./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1795440653 <...> Warning: Permanently added '10.128.1.107' (ECDSA) to the list of known hosts. execve("./syz-executor1795440653", ["./syz-executor1795440653"], 0x7fffc9a7fbe0 /* 10 vars */) = 0 brk(NULL) = 0x555555935000 brk(0x555555935d40) = 0x555555935d40 arch_prctl(ARCH_SET_FS, 0x555555935400) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555559356d0) = 5074 set_robust_list(0x5555559356e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f8d103ffd50, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f8d103ff2a0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f8d103ffdf0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8d103ff2a0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1795440653", 4096) = 28 brk(0x555555956d40) = 0x555555956d40 brk(0x555555957000) = 0x555555957000 mprotect(0x7f8d104c2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f8d103f9030, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f8d103ff2a0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f8d103f9030, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f8d103ff2a0}, NULL, 8) = 0 getpid() = 5074 mkdir("./syzkaller.kY7ohT", 0700) = 0 chmod("./syzkaller.kY7ohT", 0777) = 0 chdir("./syzkaller.kY7ohT") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5076 ./strace-static-x86_64: Process 5076 attached [pid 5076] set_robust_list(0x5555559356e0, 24) = 0 [pid 5076] chdir("./0") = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5076] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5077 attached , parent_tid=[5077], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5077 [pid 5076] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5077] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5077] close(3) = 0 [pid 5077] mkdir("./file0", 0777) = 0 [ 39.137897][ T5077] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5077 'syz-executor179' [ 39.173189][ T5077] loop0: detected capacity change from 0 to 8192 [ 39.183479][ T5077] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 39.196863][ T5077] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 39.206314][ T5077] REISERFS (device loop0): using ordered data mode [ 39.212824][ T5077] reiserfs: using flush barriers [ 39.218898][ T5077] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5077] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5077] chdir("./file0") = 0 [pid 5077] ioctl(4, LOOP_CLR_FD) = 0 [pid 5077] close(4) = 0 [pid 5077] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... futex resumed>) = 1 [pid 5077] mkdir("./file1", 000) = 0 [pid 5077] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... futex resumed>) = 1 [pid 5077] mkdir("./bus", 000) = 0 [pid 5077] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... futex resumed>) = 1 [ 39.235485][ T5077] REISERFS (device loop0): checking transaction log (loop0) [ 39.244527][ T5077] REISERFS (device loop0): Using r5 hash to sort names [ 39.252637][ T5077] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 39.265405][ T5077] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5077] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5077] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5076] exit_group(0) = ? [pid 5077] <... futex resumed>) = ? [pid 5077] +++ exited with 0 +++ [pid 5076] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x5555559356e0, 24) = 0 [pid 5079] chdir("./1") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 39.286300][ T5077] overlayfs: upper fs needs to support d_type. [ 39.293118][ T5077] overlayfs: upper fs does not support tmpfile. [ 39.300489][ T5077] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 39.309491][ T5077] overlayfs: failed to resolve './file0': -2 [pid 5079] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5080 attached , parent_tid=[5080], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5080 [pid 5080] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5080] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5079] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] memfd_create("syzkaller", 0) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5080] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5080] close(3) = 0 [pid 5080] mkdir("./file0", 0777) = 0 [ 39.398818][ T5080] loop0: detected capacity change from 0 to 8192 [ 39.408267][ T5080] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 39.421444][ T5080] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 39.430734][ T5080] REISERFS (device loop0): using ordered data mode [ 39.437308][ T5080] reiserfs: using flush barriers [pid 5080] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] chdir("./file0") = 0 [pid 5080] ioctl(4, LOOP_CLR_FD) = 0 [pid 5080] close(4) = 0 [pid 5080] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... futex resumed>) = 1 [pid 5080] mkdir("./file1", 000) = 0 [pid 5080] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... futex resumed>) = 1 [pid 5080] mkdir("./bus", 000) = 0 [pid 5080] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... futex resumed>) = 1 [ 39.442966][ T5080] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 39.459322][ T5080] REISERFS (device loop0): checking transaction log (loop0) [ 39.467909][ T5080] REISERFS (device loop0): Using r5 hash to sort names [ 39.474967][ T5080] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 39.487763][ T5080] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5080] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5080] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5079] exit_group(0) = ? [pid 5080] <... futex resumed>) = ? [pid 5080] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5082 ./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x5555559356e0, 24) = 0 [pid 5082] chdir("./2") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1000", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5082] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5082] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5083 attached [pid 5083] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5083] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... clone resumed>, parent_tid=[5083], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5083 [pid 5082] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5082] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 39.516296][ T5080] overlayfs: upper fs needs to support d_type. [ 39.522480][ T5080] overlayfs: upper fs does not support tmpfile. [ 39.529318][ T5080] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 39.537338][ T5080] overlayfs: failed to resolve './file0': -2 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5083] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./file0", 0777) = 0 [ 39.618726][ T5083] loop0: detected capacity change from 0 to 8192 [ 39.628775][ T5083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 39.642027][ T5083] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 39.651237][ T5083] REISERFS (device loop0): using ordered data mode [ 39.657793][ T5083] reiserfs: using flush barriers [pid 5083] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./file0") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [pid 5083] close(4) = 0 [pid 5083] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [pid 5083] mkdir("./file1", 000) = 0 [pid 5083] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [pid 5083] mkdir("./bus", 000) = 0 [pid 5083] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [ 39.663736][ T5083] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 39.680216][ T5083] REISERFS (device loop0): checking transaction log (loop0) [ 39.688287][ T5083] REISERFS (device loop0): Using r5 hash to sort names [ 39.696792][ T5083] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 39.709640][ T5083] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5083] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5083] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5082] exit_group(0) = ? [pid 5083] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x5555559356e0, 24) = 0 [pid 5085] chdir("./3") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5085] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5086], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5086 ./strace-static-x86_64: Process 5086 attached [pid 5085] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5086] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5086] memfd_create("syzkaller", 0) = 3 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 39.733124][ T5083] overlayfs: upper fs needs to support d_type. [ 39.739690][ T5083] overlayfs: upper fs does not support tmpfile. [ 39.747061][ T5083] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 39.755233][ T5083] overlayfs: failed to resolve './file0': -2 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5086] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5086] close(3) = 0 [pid 5086] mkdir("./file0", 0777) = 0 [ 39.835393][ T5086] loop0: detected capacity change from 0 to 8192 [ 39.844602][ T5086] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 39.857793][ T5086] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 39.867007][ T5086] REISERFS (device loop0): using ordered data mode [ 39.873507][ T5086] reiserfs: using flush barriers [pid 5086] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5086] chdir("./file0") = 0 [pid 5086] ioctl(4, LOOP_CLR_FD) = 0 [pid 5086] close(4) = 0 [pid 5086] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [pid 5086] mkdir("./file1", 000) = 0 [pid 5086] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [pid 5086] mkdir("./bus", 000) = 0 [pid 5086] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [ 39.879215][ T5086] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 39.895485][ T5086] REISERFS (device loop0): checking transaction log (loop0) [ 39.903490][ T5086] REISERFS (device loop0): Using r5 hash to sort names [ 39.910588][ T5086] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 39.923707][ T5086] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5086] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5086] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... futex resumed>) = 0 [pid 5085] exit_group(0 [pid 5086] <... futex resumed>) = ? [pid 5085] <... exit_group resumed>) = ? [pid 5086] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x5555559356e0, 24) = 0 [pid 5088] chdir("./4" [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5088 [pid 5088] <... chdir resumed>) = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5088] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5088] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5088] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5089], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5089 [pid 5088] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5089 attached [pid 5089] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 39.947267][ T5086] overlayfs: upper fs needs to support d_type. [ 39.954089][ T5086] overlayfs: upper fs does not support tmpfile. [ 39.960798][ T5086] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 39.969128][ T5086] overlayfs: failed to resolve './file0': -2 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5089] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5089] close(3) = 0 [pid 5089] mkdir("./file0", 0777) = 0 [ 40.047612][ T5089] loop0: detected capacity change from 0 to 8192 [ 40.057199][ T5089] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.070257][ T5089] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 40.079703][ T5089] REISERFS (device loop0): using ordered data mode [ 40.086211][ T5089] reiserfs: using flush barriers [pid 5089] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5089] chdir("./file0") = 0 [pid 5089] ioctl(4, LOOP_CLR_FD) = 0 [pid 5089] close(4) = 0 [pid 5089] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5089] mkdir("./file1", 000 [pid 5088] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... mkdir resumed>) = 0 [pid 5088] <... futex resumed>) = 0 [pid 5089] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] mkdir("./bus", 000 [ 40.091758][ T5089] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.108144][ T5089] REISERFS (device loop0): checking transaction log (loop0) [ 40.116151][ T5089] REISERFS (device loop0): Using r5 hash to sort names [ 40.123239][ T5089] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 40.135997][ T5089] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5088] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... mkdir resumed>) = 0 [pid 5088] <... futex resumed>) = 0 [pid 5089] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5088] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5089] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 0 [pid 5088] exit_group(0) = ? [pid 5089] <... futex resumed>) = ? [pid 5089] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./4/binderfs") = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5091 ./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x5555559356e0, 24) = 0 [pid 5091] chdir("./5") = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5091] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5091] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5091] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5092 attached [pid 5092] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5092] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] <... clone resumed>, parent_tid=[5092], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5092 [pid 5091] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5091] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5092] memfd_create("syzkaller", 0) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 40.149276][ T5089] overlayfs: upper fs needs to support d_type. [ 40.156254][ T5089] overlayfs: upper fs does not support tmpfile. [ 40.163124][ T5089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.170988][ T5089] overlayfs: failed to resolve './file0': -2 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5092] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5092] close(3) = 0 [pid 5092] mkdir("./file0", 0777) = 0 [ 40.253780][ T5092] loop0: detected capacity change from 0 to 8192 [ 40.262839][ T5092] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.275996][ T5092] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 40.285271][ T5092] REISERFS (device loop0): using ordered data mode [ 40.291902][ T5092] reiserfs: using flush barriers [pid 5092] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5092] chdir("./file0") = 0 [pid 5092] ioctl(4, LOOP_CLR_FD) = 0 [pid 5092] close(4) = 0 [pid 5092] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5091] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... futex resumed>) = 1 [pid 5092] mkdir("./file1", 000) = 0 [pid 5092] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5091] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... futex resumed>) = 1 [pid 5092] mkdir("./bus", 000) = 0 [pid 5092] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5091] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... futex resumed>) = 1 [ 40.297774][ T5092] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.314282][ T5092] REISERFS (device loop0): checking transaction log (loop0) [ 40.322335][ T5092] REISERFS (device loop0): Using r5 hash to sort names [ 40.329460][ T5092] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 40.342167][ T5092] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5092] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5092] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 1 [pid 5092] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] exit_group(0) = ? [pid 5092] <... futex resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5091] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x5555559356e0, 24) = 0 [pid 5094] chdir("./6") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5094 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5094] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5095], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5095 [pid 5094] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5095 attached [pid 5095] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5095] memfd_create("syzkaller", 0) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 40.364489][ T5092] overlayfs: upper fs needs to support d_type. [ 40.371325][ T5092] overlayfs: upper fs does not support tmpfile. [ 40.378819][ T5092] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.386781][ T5092] overlayfs: failed to resolve './file0': -2 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5095] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5095] close(3) = 0 [pid 5095] mkdir("./file0", 0777) = 0 [ 40.468181][ T5095] loop0: detected capacity change from 0 to 8192 [ 40.476964][ T5095] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.490187][ T5095] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 40.499447][ T5095] REISERFS (device loop0): using ordered data mode [ 40.506021][ T5095] reiserfs: using flush barriers [pid 5095] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5095] chdir("./file0") = 0 [pid 5095] ioctl(4, LOOP_CLR_FD) = 0 [pid 5095] close(4) = 0 [pid 5095] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5095] mkdir("./file1", 000 [pid 5094] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... mkdir resumed>) = 0 [pid 5095] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5095] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... futex resumed>) = 0 [pid 5095] mkdir("./bus", 000 [pid 5094] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... mkdir resumed>) = 0 [pid 5095] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5095] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 40.512097][ T5095] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.528562][ T5095] REISERFS (device loop0): checking transaction log (loop0) [ 40.536895][ T5095] REISERFS (device loop0): Using r5 hash to sort names [ 40.543912][ T5095] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 40.556647][ T5095] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5094] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5095] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5095] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] exit_group(0 [pid 5095] <... futex resumed>) = ? [pid 5094] <... exit_group resumed>) = ? [pid 5095] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./6/binderfs") = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5097 ./strace-static-x86_64: Process 5097 attached [pid 5097] set_robust_list(0x5555559356e0, 24) = 0 [pid 5097] chdir("./7") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5097] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5097] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 40.578382][ T5095] overlayfs: upper fs needs to support d_type. [ 40.585093][ T5095] overlayfs: upper fs does not support tmpfile. [ 40.591676][ T5095] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.599607][ T5095] overlayfs: failed to resolve './file0': -2 [pid 5097] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x7f8d103ee9e0, 24 [pid 5097] <... clone resumed>, parent_tid=[5098], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5098 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5097] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5098] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5098] close(3) = 0 [pid 5098] mkdir("./file0", 0777) = 0 [ 40.685992][ T5098] loop0: detected capacity change from 0 to 8192 [ 40.694901][ T5098] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.707939][ T5098] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 40.717129][ T5098] REISERFS (device loop0): using ordered data mode [ 40.723657][ T5098] reiserfs: using flush barriers [pid 5098] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5098] chdir("./file0") = 0 [pid 5098] ioctl(4, LOOP_CLR_FD) = 0 [pid 5098] close(4) = 0 [pid 5098] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5098] mkdir("./file1", 000 [pid 5097] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mkdir resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5098] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] mkdir("./bus", 000 [ 40.729207][ T5098] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.745612][ T5098] REISERFS (device loop0): checking transaction log (loop0) [ 40.753572][ T5098] REISERFS (device loop0): Using r5 hash to sort names [ 40.760621][ T5098] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 40.773303][ T5098] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5097] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... mkdir resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5098] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5097] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5098] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5097] exit_group(0) = ? [pid 