32768 [pid 5778] exit_group(0 [pid 5779] <... futex resumed>) = ? [pid 5778] <... exit_group resumed>) = ? [pid 5779] +++ exited with 0 +++ [pid 5778] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5778, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./82/file0") = 0 umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./82/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./82") = 0 mkdir("./83", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5780 attached [pid 5780] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... clone resumed>, child_tidptr=0x55556782a6d0) = 5780 [pid 5780] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5780] chdir("./83") = 0 [pid 5780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5780] setpgid(0, 0) = 0 [pid 5780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5780] write(3, "1000", 4) = 4 [pid 5780] close(3) = 0 [pid 5780] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5780] write(1, "executing program\n", 18) = 18 [pid 5780] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5780] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5780] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5781 attached [pid 5781] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5780] <... clone3 resumed> => {parent_tid=[5781]}, 88) = 5781 [pid 5781] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5780] rt_sigprocmask(SIG_SETMASK, [] [pid 5781] <... set_robust_list resumed>) = 0 [pid 5780] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5781] rt_sigprocmask(SIG_SETMASK, [] [pid 5780] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5780] <... futex resumed>) = 0 [pid 5781] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5780] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5781] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5781] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5781] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5780] <... futex resumed>) = 0 [pid 5781] <... futex resumed>) = 1 [pid 5780] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5780] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5781] memfd_create("syzkaller", 0) = 3 [pid 5781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5781] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5781] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5781] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5781] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5781] close(3) = 0 [pid 5781] close(4) = 0 [pid 5781] mkdir("./file0", 0777) = 0 [pid 5781] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5781] chdir("./file0") = 0 [pid 5781] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5781] ioctl(4, LOOP_CLR_FD) = 0 [pid 5781] close(4) = 0 [ 149.495608][ T5781] loop0: detected capacity change from 0 to 32768 [pid 5781] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5780] <... futex resumed>) = 0 [pid 5781] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5780] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] <... futex resumed>) = 0 [pid 5780] <... futex resumed>) = 1 [pid 5781] openat(AT_FDCWD, NULL, O_RDWR [pid 5780] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5781] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5781] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5780] <... futex resumed>) = 0 [pid 5781] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5780] exit_group(0) = ? [pid 5781] <... futex resumed>) = ? [pid 5781] +++ exited with 0 +++ [pid 5780] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5780, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./83/file0") = 0 umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./83/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./83") = 0 mkdir("./84", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5782 attached , child_tidptr=0x55556782a6d0) = 5782 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5782] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5782] <... set_robust_list resumed>) = 0 [pid 5782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5782] chdir("./84") = 0 [pid 5782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5782] setpgid(0, 0) = 0 [pid 5782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5782] write(3, "1000", 4) = 4 [pid 5782] close(3) = 0 [pid 5782] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5782] write(1, "executing program\n", 18) = 18 executing program [pid 5782] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5782] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5782] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5782] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5783 attached => {parent_tid=[5783]}, 88) = 5783 [pid 5783] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5783] <... rseq resumed>) = 0 [pid 5782] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5783] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5782] <... futex resumed>) = 0 [pid 5783] rt_sigprocmask(SIG_SETMASK, [] [pid 5782] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5783] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5783] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5783] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5783] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5782] <... futex resumed>) = 0 [pid 5782] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] memfd_create("syzkaller", 0 [pid 5782] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5783] <... memfd_create resumed>) = 3 [pid 5783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5783] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5783] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5783] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5783] close(3) = 0 [pid 5783] close(4) = 0 [pid 5783] mkdir("./file0", 0777) = 0 [pid 5783] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5783] chdir("./file0") = 0 [pid 5783] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5783] ioctl(4, LOOP_CLR_FD) = 0 [pid 5783] close(4) = 0 [pid 5783] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 149.976737][ T5783] loop0: detected capacity change from 0 to 32768 [pid 5782] <... futex resumed>) = 0 [pid 5783] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5782] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5782] <... futex resumed>) = 0 [pid 5783] openat(AT_FDCWD, NULL, O_RDWR [pid 5782] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5783] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5783] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5782] <... futex resumed>) = 0 [pid 5783] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5782] exit_group(0 [pid 5783] <... futex resumed>) = ? [pid 5782] <... exit_group resumed>) = ? [pid 5783] +++ exited with 0 +++ [pid 5782] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5782, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./84/file0") = 0 umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./84/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./84") = 0 mkdir("./85", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5784 attached , child_tidptr=0x55556782a6d0) = 5784 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5784] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5784] <... set_robust_list resumed>) = 0 [pid 5784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5784] chdir("./85") = 