5098] <... futex resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./7/binderfs") = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x5555559356e0, 24) = 0 [pid 5100] chdir("./8") = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5100 [pid 5100] <... setpgid resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5100] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5100] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5100] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5101], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5101 [pid 5100] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5101] memfd_create("syzkaller", 0) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 40.786990][ T5098] overlayfs: upper fs needs to support d_type. [ 40.793262][ T5098] overlayfs: upper fs does not support tmpfile. [ 40.800565][ T5098] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.808620][ T5098] overlayfs: failed to resolve './file0': -2 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5101] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5101] close(3) = 0 [pid 5101] mkdir("./file0", 0777) = 0 [ 40.885129][ T5101] loop0: detected capacity change from 0 to 8192 [ 40.894333][ T5101] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.907428][ T5101] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 40.916629][ T5101] REISERFS (device loop0): using ordered data mode [ 40.923111][ T5101] reiserfs: using flush barriers [pid 5101] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./file0") = 0 [pid 5101] ioctl(4, LOOP_CLR_FD) = 0 [pid 5101] close(4) = 0 [pid 5101] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... futex resumed>) = 0 [pid 5101] mkdir("./file1", 000) = 0 [pid 5101] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... futex resumed>) = 1 [pid 5101] mkdir("./bus", 000) = 0 [pid 5101] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... futex resumed>) = 1 [ 40.928736][ T5101] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.944972][ T5101] REISERFS (device loop0): checking transaction log (loop0) [ 40.953015][ T5101] REISERFS (device loop0): Using r5 hash to sort names [ 40.960214][ T5101] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 40.972973][ T5101] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5101] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5101] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5100] exit_group(0 [pid 5101] <... futex resumed>) = ? [pid 5100] <... exit_group resumed>) = ? [pid 5101] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./8/binderfs") = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached , child_tidptr=0x5555559356d0) = 5103 [pid 5103] set_robust_list(0x5555559356e0, 24) = 0 [pid 5103] chdir("./9") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5103] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5104 attached , parent_tid=[5104], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5104 [pid 5104] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5104] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] <... futex resumed>) = 0 [ 41.002130][ T5101] overlayfs: upper fs needs to support d_type. [ 41.008350][ T5101] overlayfs: upper fs does not support tmpfile. [ 41.014991][ T5101] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.022731][ T5101] overlayfs: failed to resolve './file0': -2 [pid 5103] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5104] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [ 41.108509][ T5104] loop0: detected capacity change from 0 to 8192 [ 41.117740][ T5104] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.130793][ T5104] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.140076][ T5104] REISERFS (device loop0): using ordered data mode [ 41.146616][ T5104] reiserfs: using flush barriers [pid 5104] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./file0") = 0 [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 5104] close(4) = 0 [pid 5104] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5104] mkdir("./file1", 000 [pid 5103] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... mkdir resumed>) = 0 [pid 5103] <... futex resumed>) = 0 [pid 5104] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5104] mkdir("./bus", 000 [pid 5103] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... mkdir resumed>) = 0 [pid 5103] <... futex resumed>) = 0 [pid 5104] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5104] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5103] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 41.152157][ T5104] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.168535][ T5104] REISERFS (device loop0): checking transaction log (loop0) [ 41.176760][ T5104] REISERFS (device loop0): Using r5 hash to sort names [ 41.183764][ T5104] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 41.196502][ T5104] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5103] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5104] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = 0 [pid 5104] <... futex resumed>) = 1 [pid 5103] exit_group(0) = ? [pid 5104] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./9/binderfs") = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5106 ./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x5555559356e0, 24) = 0 [pid 5106] chdir("./10") = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5106] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5107 attached [ 41.216497][ T5104] overlayfs: upper fs needs to support d_type. [ 41.222746][ T5104] overlayfs: upper fs does not support tmpfile. [ 41.229630][ T5104] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.237807][ T5104] overlayfs: failed to resolve './file0': -2 , parent_tid=[5107], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5107 [pid 5107] set_robust_list(0x7f8d103ee9e0, 24 [pid 5106] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5107] <... set_robust_list resumed>) = 0 [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5107] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] mkdir("./file0", 0777) = 0 [ 41.327811][ T5107] loop0: detected capacity change from 0 to 8192 [ 41.337190][ T5107] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.350190][ T5107] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.359775][ T5107] REISERFS (device loop0): using ordered data mode [ 41.366298][ T5107] reiserfs: using flush barriers [pid 5107] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5107] chdir("./file0") = 0 [pid 5107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5107] close(4) = 0 [pid 5107] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5107] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5106] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] mkdir("./file1", 000) = 0 [pid 5107] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5107] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5106] <... futex resumed>) = 0 [pid 5107] mkdir("./bus", 000 [pid 5106] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... mkdir resumed>) = 0 [pid 5107] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5107] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5106] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 41.371957][ T5107] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.388299][ T5107] REISERFS (device loop0): checking transaction log (loop0) [ 41.396313][ T5107] REISERFS (device loop0): Using r5 hash to sort names [ 41.403578][ T5107] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 41.416533][ T5107] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5106] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5107] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5106] exit_group(0) = ? [pid 5107] <... futex resumed>) = ? [pid 5107] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./10/binderfs") = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5109 ./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x5555559356e0, 24) = 0 [pid 5109] chdir("./11") = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5109] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5109] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5109] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5110 attached , parent_tid=[5110], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5110 [ 41.442907][ T5107] overlayfs: upper fs needs to support d_type. [ 41.449143][ T5107] overlayfs: upper fs does not support tmpfile. [ 41.455895][ T5107] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.464421][ T5107] overlayfs: failed to resolve './file0': -2 [pid 5110] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5110] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5110] <... futex resumed>) = 0 [pid 5110] memfd_create("syzkaller", 0) = 3 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5110] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5110] close(3) = 0 [pid 5110] mkdir("./file0", 0777) = 0 [ 41.549946][ T5110] loop0: detected capacity change from 0 to 8192 [ 41.559030][ T5110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.572053][ T5110] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.581469][ T5110] REISERFS (device loop0): using ordered data mode [ 41.588025][ T5110] reiserfs: using flush barriers [pid 5110] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5110] chdir("./file0") = 0 [pid 5110] ioctl(4, LOOP_CLR_FD) = 0 [pid 5110] close(4) = 0 [pid 5110] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5110] mkdir("./file1", 000 [ 41.594434][ T5110] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.611206][ T5110] REISERFS (device loop0): checking transaction log (loop0) [ 41.619439][ T5110] REISERFS (device loop0): Using r5 hash to sort names [ 41.626419][ T5110] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 41.639182][ T5110] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5109] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... mkdir resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5110] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] mkdir("./bus", 000 [pid 5109] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... mkdir resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5110] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5109] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5110] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] <... futex resumed>) = 0 [pid 5109] exit_group(0) = ? [pid 5110] <... futex resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./11/binderfs") = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5112 attached , child_tidptr=0x5555559356d0) = 5112 [pid 5112] set_robust_list(0x5555559356e0, 24) = 0 [pid 5112] chdir("./12") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 41.653696][ T5110] overlayfs: upper fs needs to support d_type. [ 41.660065][ T5110] overlayfs: upper fs does not support tmpfile. [ 41.666642][ T5110] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.674229][ T5110] overlayfs: failed to resolve './file0': -2 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5112] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5112] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5113] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] <... clone resumed>, parent_tid=[5113], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5113 [pid 5112] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] <... futex resumed>) = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5113] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5113] close(3) = 0 [pid 5113] mkdir("./file0", 0777) = 0 [ 41.764011][ T5113] loop0: detected capacity change from 0 to 8192 [ 41.772987][ T5113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.786111][ T5113] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.795345][ T5113] REISERFS (device loop0): using ordered data mode [ 41.801849][ T5113] reiserfs: using flush barriers [pid 5113] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./file0") = 0 [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] close(4) = 0 [pid 5113] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5113] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5113] mkdir("./file1", 000 [pid 5112] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... mkdir resumed>) = 0 [pid 5113] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5113] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5113] mkdir("./bus", 000 [pid 5112] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... mkdir resumed>) = 0 [pid 5113] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5113] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 41.807657][ T5113] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.823871][ T5113] REISERFS (device loop0): checking transaction log (loop0) [ 41.832116][ T5113] REISERFS (device loop0): Using r5 hash to sort names [ 41.839096][ T5113] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 41.851992][ T5113] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5112] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5113] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] <... futex resumed>) = 0 [pid 5112] exit_group(0) = ? [pid 5113] <... futex resumed>) = ? [pid 5113] +++ exited with 0 +++ [pid 5112] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./12/binderfs") = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5115 ./strace-static-x86_64: Process 5115 attached [pid 5115] set_robust_list(0x5555559356e0, 24) = 0 [pid 5115] chdir("./13") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5115] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5115] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5116] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... clone resumed>, parent_tid=[5116], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5116 [pid 5115] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5115] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 41.873976][ T5113] overlayfs: upper fs needs to support d_type. [ 41.881287][ T5113] overlayfs: upper fs does not support tmpfile. [ 41.888151][ T5113] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.895976][ T5113] overlayfs: failed to resolve './file0': -2 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5116] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5116] close(3) = 0 [pid 5116] mkdir("./file0", 0777) = 0 [ 41.973678][ T5116] loop0: detected capacity change from 0 to 8192 [ 41.982865][ T5116] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.995873][ T5116] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 42.005174][ T5116] REISERFS (device loop0): using ordered data mode [ 42.011770][ T5116] reiserfs: using flush barriers [pid 5116] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./file0") = 0 [pid 5116] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] close(4) = 0 [pid 5116] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 1 [pid 5116] mkdir("./file1", 000) = 0 [pid 5116] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 1 [pid 5116] mkdir("./bus", 000) = 0 [pid 5116] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 1 [pid 5115] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 42.017591][ T5116] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.033918][ T5116] REISERFS (device loop0): checking transaction log (loop0) [ 42.042127][ T5116] REISERFS (device loop0): Using r5 hash to sort names [ 42.049777][ T5116] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 42.062448][ T5116] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5116] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5116] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5115] exit_group(0) = ? [pid 5116] <... futex resumed>) = ? [pid 5116] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./13/binderfs") = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x5555559356e0, 24) = 0 [pid 5118] chdir("./14") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5118 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5118] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5119], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5119 ./strace-static-x86_64: Process 5119 attached [pid 5118] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 42.085659][ T5116] overlayfs: upper fs needs to support d_type. [ 42.092038][ T5116] overlayfs: upper fs does not support tmpfile. [ 42.099234][ T5116] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 42.107136][ T5116] overlayfs: failed to resolve './file0': -2 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5119] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file0", 0777) = 0 [ 42.185569][ T5119] loop0: detected capacity change from 0 to 8192 [ 42.195087][ T5119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 42.208068][ T5119] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 42.217342][ T5119] REISERFS (device loop0): using ordered data mode [ 42.223870][ T5119] reiserfs: using flush barriers [pid 5119] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5119] mkdir("./file1", 000 [pid 5118] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... mkdir resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5119] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] mkdir("./bus", 000 [pid 5118] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... mkdir resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5119] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5118] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 42.229541][ T5119] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.245971][ T5119] REISERFS (device loop0): checking transaction log (loop0) [ 42.253932][ T5119] REISERFS (device loop0): Using r5 hash to sort names [ 42.260982][ T5119] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 42.273694][ T5119] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5118] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5119] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5118] exit_group(0) = ? [pid 5119] <... futex resumed>) = ? [pid 5119] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./14/binderfs") = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5121 attached [pid 5121] set_robust_list(0x5555559356e0, 24) = 0 [pid 5121] chdir("./15") = 0 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5121 [pid 5121] setpgid(0, 0) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5121] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5121] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5121] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5122], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5122 [pid 5121] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5122 attached [pid 5122] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 42.293157][ T5119] overlayfs: upper fs needs to support d_type. [ 42.299702][ T5119] overlayfs: upper fs does not support tmpfile. [ 42.306517][ T5119] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 42.314066][ T5119] overlayfs: failed to resolve './file0': -2 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5122] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5122] close(3) = 0 [pid 5122] mkdir("./file0", 0777) = 0 [ 42.397314][ T5122] loop0: detected capacity change from 0 to 8192 [ 42.407241][ T5122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 42.420244][ T5122] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 42.429614][ T5122] REISERFS (device loop0): using ordered data mode [ 42.436154][ T5122] reiserfs: using flush barriers [pid 5122] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5122] chdir("./file0") = 0 [pid 5122] ioctl(4, LOOP_CLR_FD) = 0 [pid 5122] close(4) = 0 [pid 5122] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... futex resumed>) = 1 [pid 5122] mkdir("./file1", 000) = 0 [pid 5122] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... futex resumed>) = 1 [pid 5122] mkdir("./bus", 000) = 0 [pid 5122] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] <... futex resumed>) = 1 [ 42.441791][ T5122] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.458287][ T5122] REISERFS (device loop0): checking transaction log (loop0) [ 42.466554][ T5122] REISERFS (device loop0): Using r5 hash to sort names [ 42.473821][ T5122] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 42.486503][ T5122] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5122] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5122] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... futex resumed>) = 0 [pid 5121] exit_group(0) = ? [pid 5122] <... futex resumed>) = ? [pid 5122] +++ exited with 0 +++ [pid 5121] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./15/binderfs") = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5124 ./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x5555559356e0, 24) = 0 [pid 5124] chdir("./16") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5124] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5124] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5125 attached , parent_tid=[5125], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5125 [pid 5125] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5125] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5124] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 42.507040][ T5122] overlayfs: upper fs needs to support d_type. [ 42.513342][ T5122] overlayfs: upper fs does not support tmpfile. [ 42.520051][ T5122] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 42.527924][ T5122] overlayfs: failed to resolve './file0': -2 [pid 5125] memfd_create("syzkaller", 0) = 3 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5125] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5125] close(3) = 0 [pid 5125] mkdir("./file0", 0777) = 0 [ 42.615225][ T5125] loop0: detected capacity change from 0 to 8192 [ 42.625530][ T5125] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 42.638548][ T5125] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 42.647794][ T5125] REISERFS (device loop0): using ordered data mode [ 42.654302][ T5125] reiserfs: using flush barriers [pid 5125] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5125] chdir("./file0") = 0 [pid 5125] ioctl(4, LOOP_CLR_FD) = 0 [pid 5125] close(4) = 0 [pid 5125] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5125] mkdir("./file1", 000 [pid 5124] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... mkdir resumed>) = 0 [pid 5124] <... futex resumed>) = 0 [pid 5125] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] mkdir("./bus", 000 [pid 5124] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... mkdir resumed>) = 0 [pid 5124] <... futex resumed>) = 0 [pid 5125] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5124] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 42.660150][ T5125] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.676453][ T5125] REISERFS (device loop0): checking transaction log (loop0) [ 42.684455][ T5125] REISERFS (device loop0): Using r5 hash to sort names [ 42.691702][ T5125] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 42.704365][ T5125] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5124] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5125] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5124] exit_group(0) = ? [pid 5125] <... futex resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./16/binderfs") = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5127 ./strace-static-x86_64: Process 5127 attached [pid 5127] set_robust_list(0x5555559356e0, 24) = 0 [pid 5127] chdir("./17") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5127] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5127] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5128] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5127] <... clone resumed>, parent_tid=[5128], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5128 [pid 5127] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5127] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 42.718373][ T5125] overlayfs: upper fs needs to support d_type. [ 42.725159][ T5125] overlayfs: upper fs does not support tmpfile. [ 42.732115][ T5125] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 42.740265][ T5125] overlayfs: failed to resolve './file0': -2 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5128] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5128] close(3) = 0 [pid 5128] mkdir("./file0", 0777) = 0 [ 42.822869][ T5128] loop0: detected capacity change from 0 to 8192 [ 42.831668][ T5128] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 42.845014][ T5128] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 42.854246][ T5128] REISERFS (device loop0): using ordered data mode [ 42.860774][ T5128] reiserfs: using flush barriers [pid 5128] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5128] chdir("./file0") = 0 [pid 5128] ioctl(4, LOOP_CLR_FD) = 0 [pid 5128] close(4) = 0 [pid 5128] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 0 [pid 5127] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = 1 [pid 5128] mkdir("./file1", 000) = 0 [pid 5128] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 0 [pid 5127] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = 1 [pid 5128] mkdir("./bus", 000) = 0 [pid 5128] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 0 [pid 5127] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = 1 [ 42.866337][ T5128] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.882782][ T5128] REISERFS (device loop0): checking transaction log (loop0) [ 42.890810][ T5128] REISERFS (device loop0): Using r5 hash to sort names [ 42.897978][ T5128] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 42.910988][ T5128] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5128] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5128] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 0 [pid 5127] exit_group(0 [pid 5128] <... futex resumed>) = 1 [pid 5127] <... exit_group resumed>) = ? [pid 5128] +++ exited with 0 +++ [pid 5127] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./17/binderfs") = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5130] set_robust_list(0x5555559356e0, 24) = 0 [pid 5130] chdir("./18") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5130] write(3, "1000", 4) = 4 [pid 5130] close(3) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5130] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5130] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5131 attached , parent_tid=[5131], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5131 [pid 5131] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5131] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5130] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 42.933385][ T5128] overlayfs: upper fs needs to support d_type. [ 42.939853][ T5128] overlayfs: upper fs does not support tmpfile. [ 42.946731][ T5128] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 42.954331][ T5128] overlayfs: failed to resolve './file0': -2 [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5131] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5131] close(3) = 0 [pid 5131] mkdir("./file0", 0777) = 0 [ 43.031440][ T5131] loop0: detected capacity change from 0 to 8192 [ 43.040709][ T5131] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.053778][ T5131] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.063134][ T5131] REISERFS (device loop0): using ordered data mode [ 43.069692][ T5131] reiserfs: using flush barriers [pid 5131] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5131] chdir("./file0") = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5131] close(4) = 0 [pid 5131] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5131] mkdir("./file1", 000 [pid 5130] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... mkdir resumed>) = 0 [pid 5130] <... futex resumed>) = 0 [pid 5131] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] mkdir("./bus", 000 [pid 5130] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... mkdir resumed>) = 0 [pid 5130] <... futex resumed>) = 0 [pid 5131] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 43.075252][ T5131] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.091667][ T5131] REISERFS (device loop0): checking transaction log (loop0) [ 43.099886][ T5131] REISERFS (device loop0): Using r5 hash to sort names [ 43.107169][ T5131] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 43.119891][ T5131] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5130] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5131] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5130] exit_group(0) = ? [pid 5131] <... futex resumed>) = ? [pid 5131] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./18/binderfs") = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 43.134956][ T5131] overlayfs: upper fs needs to support d_type. [ 43.147602][ T5131] overlayfs: upper fs does not support tmpfile. [ 43.154313][ T5131] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.162429][ T5131] overlayfs: failed to resolve './file0': -2 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5133 ./strace-static-x86_64: Process 5133 attached [pid 5133] set_robust_list(0x5555559356e0, 24) = 0 [pid 5133] chdir("./19") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5133] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5133] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5133] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5134], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5134 [pid 5133] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5134] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./file0", 0777) = 0 [ 43.261715][ T5134] loop0: detected capacity change from 0 to 8192 [ 43.271278][ T5134] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.284406][ T5134] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.293792][ T5134] REISERFS (device loop0): using ordered data mode [ 43.300343][ T5134] reiserfs: using flush barriers [pid 5134] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./file0") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4) = 0 [pid 5134] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 1 [pid 5134] mkdir("./file1", 000) = 0 [pid 5134] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... futex resumed>) = 1 [pid 5134] mkdir("./bus", 000) = 0 [pid 5134] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 1 [pid 5133] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5133] <... futex resumed>) = 0 [ 43.306175][ T5134] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.322469][ T5134] REISERFS (device loop0): checking transaction log (loop0) [ 43.330683][ T5134] REISERFS (device loop0): Using r5 hash to sort names [ 43.337724][ T5134] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 43.350633][ T5134] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5133] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5134] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 1 [pid 5133] exit_group(0) = ? [pid 5134] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./19/binderfs") = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5136 ./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x5555559356e0, 24) = 0 [pid 5136] chdir("./20") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5136] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5136] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5137 attached , parent_tid=[5137], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5137 [pid 5137] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5137] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5137] <... futex resumed>) = 0 [ 43.365305][ T5134] overlayfs: upper fs needs to support d_type. [ 43.371846][ T5134] overlayfs: upper fs does not support tmpfile. [ 43.379063][ T5134] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.388066][ T5134] overlayfs: failed to resolve './file0': -2 [pid 5136] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5137] memfd_create("syzkaller", 0) = 3 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5137] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5137] close(3) = 0 [pid 5137] mkdir("./file0", 0777) = 0 [ 43.472194][ T5137] loop0: detected capacity change from 0 to 8192 [ 43.481813][ T5137] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.494876][ T5137] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.504022][ T5137] REISERFS (device loop0): using ordered data mode [ 43.510545][ T5137] reiserfs: using flush barriers [pid 5137] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5137] chdir("./file0") = 0 [pid 5137] ioctl(4, LOOP_CLR_FD) = 0 [pid 5137] close(4) = 0 [pid 5137] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5137] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... futex resumed>) = 0 [pid 5136] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 0 [pid 5137] mkdir("./file1", 000) = 0 [pid 5137] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5136] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5137] mkdir("./bus", 000) = 0 [pid 5137] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5136] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [ 43.516074][ T5137] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.532534][ T5137] REISERFS (device loop0): checking transaction log (loop0) [ 43.540763][ T5137] REISERFS (device loop0): Using r5 hash to sort names [ 43.548113][ T5137] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 43.560797][ T5137] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5137] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5137] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5136] exit_group(0 [pid 5137] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5136] <... exit_group resumed>) = ? [pid 5137] +++ exited with 0 +++ [pid 5136] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./20/binderfs") = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5139 ./strace-static-x86_64: Process 5139 attached [pid 5139] set_robust_list(0x5555559356e0, 24) = 0 [pid 5139] chdir("./21") = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5139] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5139] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5139] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5140 attached , parent_tid=[5140], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5140 [pid 5140] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5140] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5139] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 43.581679][ T5137] overlayfs: upper fs needs to support d_type. [ 43.588229][ T5137] overlayfs: upper fs does not support tmpfile. [ 43.594990][ T5137] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.602558][ T5137] overlayfs: failed to resolve './file0': -2 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5140] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] close(3) = 0 [pid 5140] mkdir("./file0", 0777) = 0 [ 43.686333][ T5140] loop0: detected capacity change from 0 to 8192 [ 43.695218][ T5140] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.708300][ T5140] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.717646][ T5140] REISERFS (device loop0): using ordered data mode [ 43.724171][ T5140] reiserfs: using flush barriers [pid 5140] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5140] chdir("./file0") = 0 [pid 5140] ioctl(4, LOOP_CLR_FD) = 0 [pid 5140] close(4) = 0 [pid 5140] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [ 43.730001][ T5140] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.746452][ T5140] REISERFS (device loop0): checking transaction log (loop0) [ 43.754471][ T5140] REISERFS (device loop0): Using r5 hash to sort names [ 43.761564][ T5140] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 43.774316][ T5140] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5140] mkdir("./file1", 000) = 0 [pid 5140] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5140] mkdir("./bus", 000) = 0 [pid 5140] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = 1 [pid 5140] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5140] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5139] exit_group(0) = ? [pid 5140] +++ exited with 0 +++ [pid 5139] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./21/binderfs") = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 43.788370][ T5140] overlayfs: upper fs needs to support d_type. [ 43.797235][ T5140] overlayfs: upper fs does not support tmpfile. [ 43.805105][ T5140] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.812881][ T5140] overlayfs: failed to resolve './file0': -2 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5142 attached , child_tidptr=0x5555559356d0) = 5142 [pid 5142] set_robust_list(0x5555559356e0, 24) = 0 [pid 5142] chdir("./22") = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5142] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5142] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5143], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5143 ./strace-static-x86_64: Process 5143 attached [pid 5143] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5143] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5143] memfd_create("syzkaller", 0) = 3 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5142] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5143] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file0", 0777) = 0 [ 43.908039][ T5143] loop0: detected capacity change from 0 to 8192 [ 43.917213][ T5143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.930357][ T5143] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.939804][ T5143] REISERFS (device loop0): using ordered data mode [ 43.946429][ T5143] reiserfs: using flush barriers [pid 5143] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file0") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] close(4) = 0 [pid 5143] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... futex resumed>) = 1 [pid 5143] mkdir("./file1", 000) = 0 [pid 5143] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... futex resumed>) = 1 [pid 5143] mkdir("./bus", 000) = 0 [pid 5143] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... futex resumed>) = 1 [ 43.952022][ T5143] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.968558][ T5143] REISERFS (device loop0): checking transaction log (loop0) [ 43.976682][ T5143] REISERFS (device loop0): Using r5 hash to sort names [ 43.983712][ T5143] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 43.996502][ T5143] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5143] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5143] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] <... futex resumed>) = 0 [pid 5142] exit_group(0) = ? [pid 5143] <... futex resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./22/binderfs") = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5145 attached [pid 5145] set_robust_list(0x5555559356e0, 24) = 0 [pid 5145] chdir("./23" [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5145 [pid 5145] <... chdir resumed>) = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5145] setpgid(0, 0) = 0 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5145] write(3, "1000", 4) = 4 [pid 5145] close(3) = 0 [pid 5145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5145] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 44.016007][ T5143] overlayfs: upper fs needs to support d_type. [ 44.022435][ T5143] overlayfs: upper fs does not support tmpfile. [ 44.029196][ T5143] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.037115][ T5143] overlayfs: failed to resolve './file0': -2 [pid 5145] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5145] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5146], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5146 ./strace-static-x86_64: Process 5146 attached [pid 5146] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5146] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5146] <... futex resumed>) = 0 [pid 5145] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5146] memfd_create("syzkaller", 0) = 3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5146] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5146] close(3) = 0 [pid 5146] mkdir("./file0", 0777) = 0 [ 44.126411][ T5146] loop0: detected capacity change from 0 to 8192 [ 44.136325][ T5146] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.149439][ T5146] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 44.158966][ T5146] REISERFS (device loop0): using ordered data mode [ 44.165534][ T5146] reiserfs: using flush barriers [pid 5146] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5146] chdir("./file0") = 0 [pid 5146] ioctl(4, LOOP_CLR_FD) = 0 [pid 5146] close(4) = 0 [pid 5146] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = 0 [pid 5145] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... futex resumed>) = 1 [ 44.171322][ T5146] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.188274][ T5146] REISERFS (device loop0): checking transaction log (loop0) [ 44.196545][ T5146] REISERFS (device loop0): Using r5 hash to sort names [ 44.203541][ T5146] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 44.216298][ T5146] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5146] mkdir("./file1", 000) = 0 [pid 5146] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = 0 [pid 5145] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... futex resumed>) = 1 [pid 5146] mkdir("./bus", 000) = 0 [pid 5146] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = 0 [pid 5145] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... futex resumed>) = 1 [pid 