0 [pid 5784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5784] setpgid(0, 0) = 0 [pid 5784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] write(3, "1000", 4) = 4 [pid 5784] close(3) = 0 [pid 5784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5784] write(1, "executing program\n", 18) = 18 executing program [pid 5784] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5784] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5784] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5785]}, 88) = 5785 [pid 5784] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5785 attached , NULL, 8) = 0 [pid 5785] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5784] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] <... rseq resumed>) = 0 [pid 5784] <... futex resumed>) = 0 [pid 5785] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5784] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5785] <... set_robust_list resumed>) = 0 [pid 5785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5785] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5785] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5785] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5784] <... futex resumed>) = 0 [pid 5784] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5784] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5785] memfd_create("syzkaller", 0) = 3 [pid 5785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5785] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5785] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5785] close(3) = 0 [pid 5785] close(4) = 0 [pid 5785] mkdir("./file0", 0777) = 0 [pid 5785] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5785] chdir("./file0") = 0 [pid 5785] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5785] ioctl(4, LOOP_CLR_FD) = 0 [pid 5785] close(4) = 0 [pid 5785] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5784] <... futex resumed>) = 0 [pid 5785] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5784] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] openat(AT_FDCWD, NULL, O_RDWR [pid 5784] <... futex resumed>) = 0 [pid 5785] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5784] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5785] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5785] <... futex resumed>) = 0 [pid 5785] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5784] exit_group(0) = ? [pid 5785] <... futex resumed>) = ? [pid 5785] +++ exited with 0 +++ [pid 5784] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5784, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 150.468965][ T5785] loop0: detected capacity change from 0 to 32768 umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./85/file0") = 0 umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./85/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./85") = 0 mkdir("./86", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5786 attached , child_tidptr=0x55556782a6d0) = 5786 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5786] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5786] <... set_robust_list resumed>) = 0 [pid 5786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5786] chdir("./86") = 0 [pid 5786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5786] setpgid(0, 0) = 0 [pid 5786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5786] write(3, "1000", 4) = 4 [pid 5786] close(3) = 0 [pid 5786] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5786] write(1, "executing program\n", 18) = 18 [pid 5786] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5786] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5786] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5787 attached => {parent_tid=[5787]}, 88) = 5787 [pid 5787] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5786] rt_sigprocmask(SIG_SETMASK, [] [pid 5787] <... rseq resumed>) = 0 [pid 5786] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5787] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5786] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... set_robust_list resumed>) = 0 [pid 5786] <... futex resumed>) = 0 [pid 5787] rt_sigprocmask(SIG_SETMASK, [] [pid 5786] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5787] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5787] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5787] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5787] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5787] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5786] <... futex resumed>) = 0 [pid 5787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5786] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] memfd_create("syzkaller", 0 [pid 5786] <... futex resumed>) = 0 [pid 5787] <... memfd_create resumed>) = 3 [pid 5786] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5787] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5787] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5787] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5787] close(3) = 0 [pid 5787] close(4) = 0 [pid 5787] mkdir("./file0", 0777) = 0 [pid 5787] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5787] chdir("./file0") = 0 [pid 5787] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5787] ioctl(4, LOOP_CLR_FD) = 0 [pid 5787] close(4) = 0 [pid 5787] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5787] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5786] <... futex resumed>) = 0 [ 150.994892][ T5787] loop0: detected capacity change from 0 to 32768 [pid 5786] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5786] <... futex resumed>) = 0 [pid 5787] openat(AT_FDCWD, NULL, O_RDWR [pid 5786] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5787] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5787] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5786] <... futex resumed>) = 0 [pid 5787] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5786] exit_group(0 [pid 5787] <... futex resumed>) = ? [pid 5786] <... exit_group resumed>) = ? [pid 5787] +++ exited with 0 +++ [pid 5786] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5786, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./86/file0") = 0 umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./86/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./86") = 0 mkdir("./87", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5788 attached , child_tidptr=0x55556782a6d0) = 5788 [pid 5788] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5788] chdir("./87") = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5788] setpgid(0, 0) = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5788] write(3, "1000", 4) = 4 [pid 5788] close(3) = 0 [pid 5788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5788] write(1, "executing program\n", 18) = 18 [pid 5788] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5788] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 executing program [pid 5788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5789 attached [pid 5789] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5788] <... clone3 resumed> => {parent_tid=[5789]}, 88) = 5789 [pid 5789] <... rseq resumed>) = 0 [pid 5788] rt_sigprocmask(SIG_SETMASK, [] [pid 5789] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5788] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5789] <... set_robust_list resumed>) = 