5146] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5146] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5145] <... futex resumed>) = 0 [pid 5145] exit_group(0) = ? [pid 5146] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./23/binderfs") = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5148 ./strace-static-x86_64: Process 5148 attached [pid 5148] set_robust_list(0x5555559356e0, 24) = 0 [pid 5148] chdir("./24") = 0 [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] setpgid(0, 0) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5148] write(3, "1000", 4) = 4 [pid 5148] close(3) = 0 [pid 5148] symlink("/dev/binderfs", "./binderfs") = 0 [ 44.230397][ T5146] overlayfs: upper fs needs to support d_type. [ 44.236924][ T5146] overlayfs: upper fs does not support tmpfile. [ 44.243718][ T5146] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.251436][ T5146] overlayfs: failed to resolve './file0': -2 [pid 5148] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5148] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5148] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5149 attached , parent_tid=[5149], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5149 [pid 5149] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5149] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5148] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5149] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file0", 0777) = 0 [ 44.342728][ T5149] loop0: detected capacity change from 0 to 8192 [ 44.353411][ T5149] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.366463][ T5149] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 44.375724][ T5149] REISERFS (device loop0): using ordered data mode [ 44.382250][ T5149] reiserfs: using flush barriers [pid 5149] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5149] chdir("./file0") = 0 [pid 5149] ioctl(4, LOOP_CLR_FD) = 0 [pid 5149] close(4) = 0 [pid 5149] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] <... futex resumed>) = 0 [pid 5149] mkdir("./file1", 000 [pid 5148] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... mkdir resumed>) = 0 [pid 5148] <... futex resumed>) = 0 [pid 5149] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] mkdir("./bus", 000 [pid 5148] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... mkdir resumed>) = 0 [pid 5148] <... futex resumed>) = 0 [pid 5149] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5148] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 44.388195][ T5149] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.404509][ T5149] REISERFS (device loop0): checking transaction log (loop0) [ 44.412812][ T5149] REISERFS (device loop0): Using r5 hash to sort names [ 44.420182][ T5149] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 44.433795][ T5149] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5148] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5149] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] exit_group(0) = ? [pid 5149] <... futex resumed>) = ? [pid 5149] +++ exited with 0 +++ [pid 5148] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./24/binderfs") = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5151 ./strace-static-x86_64: Process 5151 attached [pid 5151] set_robust_list(0x5555559356e0, 24) = 0 [pid 5151] chdir("./25") = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 44.449083][ T5149] overlayfs: upper fs needs to support d_type. [ 44.455834][ T5149] overlayfs: upper fs does not support tmpfile. [ 44.462612][ T5149] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.470689][ T5149] overlayfs: failed to resolve './file0': -2 [pid 5151] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5152] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] <... clone resumed>, parent_tid=[5152], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5152 [pid 5151] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5151] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5152] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5152] close(3) = 0 [pid 5152] mkdir("./file0", 0777) = 0 [ 44.558485][ T5152] loop0: detected capacity change from 0 to 8192 [ 44.568475][ T5152] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.581555][ T5152] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 44.591006][ T5152] REISERFS (device loop0): using ordered data mode [ 44.597545][ T5152] reiserfs: using flush barriers [pid 5152] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./file0") = 0 [pid 5152] ioctl(4, LOOP_CLR_FD) = 0 [ 44.603343][ T5152] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.619903][ T5152] REISERFS (device loop0): checking transaction log (loop0) [ 44.628158][ T5152] REISERFS (device loop0): Using r5 hash to sort names [ 44.635265][ T5152] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 44.647919][ T5152] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5152] close(4) = 0 [pid 5152] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = 0 [pid 5151] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 1 [pid 5152] mkdir("./file1", 000) = 0 [pid 5152] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = 0 [pid 5151] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 1 [pid 5152] mkdir("./bus", 000) = 0 [pid 5152] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = 0 [pid 5151] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 1 [pid 5152] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5152] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5151] exit_group(0) = ? [pid 5152] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./25/binderfs") = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5154 ./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x5555559356e0, 24) = 0 [pid 5154] chdir("./26") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5154] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5155 attached , parent_tid=[5155], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5155 [pid 5154] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5155] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 44.662447][ T5152] overlayfs: upper fs needs to support d_type. [ 44.668736][ T5152] overlayfs: upper fs does not support tmpfile. [ 44.675833][ T5152] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.683573][ T5152] overlayfs: failed to resolve './file0': -2 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5155] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./file0", 0777) = 0 [ 44.764028][ T5155] loop0: detected capacity change from 0 to 8192 [ 44.773232][ T5155] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.786335][ T5155] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 44.795643][ T5155] REISERFS (device loop0): using ordered data mode [ 44.802174][ T5155] reiserfs: using flush barriers [pid 5155] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file0") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [pid 5155] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 1 [pid 5155] mkdir("./file1", 000) = 0 [pid 5155] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 1 [pid 5155] mkdir("./bus", 000) = 0 [pid 5155] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 1 [ 44.807826][ T5155] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.824262][ T5155] REISERFS (device loop0): checking transaction log (loop0) [ 44.832291][ T5155] REISERFS (device loop0): Using r5 hash to sort names [ 44.839424][ T5155] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 44.852189][ T5155] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5155] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5155] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5154] exit_group(0) = ? [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./26/binderfs") = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5157 ./strace-static-x86_64: Process 5157 attached [pid 5157] set_robust_list(0x5555559356e0, 24) = 0 [pid 5157] chdir("./27") = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5157] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5157] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5158 attached , parent_tid=[5158], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5158 [pid 5157] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5158] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5158] memfd_create("syzkaller", 0) = 3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 44.867836][ T5155] overlayfs: upper fs needs to support d_type. [ 44.874069][ T5155] overlayfs: upper fs does not support tmpfile. [ 44.881111][ T5155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.888891][ T5155] overlayfs: failed to resolve './file0': -2 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5158] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5158] close(3) = 0 [pid 5158] mkdir("./file0", 0777) = 0 [ 44.974533][ T5158] loop0: detected capacity change from 0 to 8192 [ 44.984538][ T5158] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.997562][ T5158] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.006788][ T5158] REISERFS (device loop0): using ordered data mode [ 45.013285][ T5158] reiserfs: using flush barriers [pid 5158] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./file0") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4) = 0 [pid 5158] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] mkdir("./file1", 000 [pid 5157] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... mkdir resumed>) = 0 [pid 5158] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] mkdir("./bus", 000 [pid 5157] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... mkdir resumed>) = 0 [pid 5158] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5158] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] <... futex resumed>) = 0 [pid 5158] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 45.018918][ T5158] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.035144][ T5158] REISERFS (device loop0): checking transaction log (loop0) [ 45.043100][ T5158] REISERFS (device loop0): Using r5 hash to sort names [ 45.050203][ T5158] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 45.063028][ T5158] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5157] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5158] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] <... futex resumed>) = 0 [pid 5157] exit_group(0) = ? [pid 5158] <... futex resumed>) = ? [pid 5158] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./27/binderfs") = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5160 attached , child_tidptr=0x5555559356d0) = 5160 [pid 5160] set_robust_list(0x5555559356e0, 24) = 0 [pid 5160] chdir("./28") = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [ 45.090023][ T5158] overlayfs: upper fs needs to support d_type. [ 45.096298][ T5158] overlayfs: upper fs does not support tmpfile. [ 45.102962][ T5158] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.110829][ T5158] overlayfs: failed to resolve './file0': -2 [pid 5160] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5160] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5160] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5161 attached , parent_tid=[5161], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5161 [pid 5161] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5161] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5160] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5161] memfd_create("syzkaller", 0) = 3 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5161] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5161] close(3) = 0 [pid 5161] mkdir("./file0", 0777) = 0 [ 45.202088][ T5161] loop0: detected capacity change from 0 to 8192 [ 45.211538][ T5161] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.224590][ T5161] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.233800][ T5161] REISERFS (device loop0): using ordered data mode [ 45.240323][ T5161] reiserfs: using flush barriers [pid 5161] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5161] chdir("./file0") = 0 [pid 5161] ioctl(4, LOOP_CLR_FD) = 0 [pid 5161] close(4) = 0 [pid 5161] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = 1 [ 45.245972][ T5161] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.262201][ T5161] REISERFS (device loop0): checking transaction log (loop0) [ 45.270302][ T5161] REISERFS (device loop0): Using r5 hash to sort names [ 45.277267][ T5161] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 45.289943][ T5161] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5161] mkdir("./file1", 000) = 0 [pid 5161] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = 1 [pid 5161] mkdir("./bus", 000) = 0 [pid 5161] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = 1 [pid 5161] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5161] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5160] <... futex resumed>) = 0 [pid 5160] exit_group(0) = ? [pid 5161] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./28/binderfs") = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5163 attached , child_tidptr=0x5555559356d0) = 5163 [pid 5163] set_robust_list(0x5555559356e0, 24) = 0 [pid 5163] chdir("./29") = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5163] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5163] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5164] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] <... clone resumed>, parent_tid=[5164], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5164 [pid 5163] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5163] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 45.303754][ T5161] overlayfs: upper fs needs to support d_type. [ 45.310226][ T5161] overlayfs: upper fs does not support tmpfile. [ 45.317237][ T5161] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.326677][ T5161] overlayfs: failed to resolve './file0': -2 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5164] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5164] close(3) = 0 [pid 5164] mkdir("./file0", 0777) = 0 [ 45.403637][ T5164] loop0: detected capacity change from 0 to 8192 [ 45.412570][ T5164] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.426226][ T5164] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.435631][ T5164] REISERFS (device loop0): using ordered data mode [ 45.442176][ T5164] reiserfs: using flush barriers [pid 5164] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./file0") = 0 [pid 5164] ioctl(4, LOOP_CLR_FD) = 0 [pid 5164] close(4) = 0 [pid 5164] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] <... futex resumed>) = 0 [pid 5163] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... futex resumed>) = 0 [pid 5164] mkdir("./file1", 000) = 0 [pid 5164] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5163] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... futex resumed>) = 1 [pid 5164] mkdir("./bus", 000) = 0 [pid 5164] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5163] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... futex resumed>) = 1 [ 45.447977][ T5164] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.464521][ T5164] REISERFS (device loop0): checking transaction log (loop0) [ 45.472657][ T5164] REISERFS (device loop0): Using r5 hash to sort names [ 45.479629][ T5164] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 45.492346][ T5164] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5164] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5164] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5163] exit_group(0) = ? [pid 5164] <... futex resumed>) = ? [pid 5164] +++ exited with 0 +++ [pid 5163] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./29/binderfs") = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5166 attached [pid 5166] set_robust_list(0x5555559356e0, 24) = 0 [pid 5166] chdir("./30") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5166 [pid 5166] <... openat resumed>) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5166] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5166] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5166] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5167], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5167 [pid 5166] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 45.515627][ T5164] overlayfs: upper fs needs to support d_type. [ 45.522207][ T5164] overlayfs: upper fs does not support tmpfile. [ 45.529583][ T5164] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.537443][ T5164] overlayfs: failed to resolve './file0': -2 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5167] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./file0", 0777) = 0 [ 45.614915][ T5167] loop0: detected capacity change from 0 to 8192 [ 45.624384][ T5167] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.637463][ T5167] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.646647][ T5167] REISERFS (device loop0): using ordered data mode [ 45.653393][ T5167] reiserfs: using flush barriers [pid 5167] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./file0") = 0 [pid 5167] ioctl(4, LOOP_CLR_FD) = 0 [pid 5167] close(4) = 0 [pid 5167] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = 1 [pid 5167] mkdir("./file1", 000 [pid 5166] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... mkdir resumed>) = 0 [pid 5167] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5166] <... futex resumed>) = 0 [pid 5167] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5166] <... futex resumed>) = 0 [pid 5167] mkdir("./bus", 000 [pid 5166] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... mkdir resumed>) = 0 [pid 5167] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5166] <... futex resumed>) = 0 [pid 5167] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 45.659333][ T5167] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.675761][ T5167] REISERFS (device loop0): checking transaction log (loop0) [ 45.683719][ T5167] REISERFS (device loop0): Using r5 hash to sort names [ 45.691048][ T5167] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 45.703803][ T5167] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5166] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5167] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5166] <... futex resumed>) = 0 [pid 5167] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] exit_group(0 [pid 5167] <... futex resumed>) = ? [pid 5166] <... exit_group resumed>) = ? [pid 5167] +++ exited with 0 +++ [pid 5166] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./30/binderfs") = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x5555559356e0, 24) = 0 [pid 5169] chdir("./31") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5169] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5169] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5170], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5170 ./strace-static-x86_64: Process 5170 attached [pid 5169] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] set_robust_list(0x7f8d103ee9e0, 24 [pid 5169] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5170] <... set_robust_list resumed>) = 0 [pid 5170] memfd_create("syzkaller", 0) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 45.728780][ T5167] overlayfs: upper fs needs to support d_type. [ 45.735061][ T5167] overlayfs: upper fs does not support tmpfile. [ 45.741587][ T5167] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.749406][ T5167] overlayfs: failed to resolve './file0': -2 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5170] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5170] close(3) = 0 [pid 5170] mkdir("./file0", 0777) = 0 [ 45.834135][ T5170] loop0: detected capacity change from 0 to 8192 [ 45.843232][ T5170] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.856383][ T5170] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.865717][ T5170] REISERFS (device loop0): using ordered data mode [ 45.872230][ T5170] reiserfs: using flush barriers [pid 5170] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5170] chdir("./file0") = 0 [pid 5170] ioctl(4, LOOP_CLR_FD) = 0 [pid 5170] close(4) = 0 [pid 5170] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5170] mkdir("./file1", 000) = 0 [pid 5169] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... futex resumed>) = 0 [pid 5169] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] mkdir("./bus", 000 [pid 5169] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... mkdir resumed>) = 0 [pid 5170] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5169] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 45.878144][ T5170] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.894420][ T5170] REISERFS (device loop0): checking transaction log (loop0) [ 45.902361][ T5170] REISERFS (device loop0): Using r5 hash to sort names [ 45.909411][ T5170] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 45.922590][ T5170] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5169] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5170] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5169] exit_group(0) = ? [pid 5170] <... futex resumed>) = ? [pid 5170] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./31/binderfs") = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5172 ./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x5555559356e0, 24) = 0 [pid 5172] chdir("./32") = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5172] setpgid(0, 0) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] write(3, "1000", 4) = 4 [pid 5172] close(3) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5172] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5172] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5172] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x7f8d103ee9e0, 24 [pid 5172] <... clone resumed>, parent_tid=[5173], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5173 [ 45.946502][ T5170] overlayfs: upper fs needs to support d_type. [ 45.952684][ T5170] overlayfs: upper fs does not support tmpfile. [ 45.959523][ T5170] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.967074][ T5170] overlayfs: failed to resolve './file0': -2 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5172] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5173] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./file0", 0777) = 0 [ 46.052752][ T5173] loop0: detected capacity change from 0 to 8192 [ 46.061844][ T5173] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.074984][ T5173] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.084238][ T5173] REISERFS (device loop0): using ordered data mode [ 46.090980][ T5173] reiserfs: using flush barriers [pid 5173] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5173] chdir("./file0") = 0 [pid 5173] ioctl(4, LOOP_CLR_FD) = 0 [pid 5173] close(4) = 0 [pid 5173] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5172] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] mkdir("./file1", 000 [pid 5172] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] <... mkdir resumed>) = 0 [pid 5173] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5172] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] mkdir("./bus", 000) = 0 [pid 5173] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5172] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 46.096701][ T5173] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.113306][ T5173] REISERFS (device loop0): checking transaction log (loop0) [ 46.121439][ T5173] REISERFS (device loop0): Using r5 hash to sort names [ 46.128480][ T5173] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 46.141187][ T5173] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5173] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5173] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5172] exit_group(0) = ? [pid 5173] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./32/binderfs") = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5175 ./strace-static-x86_64: Process 5175 attached [pid 5175] set_robust_list(0x5555559356e0, 24) = 0 [pid 5175] chdir("./33") = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5175] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5175] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5175] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5176], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5176 [pid 5175] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5176 attached [pid 5176] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5175] <... futex resumed>) = 0 [ 46.167998][ T5173] overlayfs: upper fs needs to support d_type. [ 46.174316][ T5173] overlayfs: upper fs does not support tmpfile. [ 46.181097][ T5173] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.189233][ T5173] overlayfs: failed to resolve './file0': -2 [pid 5175] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5176] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5176] close(3) = 0 [pid 5176] mkdir("./file0", 0777) = 0 [ 46.271465][ T5176] loop0: detected capacity change from 0 to 8192 [ 46.280718][ T5176] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.293745][ T5176] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.302957][ T5176] REISERFS (device loop0): using ordered data mode [ 46.309489][ T5176] reiserfs: using flush barriers [pid 5176] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file0") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [ 46.315130][ T5176] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.331402][ T5176] REISERFS (device loop0): checking transaction log (loop0) [ 46.339750][ T5176] REISERFS (device loop0): Using r5 hash to sort names [ 46.346739][ T5176] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 46.359469][ T5176] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5176] close(4) = 0 [pid 5176] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 1 [pid 5176] mkdir("./file1", 000) = 0 [pid 5176] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 1 [pid 5176] mkdir("./bus", 000) = 0 [pid 5176] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5176] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5175] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5176] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5176] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] exit_group(0 [pid 5176] <... futex resumed>) = ? [pid 5175] <... exit_group resumed>) = ? [pid 5176] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./33/binderfs") = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5178 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x5555559356e0, 24) = 0 [pid 5178] chdir("./34") = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5178] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5179 attached , parent_tid=[5179], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5179 [pid 5179] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5179] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5179] memfd_create("syzkaller", 0 [pid 5178] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5179] <... memfd_create resumed>) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 46.373890][ T5176] overlayfs: upper fs needs to support d_type. [ 46.380207][ T5176] overlayfs: upper fs does not support tmpfile. [ 46.387090][ T5176] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.395346][ T5176] overlayfs: failed to resolve './file0': -2 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5179] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [ 46.478850][ T5179] loop0: detected capacity change from 0 to 8192 [ 46.487764][ T5179] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.500740][ T5179] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.509917][ T5179] REISERFS (device loop0): using ordered data mode [ 46.516484][ T5179] reiserfs: using flush barriers [pid 5179] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [pid 5179] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] mkdir("./file1", 000 [pid 5178] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... mkdir resumed>) = 0 [pid 5178] <... futex resumed>) = 0 [pid 5179] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] mkdir("./bus", 000 [pid 5178] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... mkdir resumed>) = 0 [pid 5178] <... futex resumed>) = 0 [pid 5179] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 46.521955][ T5179] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.538336][ T5179] REISERFS (device loop0): checking transaction log (loop0) [ 46.546818][ T5179] REISERFS (device loop0): Using r5 hash to sort names [ 46.553976][ T5179] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 46.566797][ T5179] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5178] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5179] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... futex resumed>) = 0 [pid 5178] exit_group(0) = ? [pid 5179] <... futex resumed>) = ? [pid 5179] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./34/binderfs") = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5181 attached , child_tidptr=0x5555559356d0) = 5181 [pid 5181] set_robust_list(0x5555559356e0, 24) = 0 [pid 5181] chdir("./35") = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5181] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5181] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5182] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] <... clone resumed>, parent_tid=[5182], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5182 [ 46.583436][ T5179] overlayfs: upper fs needs to support d_type. [ 46.590290][ T5179] overlayfs: upper fs does not support tmpfile. [ 46.597198][ T5179] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.605012][ T5179] overlayfs: failed to resolve './file0': -2 [pid 5181] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5181] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5182] memfd_create("syzkaller", 0) = 3 [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5182] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5182] close(3) = 0 [pid 5182] mkdir("./file0", 0777) = 0 [ 46.690201][ T5182] loop0: detected capacity change from 0 to 8192 [ 46.699521][ T5182] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.712730][ T5182] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.721926][ T5182] REISERFS (device loop0): using ordered data mode [ 46.728456][ T5182] reiserfs: using flush barriers [pid 5182] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5182] chdir("./file0") = 0 [pid 5182] ioctl(4, LOOP_CLR_FD) = 0 [pid 5182] close(4) = 0 [pid 5182] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] <... futex resumed>) = 0 [pid 5181] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5181] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... futex resumed>) = 0 [pid 5182] mkdir("./file1", 000) = 0 [pid 5182] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... futex resumed>) = 0 [pid 5181] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... futex resumed>) = 1 [pid 5182] mkdir("./bus", 000) = 0 [pid 5182] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5181] <... futex resumed>) = 0 [pid 5182] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5181] <... futex resumed>) = 0 [pid 5182] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 46.733980][ T5182] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.750315][ T5182] REISERFS (device loop0): checking transaction log (loop0) [ 46.758396][ T5182] REISERFS (device loop0): Using r5 hash to sort names [ 46.765524][ T5182] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 46.778181][ T5182] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5181] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5182] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... futex resumed>) = 0 [pid 5181] exit_group(0) = ? [pid 5182] <... futex resumed>) = ? [pid 5182] +++ exited with 0 +++ [pid 5181] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./35/binderfs") = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5184 attached [pid 5184] set_robust_list(0x5555559356e0, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5184 [pid 5184] chdir("./36") = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5184] setpgid(0, 0) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] write(3, "1000", 4) = 4 [pid 5184] close(3) = 0 [pid 5184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5184] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5184] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5184] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5185], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5185 [pid 5184] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5185 attached [pid 5185] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 46.802941][ T5182] overlayfs: upper fs needs to support d_type. [ 46.809194][ T5182] overlayfs: upper fs does not support tmpfile. [ 46.816044][ T5182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.824158][ T5182] overlayfs: failed to resolve './file0': -2 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5185] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5185] close(3) = 0 [pid 5185] mkdir("./file0", 0777) = 0 [ 46.902761][ T5185] loop0: detected capacity change from 0 to 8192 [ 46.911844][ T5185] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.925054][ T5185] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.934190][ T5185] REISERFS (device loop0): using ordered data mode [ 46.940752][ T5185] reiserfs: using flush barriers [pid 5185] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4) = 0 [pid 5185] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] <... futex resumed>) = 0 [pid 5185] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... futex resumed>) = 0 [pid 5184] <... futex resumed>) = 1 [pid 5184] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] mkdir("./file1", 000) = 0 [pid 5185] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] <... futex resumed>) = 0 [pid 5185] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5184] <... futex resumed>) = 0 [pid 5185] mkdir("./bus", 000 [pid 5184] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] <... mkdir resumed>) = 0 [pid 5185] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] <... futex resumed>) = 0 [pid 5185] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5184] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 46.946323][ T5185] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.962673][ T5185] REISERFS (device loop0): checking transaction log (loop0) [ 46.970730][ T5185] REISERFS (device loop0): Using r5 hash to sort names [ 46.977844][ T5185] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 46.990494][ T5185] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5184] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5185] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5185] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] <... futex resumed>) = 0 [pid 5184] exit_group(0) = ? [pid 5185] <... futex resumed>) = ? [pid 5185] +++ exited with 0 +++ [pid 5184] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./36/binderfs") = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5187 attached [pid 5187] set_robust_list(0x5555559356e0, 24) = 0 [pid 5187] chdir("./37") = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5187 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5187] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5187] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5188], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5188 [pid 5187] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 47.016070][ T5185] overlayfs: upper fs needs to support d_type. [ 47.022329][ T5185] overlayfs: upper fs does not support tmpfile. [ 47.029305][ T5185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.037295][ T5185] overlayfs: failed to resolve './file0': -2 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5188] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5188] close(3) = 0 [pid 5188] mkdir("./file0", 0777) = 0 [ 47.111909][ T5188] loop0: detected capacity change from 0 to 8192 [ 47.120451][ T5188] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.133714][ T5188] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.143046][ T5188] REISERFS (device loop0): using ordered data mode [ 47.149584][ T5188] reiserfs: using flush barriers [pid 5188] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file0") = 0 [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [pid 5188] close(4) = 0 [pid 5188] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5188] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] <... futex resumed>) = 0 [pid 5187] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... futex resumed>) = 0 [pid 5188] mkdir("./file1", 000) = 0 [pid 5188] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... futex resumed>) = 0 [pid 5187] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] <... futex resumed>) = 1 [pid 5187] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] mkdir("./bus", 000) = 0 [pid 5188] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... futex resumed>) = 0 [ 47.155254][ T5188] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.171538][ T5188] REISERFS (device loop0): checking transaction log (loop0) [ 47.179945][ T5188] REISERFS (device loop0): Using r5 hash to sort names [ 47.187102][ T5188] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 47.199850][ T5188] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5188] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5188] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] exit_group(0 [pid 5188] <... futex resumed>) = ? [pid 5187] <... exit_group resumed>) = ? [pid 5188] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./37/binderfs") = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5190 ./strace-static-x86_64: Process 5190 attached [pid 5190] set_robust_list(0x5555559356e0, 24) = 0 [pid 5190] chdir("./38") = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5190] write(3, "1000", 4) = 4 [pid 5190] close(3) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5190] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5190] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5190] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x7f8d103ee9e0, 24 [pid 5190] <... clone resumed>, parent_tid=[5191], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5191 [pid 5191] <... set_robust_list resumed>) = 0 [ 47.224523][ T5188] overlayfs: upper fs needs to support d_type. [ 47.230867][ T5188] overlayfs: upper fs does not support tmpfile. [ 47.237748][ T5188] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.245737][ T5188] overlayfs: failed to resolve './file0': -2 [pid 5190] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5191] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file0", 0777) = 0 [ 47.333199][ T5191] loop0: detected capacity change from 0 to 8192 [ 47.343159][ T5191] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.356221][ T5191] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.365509][ T5191] REISERFS (device loop0): using ordered data mode [ 47.372258][ T5191] reiserfs: using flush barriers [pid 5191] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5191] chdir("./file0") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD) = 0 [pid 5191] close(4) = 0 [pid 5191] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 1 [ 47.378286][ T5191] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.394877][ T5191] REISERFS (device loop0): checking transaction log (loop0) [ 47.402905][ T5191] REISERFS (device loop0): Using r5 hash to sort names [ 47.409995][ T5191] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 47.422846][ T5191] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5191] mkdir("./file1", 000) = 0 [pid 5191] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 1 [pid 5191] mkdir("./bus", 000) = 0 [pid 5191] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 1 [pid 5191] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5191] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] exit_group(0) = ? [pid 5191] <... futex resumed>) = ? [pid 5191] +++ exited with 0 +++ [pid 5190] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./38/binderfs") = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5193 attached , child_tidptr=0x5555559356d0) = 5193 [pid 5193] set_robust_list(0x5555559356e0, 24) = 0 [pid 5193] chdir("./39") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5193] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5193] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5193] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5194 attached , parent_tid=[5194], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5194 [pid 5194] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5194] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5193] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5194] memfd_create("syzkaller", 0) = 3 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 47.437448][ T5191] overlayfs: upper fs needs to support d_type. [ 47.443995][ T5191] overlayfs: upper fs does not support tmpfile. [ 47.451156][ T5191] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.460051][ T5191] overlayfs: failed to resolve './file0': -2 [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5194] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5194] close(3) = 0 [pid 5194] mkdir("./file0", 0777) = 0 [ 47.542018][ T5194] loop0: detected capacity change from 0 to 8192 [ 47.551265][ T5194] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.564348][ T5194] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.573576][ T5194] REISERFS (device loop0): using ordered data mode [ 47.580121][ T5194] reiserfs: using flush barriers [pid 5194] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5194] chdir("./file0") = 0 [pid 5194] ioctl(4, LOOP_CLR_FD) = 0 [pid 5194] close(4) = 0 [pid 5194] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5194] mkdir("./file1", 000 [pid 5193] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... mkdir resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 5194] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] mkdir("./bus", 000 [pid 5193] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... mkdir resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 5194] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5193] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 47.585988][ T5194] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.602307][ T5194] REISERFS (device loop0): checking transaction log (loop0) [ 47.610467][ T5194] REISERFS (device loop0): Using r5 hash to sort names [ 47.617797][ T5194] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 47.630620][ T5194] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5193] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5194] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5193] exit_group(0) = ? [pid 5194] <... futex resumed>) = ? [pid 5194] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./39/binderfs") = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5196 ./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x5555559356e0, 24) = 0 [pid 5196] chdir("./40") = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5196] setpgid(0, 0) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4) = 4 [pid 5196] close(3) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5196] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5196] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5197 attached , parent_tid=[5197], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5197 [pid 5196] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] set_robust_list(0x7f8d103ee9e0, 24 [pid 5196] <... futex resumed>) = 0 [pid 5197] <... set_robust_list resumed>) = 0 [pid 5196] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5197] memfd_create("syzkaller", 0) = 3 [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 47.644940][ T5194] overlayfs: upper fs needs to support d_type. [ 47.651218][ T5194] overlayfs: upper fs does not support tmpfile. [ 47.658326][ T5194] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.666089][ T5194] overlayfs: failed to resolve './file0': -2 [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5197] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5197] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5197] close(3) = 0 [pid 5197] mkdir("./file0", 0777) = 0 [ 47.746554][ T5197] loop0: detected capacity change from 0 to 8192 [ 47.757572][ T5197] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.770671][ T5197] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.779908][ T5197] REISERFS (device loop0): using ordered data mode [ 47.786455][ T5197] reiserfs: using flush barriers [pid 5197] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5197] chdir("./file0") = 0 [pid 5197] ioctl(4, LOOP_CLR_FD) = 0 [pid 5197] close(4) = 0 [pid 5197] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5196] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... futex resumed>) = 1 [pid 5197] mkdir("./file1", 000) = 0 [pid 5197] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5196] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... futex resumed>) = 1 [pid 5197] mkdir("./bus", 000) = 0 [pid 5197] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5196] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... futex resumed>) = 1 [ 47.792062][ T5197] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.808722][ T5197] REISERFS (device loop0): checking transaction log (loop0) [ 47.816801][ T5197] REISERFS (device loop0): Using r5 hash to sort names [ 47.823913][ T5197] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 47.836678][ T5197] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5197] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5197] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] <... futex resumed>) = 0 [pid 5196] exit_group(0) = ? [pid 5197] <... futex resumed>) = ? [pid 5197] +++ exited with 0 +++ [pid 5196] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./40/binderfs") = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5199 ./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x5555559356e0, 24) = 0 [pid 5199] chdir("./41") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 47.865690][ T5197] overlayfs: upper fs needs to support d_type. [ 47.871951][ T5197] overlayfs: upper fs does not support tmpfile. [ 47.878772][ T5197] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.886748][ T5197] overlayfs: failed to resolve './file0': -2 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5199] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5200 attached , parent_tid=[5200], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5200 [pid 5200] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5200] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5200] <... futex resumed>) = 0 [pid 5199] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5200] memfd_create("syzkaller", 0) = 3 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5200] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] mkdir("./file0", 0777) = 0 [ 47.986989][ T5200] loop0: detected capacity change from 0 to 8192 [ 47.995562][ T5200] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.008557][ T5200] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.017853][ T5200] REISERFS (device loop0): using ordered data mode [ 48.024349][ T5200] reiserfs: using flush barriers [pid 5200] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./file0") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [pid 5200] close(4) = 0 [pid 5200] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 1 [pid 5200] mkdir("./file1", 000) = 0 [pid 5200] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 1 [pid 5200] mkdir("./bus", 000) = 0 [pid 5200] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 1 [ 48.030052][ T5200] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.046263][ T5200] REISERFS (device loop0): checking transaction log (loop0) [ 48.054196][ T5200] REISERFS (device loop0): Using r5 hash to sort names [ 48.061856][ T5200] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 48.074596][ T5200] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5200] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5200] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] exit_group(0) = ? [pid 5200] <... futex resumed>) = ? [pid 5200] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./41/binderfs") = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5202 ./strace-static-x86_64: Process 5202 attached [pid 5202] set_robust_list(0x5555559356e0, 24) = 0 [pid 5202] chdir("./42") = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4) = 4 [pid 5202] close(3) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5202] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5202] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5203], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5203 [pid 5202] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5203] memfd_create("syzkaller", 0) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 48.102720][ T5200] overlayfs: upper fs needs to support d_type. [ 48.109008][ T5200] overlayfs: upper fs does not support tmpfile. [ 48.115936][ T5200] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.123453][ T5200] overlayfs: failed to resolve './file0': -2 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5203] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3) = 0 [pid 5203] mkdir("./file0", 0777) = 0 [ 48.201716][ T5203] loop0: detected capacity change from 0 to 8192 [ 48.210620][ T5203] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.223644][ T5203] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.233017][ T5203] REISERFS (device loop0): using ordered data mode [ 48.239676][ T5203] reiserfs: using flush barriers [pid 5203] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4) = 0 [pid 5203] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] mkdir("./file1", 000) = 0 [ 48.245209][ T5203] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.261464][ T5203] REISERFS (device loop0): checking transaction log (loop0) [ 48.269449][ T5203] REISERFS (device loop0): Using r5 hash to sort names [ 48.276546][ T5203] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 48.289276][ T5203] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5203] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] mkdir("./bus", 000) = 0 [pid 5203] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... futex resumed>) = 1 [pid 5203] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5203] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5203] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] exit_group(0) = ? [pid 5203] <... futex resumed>) = ? [pid 5203] +++ exited with 0 +++ [pid 5202] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./42/binderfs") = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5205 ./strace-static-x86_64: Process 5205 attached [pid 5205] set_robust_list(0x5555559356e0, 24) = 0 [pid 5205] chdir("./43") = 0 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5205] setpgid(0, 0) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5205] write(3, "1000", 4) = 4 [pid 5205] close(3) = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5205] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5205] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5205] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5206 attached , parent_tid=[5206], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5206 [pid 5206] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5206] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = 1 [pid 5205] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5206] memfd_create("syzkaller", 0) = 3 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 48.319960][ T5203] overlayfs: upper fs needs to support d_type. [ 48.326460][ T5203] overlayfs: upper fs does not support tmpfile. [ 48.333234][ T5203] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.341216][ T5203] overlayfs: failed to resolve './file0': -2 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5206] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5206] close(3) = 0 [pid 5206] mkdir("./file0", 0777) = 0 [ 48.420863][ T5206] loop0: detected capacity change from 0 to 8192 [ 48.429853][ T5206] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.442948][ T5206] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.452242][ T5206] REISERFS (device loop0): using ordered data mode [ 48.458827][ T5206] reiserfs: using flush barriers [pid 5206] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5206] chdir("./file0") = 0 [pid 5206] ioctl(4, LOOP_CLR_FD) = 0 [pid 5206] close(4) = 0 [pid 5206] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 0 [pid 5206] mkdir("./file1", 000) = 0 [pid 5206] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 1 [pid 5206] mkdir("./bus", 000) = 0 [pid 5206] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 1 [ 48.464397][ T5206] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.480690][ T5206] REISERFS (device loop0): checking transaction log (loop0) [ 48.488694][ T5206] REISERFS (device loop0): Using r5 hash to sort names [ 48.495869][ T5206] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 48.508590][ T5206] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5206] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5206] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5205] exit_group(0) = ? [pid 5206] +++ exited with 0 +++ [pid 5205] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./43/binderfs") = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5208 ./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x5555559356e0, 24) = 0 [pid 5208] chdir("./44") = 0 [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5208] close(3) = 0 [pid 5208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5208] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5208] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5208] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5209], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5209 [pid 5208] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5209 attached [pid 5209] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5209] memfd_create("syzkaller", 0) = 3 [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 48.528023][ T5206] overlayfs: upper fs needs to support d_type. [ 48.534522][ T5206] overlayfs: upper fs does not support tmpfile. [ 48.541287][ T5206] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.549283][ T5206] overlayfs: failed to resolve './file0': -2 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5209] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5209] close(3) = 0 [pid 5209] mkdir("./file0", 0777) = 0 [ 48.622948][ T5209] loop0: detected capacity change from 0 to 8192 [ 48.632035][ T5209] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.645057][ T5209] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.654321][ T5209] REISERFS (device loop0): using ordered data mode [ 48.660865][ T5209] reiserfs: using flush barriers [pid 5209] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5209] chdir("./file0") = 0 [pid 5209] ioctl(4, LOOP_CLR_FD) = 0 [pid 5209] close(4) = 0 [pid 5209] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5209] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... futex resumed>) = 0 [pid 5209] mkdir("./file1", 000 [pid 5208] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... mkdir resumed>) = 0 [pid 5209] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5209] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = 0 [pid 5208] <... futex resumed>) = 1 [pid 5209] mkdir("./bus", 000 [pid 5208] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... mkdir resumed>) = 0 [pid 5209] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5209] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5208] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 48.666373][ T5209] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.682719][ T5209] REISERFS (device loop0): checking transaction log (loop0) [ 48.690890][ T5209] REISERFS (device loop0): Using r5 hash to sort names [ 48.697871][ T5209] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 48.710582][ T5209] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5208] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5209] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] exit_group(0) = ? [pid 5209] <... futex resumed>) = ? [pid 5209] +++ exited with 0 +++ [pid 5208] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./44/binderfs") = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5211 ./strace-static-x86_64: Process 5211 attached [pid 5211] set_robust_list(0x5555559356e0, 24) = 0 [pid 5211] chdir("./45") = 0 [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5211] write(3, "1000", 4) = 4 [pid 5211] close(3) = 0 [ 48.734120][ T5209] overlayfs: upper fs needs to support d_type. [ 48.740740][ T5209] overlayfs: upper fs does not support tmpfile. [ 48.747579][ T5209] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.755655][ T5209] overlayfs: failed to resolve './file0': -2 [pid 5211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5211] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5211] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5211] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5212 attached , parent_tid=[5212], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5212 [pid 5212] set_robust_list(0x7f8d103ee9e0, 24 [pid 5211] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5212] <... set_robust_list resumed>) = 0 [pid 5212] memfd_create("syzkaller", 0) = 3 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5212] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5212] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5212] close(3) = 0 [pid 5212] mkdir("./file0", 0777) = 0 [ 48.859672][ T5212] loop0: detected capacity change from 0 to 8192 [ 48.868905][ T5212] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.881873][ T5212] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.891074][ T5212] REISERFS (device loop0): using ordered data mode [ 48.897622][ T5212] reiserfs: using flush barriers [pid 5212] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5212] chdir("./file0") = 0 [pid 5212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5212] close(4) = 0 [pid 5212] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5211] <... futex resumed>) = 0 [pid 5212] mkdir("./file1", 000 [pid 5211] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... mkdir resumed>) = 0 [pid 5211] <... futex resumed>) = 0 [pid 5212] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... futex resumed>) = 0 [pid 5211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] mkdir("./bus", 000 [pid 5211] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... mkdir resumed>) = 0 [pid 5211] <... futex resumed>) = 0 [pid 5211] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5211] <... futex resumed>) = 0 [pid 5212] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5211] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5211] <... futex resumed>) = 0 [pid 5212] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 48.903291][ T5212] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.919613][ T5212] REISERFS (device loop0): checking transaction log (loop0) [ 48.927645][ T5212] REISERFS (device loop0): Using r5 hash to sort names [ 48.934616][ T5212] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 48.947316][ T5212] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5211] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5212] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5211] <... futex resumed>) = 0 [pid 5212] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5211] exit_group(0 [pid 5212] <... futex resumed>) = ? [pid 5211] <... exit_group resumed>) = ? [pid 5212] +++ exited with 0 +++ [pid 5211] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./45/binderfs") = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5214 ./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x5555559356e0, 24) = 0 [pid 5214] chdir("./46") = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5214] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5214] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5214] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5215] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] <... clone resumed>, parent_tid=[5215], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5215 [pid 5214] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5214] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] memfd_create("syzkaller", 0) = 3 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 48.969445][ T5212] overlayfs: upper fs needs to support d_type. [ 48.975735][ T5212] overlayfs: upper fs does not support tmpfile. [ 48.982453][ T5212] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.990464][ T5212] overlayfs: failed to resolve './file0': -2 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5215] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./file0", 0777) = 0 [ 49.071904][ T5215] loop0: detected capacity change from 0 to 8192 [ 49.081535][ T5215] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.094691][ T5215] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 49.103957][ T5215] REISERFS (device loop0): using ordered data mode [ 49.110520][ T5215] reiserfs: using flush barriers [pid 5215] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5215] chdir("./file0") = 0 [pid 5215] ioctl(4, LOOP_CLR_FD) = 0 [pid 5215] close(4) = 0 [pid 5215] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5215] mkdir("./file1", 000 [pid 5214] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... mkdir resumed>) = 0 [pid 5215] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5215] mkdir("./bus", 000 [pid 5214] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... mkdir resumed>) = 0 [pid 5215] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] <... futex resumed>) = 0 [pid 5215] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 49.116258][ T5215] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.132557][ T5215] REISERFS (device loop0): checking transaction log (loop0) [ 49.140950][ T5215] REISERFS (device loop0): Using r5 hash to sort names [ 49.147978][ T5215] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 49.160664][ T5215] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5214] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5215] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] exit_group(0 [pid 5215] <... futex