0 [pid 5788] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] rt_sigprocmask(SIG_SETMASK, [] [pid 5788] <... futex resumed>) = 0 [pid 5789] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5788] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5789] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5789] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5789] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5788] <... futex resumed>) = 0 [pid 5789] memfd_create("syzkaller", 0 [pid 5788] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5789] <... memfd_create resumed>) = 3 [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5789] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5789] close(3) = 0 [pid 5789] close(4) = 0 [pid 5789] mkdir("./file0", 0777) = 0 [pid 5789] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5789] chdir("./file0") = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5789] ioctl(4, LOOP_CLR_FD) = 0 [pid 5789] close(4) = 0 [pid 5789] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] <... futex resumed>) = 0 [pid 5788] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] <... futex resumed>) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5789] openat(AT_FDCWD, NULL, O_RDWR [pid 5788] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5789] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5789] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] exit_group(0 [pid 5789] <... futex resumed>) = ? [ 151.533489][ T5789] loop0: detected capacity change from 0 to 32768 [pid 5788] <... exit_group resumed>) = ? [pid 5789] +++ exited with 0 +++ [pid 5788] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5788, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./87/file0") = 0 umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./87/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./87") = 0 mkdir("./88", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5790 attached , child_tidptr=0x55556782a6d0) = 5790 [pid 5790] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5790] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5790] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5790] chdir("./88") = 0 [pid 5790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5790] setpgid(0, 0) = 0 [pid 5790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5790] write(3, "1000", 4) = 4 [pid 5790] close(3) = 0 [pid 5790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5790] write(1, "executing program\n", 18) = 18 executing program [pid 5790] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5790] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5790] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5790] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5790] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5791 attached [pid 5791] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5790] <... clone3 resumed> => {parent_tid=[5791]}, 88) = 5791 [pid 5791] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5790] rt_sigprocmask(SIG_SETMASK, [] [pid 5791] <... set_robust_list resumed>) = 0 [pid 5791] rt_sigprocmask(SIG_SETMASK, [] [pid 5790] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5791] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5790] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5790] <... futex resumed>) = 0 [pid 5791] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5790] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5791] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5791] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5790] <... futex resumed>) = 0 [pid 5791] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5790] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = 0 [pid 5790] <... futex resumed>) = 1 [pid 5790] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5791] memfd_create("syzkaller", 0) = 3 [pid 5791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5791] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5791] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5791] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5791] close(3) = 0 [pid 5791] close(4) = 0 [pid 5791] mkdir("./file0", 0777) = 0 [pid 5791] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5791] chdir("./file0") = 0 [pid 5791] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5791] ioctl(4, LOOP_CLR_FD) = 0 [pid 5791] close(4) = 0 [pid 5791] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5790] <... futex resumed>) = 0 [pid 5791] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5790] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = 0 [pid 5790] <... futex resumed>) = 1 [pid 5790] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5791] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [ 152.073249][ T5791] loop0: detected capacity change from 0 to 32768 [pid 5791] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5790] <... futex resumed>) = 0 [pid 5790] exit_group(0) = ? [pid 5791] +++ exited with 0 +++ [pid 5790] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5790, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./88/file0") = 0 umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./88/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./88") = 0 mkdir("./89", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5792 attached , child_tidptr=0x55556782a6d0) = 5792 [pid 5792] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5792] <... set_robust_list resumed>) = 0 [pid 5792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5792] chdir("./89") = 0 [pid 5792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5792] setpgid(0, 0) = 0 [pid 5792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "1000", 4) = 4 [pid 5792] close(3) = 0 [pid 5792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5792] write(1, "executing program\n", 18) = 18 executing program [pid 5792] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5792] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5792] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5792] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5792] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5793 attached [pid 5793] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5792] <... clone3 resumed> => {parent_tid=[5793]}, 88) = 5793 [pid 5793] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5792] rt_sigprocmask(SIG_SETMASK, [] [pid 5793] <... set_robust_list resumed>) = 0 [pid 5792] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5793] rt_sigprocmask(SIG_SETMASK, [] [pid 5792] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5792] <... futex resumed>) = 0 [pid 5793] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5792] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5793] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5793] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5793] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5792] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5792] <... futex resumed>) = 0 [pid 5793] memfd_create("syzkaller", 0 [pid 5792] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5793] <... memfd_create resumed>) = 3 [pid 5793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5793] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5793] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5793] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5793] close(3) = 