resumed>) = ? [pid 5214] <... exit_group resumed>) = ? [pid 5215] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./46/binderfs") = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5217 attached [pid 5217] set_robust_list(0x5555559356e0, 24) = 0 [pid 5217] chdir("./47" [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5217 [pid 5217] <... chdir resumed>) = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5217] setpgid(0, 0) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] write(3, "1000", 4) = 4 [ 49.185382][ T5215] overlayfs: upper fs needs to support d_type. [ 49.191606][ T5215] overlayfs: upper fs does not support tmpfile. [ 49.198273][ T5215] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.206323][ T5215] overlayfs: failed to resolve './file0': -2 [pid 5217] close(3) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5217] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5218], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5218 [pid 5217] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5218] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5218] close(3) = 0 [pid 5218] mkdir("./file0", 0777) = 0 [ 49.294342][ T5218] loop0: detected capacity change from 0 to 8192 [ 49.304133][ T5218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.317309][ T5218] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 49.326888][ T5218] REISERFS (device loop0): using ordered data mode [ 49.333410][ T5218] reiserfs: using flush barriers [pid 5218] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5218] chdir("./file0") = 0 [pid 5218] ioctl(4, LOOP_CLR_FD) = 0 [pid 5218] close(4) = 0 [pid 5218] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] mkdir("./file1", 000 [pid 5217] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... mkdir resumed>) = 0 [pid 5218] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5218] mkdir("./bus", 000 [pid 5217] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... mkdir resumed>) = 0 [pid 5218] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5217] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 49.339170][ T5218] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.355372][ T5218] REISERFS (device loop0): checking transaction log (loop0) [ 49.363291][ T5218] REISERFS (device loop0): Using r5 hash to sort names [ 49.370305][ T5218] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 49.382993][ T5218] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5217] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5218] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5218] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] exit_group(0 [pid 5218] <... futex resumed>) = ? [pid 5217] <... exit_group resumed>) = ? [pid 5218] +++ exited with 0 +++ [pid 5217] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./47/binderfs") = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5220 attached , child_tidptr=0x5555559356d0) = 5220 [pid 5220] set_robust_list(0x5555559356e0, 24) = 0 [pid 5220] chdir("./48") = 0 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5220] setpgid(0, 0) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5220] write(3, "1000", 4) = 4 [pid 5220] close(3) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5220] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5220] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5220] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5221 attached , parent_tid=[5221], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5221 [pid 5221] set_robust_list(0x7f8d103ee9e0, 24 [pid 5220] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... set_robust_list resumed>) = 0 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5220] <... futex resumed>) = 0 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 49.410145][ T5218] overlayfs: upper fs needs to support d_type. [ 49.416408][ T5218] overlayfs: upper fs does not support tmpfile. [ 49.422942][ T5218] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.430959][ T5218] overlayfs: failed to resolve './file0': -2 [pid 5220] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5221] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5221] close(3) = 0 [pid 5221] mkdir("./file0", 0777) = 0 [ 49.508769][ T5221] loop0: detected capacity change from 0 to 8192 [ 49.518493][ T5221] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.531504][ T5221] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 49.540674][ T5221] REISERFS (device loop0): using ordered data mode [ 49.547282][ T5221] reiserfs: using flush barriers [pid 5221] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] <... futex resumed>) = 1 [pid 5221] mkdir("./file1", 000) = 0 [pid 5221] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] <... futex resumed>) = 1 [pid 5221] mkdir("./bus", 000) = 0 [pid 5221] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] <... futex resumed>) = 1 [ 49.552743][ T5221] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.569091][ T5221] REISERFS (device loop0): checking transaction log (loop0) [ 49.577362][ T5221] REISERFS (device loop0): Using r5 hash to sort names [ 49.584534][ T5221] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 49.597225][ T5221] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5221] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5221] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5220] exit_group(0 [pid 5221] exit_group(0) = ? [pid 5220] <... exit_group resumed>) = ? [pid 5221] +++ exited with 0 +++ [pid 5220] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./48/binderfs") = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5223 attached , child_tidptr=0x5555559356d0) = 5223 [pid 5223] set_robust_list(0x5555559356e0, 24) = 0 [pid 5223] chdir("./49") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5223] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5224 attached , parent_tid=[5224], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5224 [pid 5224] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5224] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5223] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 49.625552][ T5221] overlayfs: upper fs needs to support d_type. [ 49.631719][ T5221] overlayfs: upper fs does not support tmpfile. [ 49.638693][ T5221] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.646811][ T5221] overlayfs: failed to resolve './file0': -2 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5224] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5224] close(3) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [ 49.727882][ T5224] loop0: detected capacity change from 0 to 8192 [ 49.737216][ T5224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.750335][ T5224] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 49.759572][ T5224] REISERFS (device loop0): using ordered data mode [ 49.766125][ T5224] reiserfs: using flush barriers [pid 5224] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5224] chdir("./file0") = 0 [pid 5224] ioctl(4, LOOP_CLR_FD) = 0 [pid 5224] close(4) = 0 [pid 5224] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5224] mkdir("./file1", 000 [pid 5223] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... mkdir resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5224] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] mkdir("./bus", 000 [pid 5223] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... mkdir resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5224] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5223] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 49.771759][ T5224] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.788078][ T5224] REISERFS (device loop0): checking transaction log (loop0) [ 49.796267][ T5224] REISERFS (device loop0): Using r5 hash to sort names [ 49.803210][ T5224] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 49.815920][ T5224] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5223] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5224] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] <... futex resumed>) = 0 [pid 5223] exit_group(0) = ? [pid 5224] <... futex resumed>) = ? [pid 5224] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./49/binderfs") = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5226] set_robust_list(0x5555559356e0, 24) = 0 [pid 5226] chdir("./50") = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5226] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5227], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5227 ./strace-static-x86_64: Process 5227 attached [pid 5227] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5227] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5227] <... futex resumed>) = 0 [pid 5226] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5227] memfd_create("syzkaller", 0) = 3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 49.829904][ T5224] overlayfs: upper fs needs to support d_type. [ 49.836363][ T5224] overlayfs: upper fs does not support tmpfile. [ 49.842951][ T5224] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 49.850667][ T5224] overlayfs: failed to resolve './file0': -2 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5227] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5227] close(3) = 0 [pid 5227] mkdir("./file0", 0777) = 0 [ 49.934357][ T5227] loop0: detected capacity change from 0 to 8192 [ 49.944035][ T5227] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.957080][ T5227] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 49.966451][ T5227] REISERFS (device loop0): using ordered data mode [ 49.972984][ T5227] reiserfs: using flush barriers [pid 5227] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./file0") = 0 [pid 5227] ioctl(4, LOOP_CLR_FD) = 0 [pid 5227] close(4) = 0 [pid 5227] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5227] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... futex resumed>) = 0 [pid 5227] mkdir("./file1", 000) = 0 [pid 5227] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5227] mkdir("./bus", 000 [pid 5226] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... mkdir resumed>) = 0 [pid 5227] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 49.978777][ T5227] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.995177][ T5227] REISERFS (device loop0): checking transaction log (loop0) [ 50.003637][ T5227] REISERFS (device loop0): Using r5 hash to sort names [ 50.010604][ T5227] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 50.023265][ T5227] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5227] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5227] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] exit_group(0 [pid 5227] <... futex resumed>) = ? [pid 5226] <... exit_group resumed>) = ? [pid 5227] +++ exited with 0 +++ [pid 5226] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./50/binderfs") = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached [pid 5229] set_robust_list(0x5555559356e0, 24) = 0 [pid 5229] chdir("./51") = 0 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5229] setpgid(0, 0) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5229 [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1000", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5229] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5229] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5229] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5230], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5230 [pid 5229] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5230 attached [pid 5230] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 50.048805][ T5227] overlayfs: upper fs needs to support d_type. [ 50.055480][ T5227] overlayfs: upper fs does not support tmpfile. [ 50.062047][ T5227] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.069971][ T5227] overlayfs: failed to resolve './file0': -2 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5230] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5230] close(3) = 0 [pid 5230] mkdir("./file0", 0777) = 0 [ 50.145958][ T5230] loop0: detected capacity change from 0 to 8192 [ 50.154412][ T5230] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.167857][ T5230] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.177179][ T5230] REISERFS (device loop0): using ordered data mode [ 50.183689][ T5230] reiserfs: using flush barriers [pid 5230] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5230] chdir("./file0") = 0 [pid 5230] ioctl(4, LOOP_CLR_FD) = 0 [pid 5230] close(4) = 0 [pid 5230] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] <... futex resumed>) = 0 [pid 5229] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5229] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... futex resumed>) = 0 [pid 5230] mkdir("./file1", 000) = 0 [pid 5230] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5229] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... futex resumed>) = 1 [pid 5230] mkdir("./bus", 000) = 0 [pid 5230] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5229] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... futex resumed>) = 1 [ 50.189854][ T5230] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.206437][ T5230] REISERFS (device loop0): checking transaction log (loop0) [ 50.214846][ T5230] REISERFS (device loop0): Using r5 hash to sort names [ 50.222099][ T5230] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 50.234883][ T5230] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5230] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5230] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5230] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] exit_group(0) = ? [pid 5230] <... futex resumed>) = ? [pid 5230] +++ exited with 0 +++ [pid 5229] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./51/binderfs") = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x5555559356e0, 24) = 0 [pid 5232] chdir("./52") = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5232 [pid 5232] <... setpgid resumed>) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5232] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5232] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5233], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5233 [pid 5232] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5233 attached [pid 5233] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 50.254970][ T5230] overlayfs: upper fs needs to support d_type. [ 50.261189][ T5230] overlayfs: upper fs does not support tmpfile. [ 50.268283][ T5230] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.276102][ T5230] overlayfs: failed to resolve './file0': -2 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5233] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5233] close(3) = 0 [pid 5233] mkdir("./file0", 0777) = 0 [ 50.355337][ T5233] loop0: detected capacity change from 0 to 8192 [ 50.364220][ T5233] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.377248][ T5233] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.386415][ T5233] REISERFS (device loop0): using ordered data mode [ 50.392898][ T5233] reiserfs: using flush barriers [pid 5233] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file0") = 0 [pid 5233] ioctl(4, LOOP_CLR_FD) = 0 [ 50.398720][ T5233] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.415247][ T5233] REISERFS (device loop0): checking transaction log (loop0) [ 50.423225][ T5233] REISERFS (device loop0): Using r5 hash to sort names [ 50.430302][ T5233] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 50.442974][ T5233] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5233] close(4) = 0 [pid 5233] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5233] mkdir("./file1", 000 [pid 5232] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... mkdir resumed>) = 0 [pid 5232] <... futex resumed>) = 0 [pid 5233] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... futex resumed>) = 0 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5233] mkdir("./bus", 000 [pid 5232] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... mkdir resumed>) = 0 [pid 5232] <... futex resumed>) = 0 [pid 5233] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... futex resumed>) = 0 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5233] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5232] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5233] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = 0 [pid 5232] exit_group(0) = ? [pid 5233] <... futex resumed>) = ? [pid 5233] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./52/binderfs") = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached , child_tidptr=0x5555559356d0) = 5235 [pid 5235] set_robust_list(0x5555559356e0, 24) = 0 [pid 5235] chdir("./53") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5235] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5236], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5236 ./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5236] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5235] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5236] memfd_create("syzkaller", 0) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 50.456826][ T5233] overlayfs: upper fs needs to support d_type. [ 50.464500][ T5233] overlayfs: upper fs does not support tmpfile. [ 50.471447][ T5233] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.479507][ T5233] overlayfs: failed to resolve './file0': -2 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5236] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [ 50.559427][ T5236] loop0: detected capacity change from 0 to 8192 [ 50.568738][ T5236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.581768][ T5236] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.590954][ T5236] REISERFS (device loop0): using ordered data mode [ 50.597474][ T5236] reiserfs: using flush barriers [pid 5236] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file0") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = 0 [pid 5236] mkdir("./file1", 000) = 0 [pid 5236] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = 1 [pid 5236] mkdir("./bus", 000) = 0 [pid 5236] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = 1 [ 50.602941][ T5236] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.619257][ T5236] REISERFS (device loop0): checking transaction log (loop0) [ 50.627389][ T5236] REISERFS (device loop0): Using r5 hash to sort names [ 50.634586][ T5236] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 50.647361][ T5236] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5236] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5236] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] exit_group(0) = ? [pid 5236] <... futex resumed>) = ? [pid 5236] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./53/binderfs") = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5238 attached [pid 5238] set_robust_list(0x5555559356e0, 24) = 0 [pid 5238] chdir("./54" [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5238 [pid 5238] <... chdir resumed>) = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5238] write(3, "1000", 4) = 4 [pid 5238] close(3) = 0 [pid 5238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5238] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5238] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5238] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5239], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5239 [pid 5238] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5239 attached [pid 5239] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5239] memfd_create("syzkaller", 0) = 3 [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 50.671424][ T5236] overlayfs: upper fs needs to support d_type. [ 50.677728][ T5236] overlayfs: upper fs does not support tmpfile. [ 50.684230][ T5236] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.692299][ T5236] overlayfs: failed to resolve './file0': -2 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5239] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5239] close(3) = 0 [pid 5239] mkdir("./file0", 0777) = 0 [ 50.770781][ T5239] loop0: detected capacity change from 0 to 8192 [ 50.779919][ T5239] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.793221][ T5239] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.802441][ T5239] REISERFS (device loop0): using ordered data mode [ 50.808969][ T5239] reiserfs: using flush barriers [pid 5239] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5239] chdir("./file0") = 0 [pid 5239] ioctl(4, LOOP_CLR_FD) = 0 [pid 5239] close(4) = 0 [pid 5239] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... futex resumed>) = 0 [pid 5238] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5238] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 0 [pid 5239] mkdir("./file1", 000) = 0 [pid 5239] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 0 [pid 