0 [pid 5793] close(4) = 0 [pid 5793] mkdir("./file0", 0777) = 0 [pid 5793] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5793] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5793] chdir("./file0") = 0 [pid 5793] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5793] ioctl(4, LOOP_CLR_FD) = 0 [pid 5793] close(4) = 0 [pid 5793] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 1 [pid 5792] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] openat(AT_FDCWD, NULL, O_RDWR [pid 5792] <... futex resumed>) = 0 [pid 5792] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5793] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5792] <... futex resumed>) = 0 [pid 5793] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5792] exit_group(0 [pid 5793] <... futex resumed>) = ? [pid 5792] <... exit_group resumed>) = ? [pid 5793] +++ exited with 0 +++ [pid 5792] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5792, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 152.643004][ T5793] loop0: detected capacity change from 0 to 32768 umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./89/file0") = 0 umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./89/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./89") = 0 mkdir("./90", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5794 attached , child_tidptr=0x55556782a6d0) = 5794 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5794] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5794] chdir("./90") = 0 [pid 5794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5794] setpgid(0, 0) = 0 [pid 5794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5794] write(3, "1000", 4) = 4 [pid 5794] close(3) = 0 [pid 5794] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5794] write(1, "executing program\n", 18) = 18 [pid 5794] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5794] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5794] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5794] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5794] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5795 attached [pid 5795] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5794] <... clone3 resumed> => {parent_tid=[5795]}, 88) = 5795 [pid 5795] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5794] rt_sigprocmask(SIG_SETMASK, [] [pid 5795] rt_sigprocmask(SIG_SETMASK, [] [pid 5794] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5795] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5794] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5794] <... futex resumed>) = 0 [pid 5795] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY [pid 5794] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5795] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5795] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = 0 [pid 5794] <... futex resumed>) = 1 [pid 5795] memfd_create("syzkaller", 0 [pid 5794] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5795] <... memfd_create resumed>) = 3 [pid 5795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5795] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5795] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5795] close(3) = 0 [pid 5795] close(4) = 0 [pid 5795] mkdir("./file0", 0777) = 0 [pid 5795] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5795] chdir("./file0") = 0 [pid 5795] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5795] ioctl(4, LOOP_CLR_FD) = 0 [pid 5795] close(4) = 0 [pid 5795] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5794] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] openat(AT_FDCWD, NULL, O_RDWR [pid 5794] <... futex resumed>) = 0 [pid 5795] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5794] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5794] exit_group(0 [pid 5795] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] <... exit_group resumed>) = ? [pid 5795] <... futex resumed>) = ? [pid 5795] +++ exited with 0 +++ [pid 5794] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5794, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [ 153.187445][ T5795] loop0: detected capacity change from 0 to 32768 umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./90/file0") = 0 umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./90/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./90") = 0 mkdir("./91", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5796 attached , child_tidptr=0x55556782a6d0) = 5796 [pid 5796] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5796] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5796] chdir("./91") = 0 [pid 5796] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5796] setpgid(0, 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5796] <... setpgid resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5796] write(3, "1000", 4) = 4 [pid 5796] close(3) = 0 [pid 5796] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5796] write(1, "executing program\n", 18) = 18 [pid 5796] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5796] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5796] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5796] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5796] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5796] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5797 attached [pid 5797] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5796] <... clone3 resumed> => {parent_tid=[5797]}, 88) = 5797 [pid 5797] <... rseq resumed>) = 0 [pid 5796] rt_sigprocmask(SIG_SETMASK, [] [pid 5797] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5796] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5797] <... set_robust_list resumed>) = 0 [pid 5796] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] rt_sigprocmask(SIG_SETMASK, [] [pid 5796] <... futex resumed>) = 0 [pid 5797] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5797] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5796] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5797] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5797] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5796] <... futex resumed>) = 0 [pid 5796] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5797] memfd_create("syzkaller", 0 [pid 5796] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5797] <... memfd_create resumed>) = 3 [pid 5797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5797] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5797] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5797] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5797] close(3) = 0 [pid 5797] close(4) = 0 [pid 5797] mkdir("./file0", 0777) = 0 [pid 5797] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5797] chdir("./file0") = 0 [pid 5797] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5797] ioctl(4, LOOP_CLR_FD) = 0 [pid 5797] close(4) = 0 [pid 5797] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... futex resumed>) = 0 [pid 5797] <... futex resumed>) = 1 [pid 5796] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5796] <... futex resumed>) = 0 [pid 5797] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] <... futex resumed>) = 0 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 153.815233][ T5797] loop0: detected capacity change from 0 to 32768 [pid 5797] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5796] exit_group(0 [pid 5797] <... futex resumed>) = ? [pid 5797] +++ exited with 0 +++ [pid 5796] <... exit_group resumed>) = ? [pid 5796] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5796, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./91/file0") = 0 umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./91/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./91") = 0 mkdir("./92", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5798 attached , child_tidptr=0x55556782a6d0) = 5798 [pid 5798] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5798] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5798] chdir("./92") = 0 [pid 5798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5798] setpgid(0, 0) = 0 [pid 5798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5798] write(3, "1000", 4) = 4 [pid 5798] close(3) = 0 [pid 5798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5798] write(1, "executing program\n", 18) = 18 executing program [pid 5798] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5798] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5798] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5798] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5798] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5799 attached => {parent_tid=[5799]}, 88) = 5799 [pid 5799] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5798] rt_sigprocmask(SIG_SETMASK, [] [pid 5799] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5798] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5799] <... set_robust_list resumed>) = 0 [pid 5798] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5799] rt_sigprocmask(SIG_SETMASK, [] [pid 5798] <... futex resumed>) = 0 [pid 5799] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5799] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5798] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5799] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5799] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5799] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5798] <... futex resumed>) = 0 [pid 5799] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5798] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5798] <... futex resumed>) = 0 [pid 5799] memfd_create("syzkaller", 0 [pid 5798] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5799] <... memfd_create resumed>) = 3 [pid 5799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5799] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5799] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5799] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5799] close(3) = 0 [pid 5799] close(4) = 0 [pid 5799] mkdir("./file0", 0777) = 0 [pid 5799] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5799] chdir("./file0") = 0 [pid 5799] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5799] ioctl(4, LOOP_CLR_FD) = 0 [pid 5799] close(4) = 0 [pid 5799] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5798] <... futex resumed>) = 0 [pid 5799] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5798] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] openat(AT_FDCWD, NULL, O_RDWR [pid 5798] <... futex resumed>) = 0 [pid 5798] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5799] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5799] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5798] <... futex resumed>) = 0 [pid 5798] exit_group(0) = ? [pid 5799] +++ exited with 0 +++ [pid 5798] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5798, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 154.322564][ T5799] loop0: detected capacity change from 0 to 32768 umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./92/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./92/file0") = 0 umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./92/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./92") = 0 mkdir("./93", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5800 attached , child_tidptr=0x55556782a6d0) = 5800 [pid 5800] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5800] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5800] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5800] chdir("./93") = 0 [pid 5800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5800] setpgid(0, 0) = 0 [pid 5800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5800] write(3, "1000", 4) = 4 [pid 5800] close(3) = 0 [pid 5800] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5800] write(1, "executing program\n", 18) = 18 executing program [pid 5800] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5800] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5800] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5800] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5801 attached [pid 5801] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5800] <... clone3 resumed> => {parent_tid=[5801]}, 88) = 5801 [pid 5801] <... rseq resumed>) = 0 [pid 5800] rt_sigprocmask(SIG_SETMASK, [] [pid 5801] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5801] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5800] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5800] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5801] <... futex resumed>) = 0 [pid 5800] <... futex resumed>) = 1 [pid 5801] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5800] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5801] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5801] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5800] <... futex resumed>) = 0 [pid 5800] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5801] <... futex resumed>) = 0 [pid 5800] <... futex resumed>) = 1 [pid 5801] memfd_create("syzkaller", 0 [pid 5800] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5801] <... memfd_create resumed>) = 3 [pid 5801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5801] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5801] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5801] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5801] close(3) = 0 [pid 5801] close(4) = 0 [pid 5801] mkdir("./file0", 0777) = 0 [pid 5801] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5801] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5801] chdir("./file0") = 0 [pid 5801] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5801] ioctl(4, LOOP_CLR_FD) = 0 [pid 5801] close(4) = 0 [pid 5801] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5800] <... futex resumed>) = 0 [pid 5801] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5800] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5801] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5800] <... futex resumed>) = 0 [pid 5800] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5801] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [ 154.795482][ T5801] loop0: detected capacity change from 0 to 32768 [pid 5801] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5800] <... futex resumed>) = 0 [pid 5801] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5800] exit_group(0) = ? [pid 5801] <... futex resumed>) = ? [pid 5801] +++ exited with 0 +++ [pid 5800] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5800, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./93/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./93/file0") = 0 umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./93/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./93") = 0 mkdir("./94", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5802 attached , child_tidptr=0x55556782a6d0) = 5802 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5802] set_robust_list(0x55556782a6e0, 24) = 0 [pid 5802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5802] chdir("./94") = 0 [pid 5802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5802] setpgid(0, 0) = 0 [pid 5802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5802] write(3, "1000", 4) = 4 [pid 5802] close(3) = 0 [pid 5802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5802] write(1, "executing program\n", 18) = 18 executing program [pid 5802] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5802] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5802] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5802] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5803 attached => {parent_tid=[5803]}, 88) = 5803 [pid 5802] rt_sigprocmask(SIG_SETMASK, [] [pid 5803] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5802] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5802] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... rseq resumed>) = 0 [pid 5802] <... futex resumed>) = 0 [pid 5803] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5802] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] <... set_robust_list resumed>) = 0 [pid 5803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5803] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5803] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5802] <... futex resumed>) = 0 [pid 5803] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5802] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5802] <... futex resumed>) = 0 [pid 5802] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5803] memfd_create("syzkaller", 0) = 3 [pid 5803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5803] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5803] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5803] close(3) = 0 [pid 5803] close(4) = 0 [pid 5803] mkdir("./file0", 0777) = 0 [pid 5803] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5803] chdir("./file0") = 0 [pid 5803] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5803] ioctl(4, LOOP_CLR_FD) = 0 [pid 5803] close(4) = 0 [pid 5803] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5802] <... futex resumed>) = 0 [pid 5803] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5802] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] openat(AT_FDCWD, NULL, O_RDWR [pid 5802] <... futex resumed>) = 0 [pid 5803] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5802] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 5802] exit_group(0 [pid 5803] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5802] <... exit_group resumed>) = ? [pid 5803] +++ exited with 0 +++ [pid 5802] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5802, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 155.292770][ T5803] loop0: detected capacity change from 0 to 32768 umount2("./94", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./94/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./94/file0") = 0 umount2("./94/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./94/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./94") = 0 mkdir("./95", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5804 attached , child_tidptr=0x55556782a6d0) = 5804 [pid 5804] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5804] <... set_robust_list resumed>) = 0 [pid 5804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5804] chdir("./95") = 0 [pid 5804] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5804] setpgid(0, 0) = 0 [pid 5804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5804] write(3, "1000", 4) = 4 [pid 5804] close(3) = 0 [pid 5804] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5804] write(1, "executing program\n", 18) = 18 [pid 5804] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5804] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5804] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5804] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5804] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5805 attached => {parent_tid=[5805]}, 88) = 5805 [pid 5804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5805] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5804] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] <... rseq resumed>) = 0 [pid 5804] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5805] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5805] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] <... futex resumed>) = 0 [pid 5804] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = 1 [pid 5804] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5805] memfd_create("syzkaller", 0) = 3 [pid 5805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5805] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5805] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5805] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5805] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5805] close(3) = 0 [pid 5805] close(4) = 0 [pid 5805] mkdir("./file0", 0777) = 0 [pid 5805] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5805] chdir("./file0") = 0 [pid 5805] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5805] ioctl(4, LOOP_CLR_FD) = 0 [pid 5805] close(4) = 0 [pid 5805] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = 0 [pid 5805] <... futex resumed>) = 1 [pid 5805] openat(AT_FDCWD, NULL, O_RDWR [pid 5804] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5804] <... futex resumed>) = 0 [pid 5805] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] exit_group(0 [pid 5805] <... futex resumed>) = ? [pid 5804] <... exit_group resumed>) = ? [pid 5805] +++ exited with 0 +++ [pid 5804] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5804, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [ 155.810917][ T5805] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./95", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./95/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./95/file0") = 0 umount2("./95/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./95/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./95") = 0 mkdir("./96", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5806 attached , child_tidptr=0x55556782a6d0) = 5806 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5806] set_robust_list(0x55556782a6e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5806] <... set_robust_list resumed>) = 0 [pid 5806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5806] chdir("./96") = 0 [pid 5806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5806] setpgid(0, 0) = 0 [pid 5806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5806] write(3, "1000", 4) = 4 [pid 5806] close(3) = 0 [pid 5806] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5806] write(1, "executing program\n", 18) = 18 executing program [pid 5806] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5806] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0} => {parent_tid=[5807]}, 88) = 5807 [pid 5806] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5807 attached , NULL, 8) = 0 [pid 5807] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5806] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... rseq resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5806] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] set_robust_list(0x7f2f45c2a9a0, 24) = 0 [pid 5807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5807] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR) = -1 ENOENT (No such file or directory) [pid 5807] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5807] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5806] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5807] memfd_create("syzkaller", 0) = 3 [pid 5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5807] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5807] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5807] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5807] close(3) = 0 [pid 5807] close(4) = 0 [pid 5807] mkdir("./file0", 0777) = 0 [pid 5807] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5807] chdir("./file0") = 0 [pid 5807] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5807] ioctl(4, LOOP_CLR_FD) = 0 [pid 5807] close(4) = 0 [pid 5807] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5807] openat(AT_FDCWD, NULL, O_RDWR [pid 5806] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... openat resumed>) = -1 EFAULT (Bad address) [ 156.292510][ T5807] loop0: detected capacity change from 0 to 32768 [pid 5806] <... futex resumed>) = 0 [pid 5807] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] exit_group(0) = ? [pid 5807] <... futex resumed>) = ? [pid 5807] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5806, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./96", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./96/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555678337d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555678337d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./96/file0") = 0 umount2("./96/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./96/binderfs") = 0 getdents64(3, 0x55556782b790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./96") = 0 mkdir("./97", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5808 attached , child_tidptr=0x55556782a6d0) = 5808 [pid 5808] set_robust_list(0x55556782a6e0, 24 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5808] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5808] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5808] chdir("./97") = 0 [pid 5808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5808] setpgid(0, 0) = 0 [pid 5808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5808] write(3, "1000", 4) = 4 [pid 5808] close(3) = 0 [pid 5808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5808] write(1, "executing program\n", 18) = 18 executing program [pid 5808] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] rt_sigaction(SIGRT_1, {sa_handler=0x7f2f45c70bd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2f45c62ba0}, NULL, 8) = 0 [pid 5808] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2f45c0a000 [pid 5808] mprotect(0x7f2f45c0b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2f45c2a990, parent_tid=0x7f2f45c2a990, exit_signal=0, stack=0x7f2f45c0a000, stack_size=0x202c0, tls=0x7f2f45c2a6c0}ci2-upstream-fs/strace-static-x86_64: Process 5809 attached [pid 5809] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5808] <... clone3 resumed> => {parent_tid=[5809]}, 88) = 5809 [pid 5809] set_robust_list(0x7f2f45c2a9a0, 24 [pid 5808] rt_sigprocmask(SIG_SETMASK, [] [pid 5809] <... set_robust_list resumed>) = 0 [pid 5809] rt_sigprocmask(SIG_SETMASK, [] [pid 5808] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5809] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5808] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] openat(AT_FDCWD, "/proc/self/(null)", O_RDWR [pid 5808] <... futex resumed>) = 0 [pid 5809] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5808] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5809] openat(AT_FDCWD, "/proc/self/(null)", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 5809] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] <... futex resumed>) = 0 [pid 5809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5808] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5809] memfd_create("syzkaller", 0) = 3 [pid 5808] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2f3d80a000 [pid 5809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5809] munmap(0x7f2f3d80a000, 138412032) = 0 [pid 5809] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5809] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5809] close(3) = 0 [pid 5809] close(4) = 0 [pid 5809] mkdir("./file0", 0777) = 0 [pid 5809] mount("/dev/loop0", "./file0", "jfs", 0, "grpquota,gid=0x0000000000000000,nodiscard,errors=continue,quota,iocharset=cp950,usrquota,quota,grpqu"...) = 0 [pid 5809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5809] chdir("./file0") = 0 [pid 5809] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5809] ioctl(4, LOOP_CLR_FD) = 0 [pid 5809] close(4) = 0 [ 156.845186][ T5809] loop0: detected capacity change from 0 to 32768 [pid 5809] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] <... futex resumed>) = 0 [pid 5808] futex(0x7f2f45d0be28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5808] futex(0x7f2f45d0be2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5809] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address) [pid 5809] futex(0x7f2f45d0be2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] <... futex resumed>) = 0 [pid 5809] futex(0x7f2f45d0be28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] exit_group(0 [pid 5809] <... futex resumed>) = ? [pid 5808] <... exit_group resumed>) = ? [pid 5809] +++ exited with 0 +++ [pid 5808] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5808, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- umount2("./97", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556782b790 /* 4 entries */, 32768) = 112 [ 157.001922][ T92] ================================================================== [ 157.001940][ T92] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.001996][ T92] Read of size 4096 at addr ffff888043950000 by task kworker/u8:5/92 [ 157.002016][ T92] [ 157.002045][ T92] CPU: 0 UID: 0 PID: 92 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.002076][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.002091][ T92] Workqueue: loop0 loop_rootcg_workfn [ 157.002134][ T92] Call Trace: [ 157.002143][ T92] [ 157.002153][ T92] dump_stack_lvl+0xe8/0x150 [ 157.002188][ T92] print_address_description+0x55/0x1e0 [ 157.002222][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.002256][ T92] print_report+0x58/0x70 [ 157.002287][ T92] kasan_report+0x117/0x150 [ 157.002312][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.002353][ T92] kasan_check_range+0x264/0x2c0 [ 157.002378][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.002422][ T92] __asan_memcpy+0x29/0x70 [ 157.002454][ T92] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.002503][ T92] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 157.002540][ T92] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 157.002579][ T92] ? shmem_write_begin+0x1ce/0x320 [ 157.002614][ T92] generic_perform_write+0x5a8/0x8b0 [ 157.002652][ T92] ? __pfx_generic_perform_write+0x10/0x10 [ 157.002693][ T92] ? generic_write_checks_count+0x426/0x530 [ 157.002718][ T92] ? file_update_time_flags+0x2db/0x450 [ 157.002752][ T92] shmem_file_write_iter+0xfb/0x120 [ 157.002775][ T92] lo_rw_aio+0xc78/0xf30 [ 157.002827][ T92] ? reacquire_held_locks+0x117/0x1a0 [ 157.002864][ T92] ? __pfx_lo_rw_aio+0x10/0x10 [ 157.002895][ T92] ? rt_spin_unlock+0x159/0x200 [ 157.002922][ T92] ? kthread_associate_blkcg+0x359/0x600 [ 157.002943][ T92] ? rt_spin_unlock+0x165/0x200 [ 157.002963][ T92] loop_process_work+0x638/0x11d0 [ 157.002997][ T92] ? __pfx_loop_process_work+0x10/0x10 [ 157.003022][ T92] ? look_up_lock_class+0x57/0x110 [ 157.003049][ T92] ? register_lock_class+0x31/0x2e0 [ 157.003075][ T92] ? __lock_acquire+0x747/0x2de0 [ 157.003106][ T92] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.003131][ T92] ? lock_acquire+0x115/0x350 [ 157.003159][ T92] ? rcu_is_watching+0x16/0xb0 [ 157.003177][ T92] ? process_scheduled_works+0x97a/0x1630 [ 157.003206][ T92] process_scheduled_works+0xc3d/0x1630 [ 157.003245][ T92] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.003274][ T92] ? assign_work+0x3cf/0x5d0 [ 157.003300][ T92] worker_thread+0xa47/0xfb0 [ 157.003338][ T92] kthread+0x38b/0x470 [ 157.003356][ T92] ? __pfx_worker_thread+0x10/0x10 [ 157.003381][ T92] ? __pfx_kthread+0x10/0x10 [ 157.003399][ T92] ret_from_fork+0x514/0xb70 [ 157.003425][ T92] ? __pfx_ret_from_fork+0x10/0x10 [ 157.003443][ T92] ? __switch_to+0xc89/0x1420 [ 157.003471][ T92] ? __pfx_kthread+0x10/0x10 [ 157.003489][ T92] ret_from_fork_asm+0x1a/0x30 [ 157.003514][ T92] [ 157.003520][ T92] [ 157.003525][ T92] The buggy address belongs to the physical page: [ 157.003544][ T92] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x31 pfn:0x43950 [ 157.003561][ T92] flags: 0x80000000000000(node=0|zone=1) [ 157.003587][ T92] raw: 0080000000000000 ffffea0001080448 ffffea0000ee9248 0000000000000000 [ 157.003603][ T92] raw: 0000000000000031 0000000000000000 00000000ffffffff 0000000000000000 [ 157.003616][ T92] page dumped because: kasan: bad access detected [ 157.003628][ T92] page_owner tracks the page as freed [ 157.003635][ T92] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5809, tgid 5808 (syz-executor166), ts 156867360912 [ 157.003661][ T92] post_alloc_hook+0x1f9/0x250 [ 157.003685][ T92] get_page_from_freelist+0x2591/0x2600 [ 157.003702][ T92] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 157.003718][ T92] alloc_pages_mpol+0xd4/0x280 [ 157.003736][ T92] alloc_pages_noprof+0xd2/0x2f0 [ 157.003754][ T92] lmLogInit+0x357/0x1a20 [ 157.003771][ T92] lmLogOpen+0x4e3/0xf90 [ 157.003786][ T92] jfs_mount_rw+0xf3/0x670 [ 157.003802][ T92] jfs_fill_super+0x769/0xda0 [ 157.003824][ T92] get_tree_bdev_flags+0x430/0x4f0 [ 157.003847][ T92] vfs_get_tree+0x92/0x2a0 [ 157.003870][ T92] do_new_mount+0x325/0xb00 [ 157.003888][ T92] __se_sys_mount+0x31d/0x420 [ 157.003906][ T92] do_syscall_64+0x166/0x520 [ 157.003932][ T92] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.003948][ T92] page last free pid 5606 tgid 5606 ts 157001882893 stack trace: [ 157.003960][ T92] __free_frozen_pages+0xf8e/0x1070 [ 157.003985][ T92] lmLogShutdown+0x44e/0x850 [ 157.004002][ T92] lmLogClose+0x28c/0x530 [ 157.004019][ T92] jfs_umount+0x2da/0x3b0 [ 157.004034][ T92] jfs_put_super+0x8c/0x190 [ 157.004056][ T92] generic_shutdown_super+0x13d/0x2d0 [ 157.004076][ T92] kill_block_super+0x44/0xa0 [ 157.004098][ T92] deactivate_locked_super+0xbe/0x110 [ 157.004117][ T92] cleanup_mnt+0x204/0x2a0 [ 157.004140][ T92] task_work_run+0x1d9/0x270 [ 157.004158][ T92] ptrace_notify+0x27c/0x2b0 [ 157.004179][ T92] ptrace_report_syscall_exit+0x2d/0x50 [ 157.004196][ T92] do_syscall_64+0x4a0/0x520 [ 157.004219][ T92] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.004236][ T92] [ 157.004240][ T92] Memory state around the buggy address: [ 157.004249][ T92] ffff88804394ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.004261][ T92] ffff88804394ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.004273][ T92] >ffff888043950000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.004282][ T92] ^ [ 157.004291][ T92] ffff888043950080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.004303][ T92] ffff888043950100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.004312][ T92] ================================================================== [ 157.004346][ T92] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.581717][ T92] CPU: 0 UID: 0 PID: 92 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.591563][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.601647][ T92] Workqueue: loop0 loop_rootcg_workfn [ 157.607074][ T92] Call Trace: [ 157.610382][ T92] [ 157.613341][ T92] vpanic+0x56d/0xa60 [ 157.617368][ T92] ? rcu_is_watching+0x16/0xb0 [ 157.622171][ T92] ? __pfx_vpanic+0x10/0x10 [ 157.626720][ T92] panic+0xc5/0xd0 [ 157.630493][ T92] ? __pfx_panic+0x10/0x10 [ 157.634939][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.641059][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.647183][ T92] check_panic_on_warn+0x89/0xb0 [ 157.652168][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.658284][ T92] end_report+0x73/0x170 [ 157.662594][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.668735][ T92] kasan_report+0x128/0x150 [ 157.673271][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.679380][ T92] kasan_check_range+0x264/0x2c0 [ 157.684375][ T92] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.690499][ T92] __asan_memcpy+0x29/0x70 [ 157.694970][ T92] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 157.700917][ T92] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 157.707307][ T92] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 157.713423][ T92] ? shmem_write_begin+0x1ce/0x320 [ 157.718576][ T92] generic_perform_write+0x5a8/0x8b0 [ 157.723922][ T92] ? __pfx_generic_perform_write+0x10/0x10 [ 157.729768][ T92] ? generic_write_checks_count+0x426/0x530 [ 157.735698][ T92] ? file_update_time_flags+0x2db/0x450 [ 157.741275][ T92] shmem_file_write_iter+0xfb/0x120 [ 157.746501][ T92] lo_rw_aio+0xc78/0xf30 [ 157.750784][ T92] ? reacquire_held_locks+0x117/0x1a0 [ 157.756539][ T92] ? __pfx_lo_rw_aio+0x10/0x10 [ 157.761338][ T92] ? rt_spin_unlock+0x159/0x200 [ 157.766237][ T92] ? kthread_associate_blkcg+0x359/0x600 [ 157.771896][ T92] ? rt_spin_unlock+0x165/0x200 [ 157.776784][ T92] loop_process_work+0x638/0x11d0 [ 157.781864][ T92] ? __pfx_loop_process_work+0x10/0x10 [ 157.787371][ T92] ? look_up_lock_class+0x57/0x110 [ 157.792687][ T92] ? register_lock_class+0x31/0x2e0 [ 157.797957][ T92] ? __lock_acquire+0x747/0x2de0 [ 157.802936][ T92] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.807992][ T92] ? lock_acquire+0x115/0x350 [ 157.812704][ T92] ? rcu_is_watching+0x16/0xb0 [ 157.817497][ T92] ? process_scheduled_works+0x97a/0x1630 [ 157.823267][ T92] process_scheduled_works+0xc3d/0x1630 [ 157.828860][ T92] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.834870][ T92] ? assign_work+0x3cf/0x5d0 [ 157.839491][ T92] worker_thread+0xa47/0xfb0 [ 157.844135][ T92] kthread+0x38b/0x470 [ 157.848243][ T92] ? __pfx_worker_thread+0x10/0x10 [ 157.853400][ T92] ? __pfx_kthread+0x10/0x10 [ 157.858022][ T92] ret_from_fork+0x514/0xb70 [ 157.862643][ T92] ? __pfx_ret_from_fork+0x10/0x10 [ 157.867775][ T92] ? __switch_to+0xc89/0x1420 [ 157.872482][ T92] ? __pfx_kthread+0x10/0x10 [ 157.877101][ T92] ret_from_fork_asm+0x1a/0x30 [ 157.881901][ T92] [ 157.885115][ T92] Kernel Offset: disabled [ 157.889457][ T92] Rebooting in 86400 seconds..