5238] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5238] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 1 [pid 5239] mkdir("./bus", 000) = 0 [pid 5239] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5238] <... futex resumed>) = 0 [pid 5239] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5238] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 50.814599][ T5239] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.830984][ T5239] REISERFS (device loop0): checking transaction log (loop0) [ 50.838974][ T5239] REISERFS (device loop0): Using r5 hash to sort names [ 50.846009][ T5239] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 50.858799][ T5239] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5238] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5239] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 0 [pid 5238] exit_group(0) = ? [pid 5239] <... futex resumed>) = ? [pid 5239] +++ exited with 0 +++ [pid 5238] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5238, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./54/binderfs") = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] set_robust_list(0x5555559356e0, 24) = 0 [pid 5241] chdir("./55") = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5241] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5241] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5241] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5242 attached , parent_tid=[5242], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5242 [pid 5241] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] memfd_create("syzkaller", 0) = 3 [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 50.886633][ T5239] overlayfs: upper fs needs to support d_type. [ 50.892803][ T5239] overlayfs: upper fs does not support tmpfile. [ 50.899537][ T5239] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.907336][ T5239] overlayfs: failed to resolve './file0': -2 [pid 5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5242] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5242] close(3) = 0 [pid 5242] mkdir("./file0", 0777) = 0 [ 50.983597][ T5242] loop0: detected capacity change from 0 to 8192 [ 50.994944][ T5242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.008208][ T5242] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.017453][ T5242] REISERFS (device loop0): using ordered data mode [ 51.023951][ T5242] reiserfs: using flush barriers [pid 5242] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5242] chdir("./file0") = 0 [pid 5242] ioctl(4, LOOP_CLR_FD) = 0 [pid 5242] close(4) = 0 [pid 5242] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... futex resumed>) = 1 [pid 5242] mkdir("./file1", 000) = 0 [pid 5242] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... futex resumed>) = 1 [pid 5242] mkdir("./bus", 000) = 0 [pid 5242] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... futex resumed>) = 1 [ 51.029594][ T5242] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.047029][ T5242] REISERFS (device loop0): checking transaction log (loop0) [ 51.055260][ T5242] REISERFS (device loop0): Using r5 hash to sort names [ 51.062223][ T5242] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 51.074930][ T5242] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5242] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5242] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5241] exit_group(0) = ? [pid 5242] +++ exited with 0 +++ [pid 5241] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./55/binderfs") = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5244 attached , child_tidptr=0x5555559356d0) = 5244 [pid 5244] set_robust_list(0x5555559356e0, 24) = 0 [pid 5244] chdir("./56") = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 51.093772][ T5242] overlayfs: upper fs needs to support d_type. [ 51.100431][ T5242] overlayfs: upper fs does not support tmpfile. [ 51.107457][ T5242] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.115852][ T5242] overlayfs: failed to resolve './file0': -2 [pid 5244] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5244] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5245 attached , parent_tid=[5245], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5245 [pid 5245] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5244] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] memfd_create("syzkaller", 0) = 3 [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5245] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5245] close(3) = 0 [pid 5245] mkdir("./file0", 0777) = 0 [ 51.201423][ T5245] loop0: detected capacity change from 0 to 8192 [ 51.210835][ T5245] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.223993][ T5245] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.233290][ T5245] REISERFS (device loop0): using ordered data mode [ 51.239817][ T5245] reiserfs: using flush barriers [pid 5245] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5245] chdir("./file0") = 0 [pid 5245] ioctl(4, LOOP_CLR_FD) = 0 [pid 5245] close(4) = 0 [pid 5245] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5245] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 5245] mkdir("./file1", 000 [pid 5244] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... mkdir resumed>) = 0 [pid 5245] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [ 51.245660][ T5245] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.261942][ T5245] REISERFS (device loop0): checking transaction log (loop0) [ 51.270059][ T5245] REISERFS (device loop0): Using r5 hash to sort names [ 51.277082][ T5245] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 51.289762][ T5245] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5245] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 1 [pid 5245] mkdir("./bus", 000 [pid 5244] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... mkdir resumed>) = 0 [pid 5245] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5245] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5244] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5245] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5245] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] exit_group(0 [pid 5245] <... futex resumed>) = ? [pid 5244] <... exit_group resumed>) = ? [pid 5245] +++ exited with 0 +++ [pid 5244] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./56/binderfs") = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5247 attached , child_tidptr=0x5555559356d0) = 5247 [pid 5247] set_robust_list(0x5555559356e0, 24) = 0 [pid 5247] chdir("./57") = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5247] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5247] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5248 attached [pid 5248] set_robust_list(0x7f8d103ee9e0, 24 [pid 5247] <... clone resumed>, parent_tid=[5248], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5248 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5247] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] memfd_create("syzkaller", 0 [pid 5247] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5248] <... memfd_create resumed>) = 3 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 51.321590][ T5245] overlayfs: upper fs needs to support d_type. [ 51.328049][ T5245] overlayfs: upper fs does not support tmpfile. [ 51.334525][ T5245] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.342618][ T5245] overlayfs: failed to resolve './file0': -2 [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5248] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5248] close(3) = 0 [pid 5248] mkdir("./file0", 0777) = 0 [ 51.419466][ T5248] loop0: detected capacity change from 0 to 8192 [ 51.428653][ T5248] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.441686][ T5248] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.450893][ T5248] REISERFS (device loop0): using ordered data mode [ 51.457430][ T5248] reiserfs: using flush barriers [pid 5248] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5248] chdir("./file0") = 0 [pid 5248] ioctl(4, LOOP_CLR_FD) = 0 [pid 5248] close(4) = 0 [pid 5248] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5248] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = 1 [pid 5247] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] mkdir("./file1", 000) = 0 [pid 5248] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] mkdir("./bus", 000 [pid 5247] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... mkdir resumed>) = 0 [pid 5248] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5247] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 51.462865][ T5248] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.479191][ T5248] REISERFS (device loop0): checking transaction log (loop0) [ 51.487156][ T5248] REISERFS (device loop0): Using r5 hash to sort names [ 51.494098][ T5248] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 51.506759][ T5248] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5247] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5248] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] exit_group(0 [pid 5248] <... futex resumed>) = ? [pid 5247] <... exit_group resumed>) = ? [pid 5248] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./57/binderfs") = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5250 ./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x5555559356e0, 24) = 0 [pid 5250] chdir("./58") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5250] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5250] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5250] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5251], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5251 [pid 5250] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5251 attached [pid 5251] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5251] memfd_create("syzkaller", 0) = 3 [pid 5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 51.533088][ T5248] overlayfs: upper fs needs to support d_type. [ 51.539302][ T5248] overlayfs: upper fs does not support tmpfile. [ 51.546214][ T5248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.554154][ T5248] overlayfs: failed to resolve './file0': -2 [pid 5251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5251] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5251] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5251] close(3) = 0 [pid 5251] mkdir("./file0", 0777) = 0 [ 51.635872][ T5251] loop0: detected capacity change from 0 to 8192 [ 51.644988][ T5251] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.658101][ T5251] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.667759][ T5251] REISERFS (device loop0): using ordered data mode [ 51.674326][ T5251] reiserfs: using flush barriers [pid 5251] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5251] chdir("./file0") = 0 [pid 5251] ioctl(4, LOOP_CLR_FD) = 0 [pid 5251] close(4) = 0 [pid 5251] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = 0 [pid 5250] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = 1 [pid 5251] mkdir("./file1", 000) = 0 [pid 5251] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = 0 [pid 5250] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = 1 [pid 5251] mkdir("./bus", 000) = 0 [pid 5251] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = 0 [pid 5250] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = 1 [ 51.680210][ T5251] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.696413][ T5251] REISERFS (device loop0): checking transaction log (loop0) [ 51.704371][ T5251] REISERFS (device loop0): Using r5 hash to sort names [ 51.711431][ T5251] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 51.724270][ T5251] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5251] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5251] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5250] <... futex resumed>) = 0 [pid 5250] exit_group(0 [pid 5251] <... futex resumed>) = ? [pid 5250] <... exit_group resumed>) = ? [pid 5251] +++ exited with 0 +++ [pid 5250] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./58/binderfs") = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./58/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5253 attached [pid 5253] set_robust_list(0x5555559356e0, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5253 [pid 5253] chdir("./59") = 0 [pid 5253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5253] setpgid(0, 0) = 0 [pid 5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5253] write(3, "1000", 4) = 4 [pid 5253] close(3) = 0 [pid 5253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5253] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5253] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5253] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5254], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5254 [pid 5253] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5254] memfd_create("syzkaller", 0) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 51.748205][ T5251] overlayfs: upper fs needs to support d_type. [ 51.754467][ T5251] overlayfs: upper fs does not support tmpfile. [ 51.761175][ T5251] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.768872][ T5251] overlayfs: failed to resolve './file0': -2 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5254] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5254] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5254] close(3) = 0 [pid 5254] mkdir("./file0", 0777) = 0 [ 51.841777][ T5254] loop0: detected capacity change from 0 to 8192 [ 51.851165][ T5254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.864353][ T5254] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.873577][ T5254] REISERFS (device loop0): using ordered data mode [ 51.880113][ T5254] reiserfs: using flush barriers [pid 5254] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5254] chdir("./file0") = 0 [pid 5254] ioctl(4, LOOP_CLR_FD) = 0 [pid 5254] close(4) = 0 [pid 5254] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5254] mkdir("./file1", 000 [pid 5253] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... mkdir resumed>) = 0 [pid 5253] <... futex resumed>) = 0 [pid 5254] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] mkdir("./bus", 000 [pid 5253] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... mkdir resumed>) = 0 [pid 5253] <... futex resumed>) = 0 [pid 5254] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5253] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 51.885785][ T5254] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.902241][ T5254] REISERFS (device loop0): checking transaction log (loop0) [ 51.910452][ T5254] REISERFS (device loop0): Using r5 hash to sort names [ 51.917428][ T5254] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 51.930137][ T5254] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5253] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5254] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5254] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] exit_group(0 [pid 5254] <... futex resumed>) = ? [pid 5253] <... exit_group resumed>) = ? [pid 5254] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5253, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./59/binderfs") = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./59/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5256 attached [pid 5256] set_robust_list(0x5555559356e0, 24 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5256 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5256] chdir("./60") = 0 [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] setpgid(0, 0) = 0 [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5256] write(3, "1000", 4) = 4 [pid 5256] close(3) = 0 [pid 5256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5256] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5256] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5256] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5257], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5257 [pid 5256] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5257 attached [pid 5257] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5257] memfd_create("syzkaller", 0) = 3 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 51.948428][ T5254] overlayfs: upper fs needs to support d_type. [ 51.954884][ T5254] overlayfs: upper fs does not support tmpfile. [ 51.961365][ T5254] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.969309][ T5254] overlayfs: failed to resolve './file0': -2 [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5257] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5257] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5257] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5257] close(3) = 0 [pid 5257] mkdir("./file0", 0777) = 0 [ 52.051204][ T5257] loop0: detected capacity change from 0 to 8192 [ 52.060896][ T5257] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.074362][ T5257] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 52.083588][ T5257] REISERFS (device loop0): using ordered data mode [ 52.090663][ T5257] reiserfs: using flush barriers [pid 5257] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5257] chdir("./file0") = 0 [pid 5257] ioctl(4, LOOP_CLR_FD) = 0 [pid 5257] close(4) = 0 [pid 5257] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5257] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 0 [pid 5257] mkdir("./file1", 000) = 0 [pid 5257] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 1 [pid 5257] mkdir("./bus", 000) = 0 [pid 5257] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 1 [ 52.096461][ T5257] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.113020][ T5257] REISERFS (device loop0): checking transaction log (loop0) [ 52.121303][ T5257] REISERFS (device loop0): Using r5 hash to sort names [ 52.128591][ T5257] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 52.141357][ T5257] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5257] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5257] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 0 [pid 5256] exit_group(0) = ? [pid 5257] <... futex resumed>) = ? [pid 5257] +++ exited with 0 +++ [pid 5256] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./60/binderfs") = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./60/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5259 attached , child_tidptr=0x5555559356d0) = 5259 [pid 5259] set_robust_list(0x5555559356e0, 24) = 0 [pid 5259] chdir("./61") = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5259] close(3) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5259] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5259] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5259] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5260 attached [pid 5260] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5260] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... clone resumed>, parent_tid=[5260], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5260 [pid 5259] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 0 [pid 5260] memfd_create("syzkaller", 0) = 3 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 52.167683][ T5257] overlayfs: upper fs needs to support d_type. [ 52.173897][ T5257] overlayfs: upper fs does not support tmpfile. [ 52.180803][ T5257] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.188895][ T5257] overlayfs: failed to resolve './file0': -2 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5260] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5260] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5260] close(3) = 0 [pid 5260] mkdir("./file0", 0777) = 0 [ 52.274455][ T5260] loop0: detected capacity change from 0 to 8192 [ 52.283751][ T5260] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.296836][ T5260] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 52.306010][ T5260] REISERFS (device loop0): using ordered data mode [ 52.312492][ T5260] reiserfs: using flush barriers [pid 5260] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5260] chdir("./file0") = 0 [pid 5260] ioctl(4, LOOP_CLR_FD) = 0 [pid 5260] close(4) = 0 [pid 5260] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5260] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = 0 [pid 5259] <... futex resumed>) = 1 [pid 5260] mkdir("./file1", 000 [pid 5259] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... mkdir resumed>) = 0 [pid 5260] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5260] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... futex resumed>) = 0 [pid 5260] mkdir("./bus", 000 [pid 5259] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... mkdir resumed>) = 0 [pid 5260] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5260] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... futex resumed>) = 0 [pid 5260] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 52.318133][ T5260] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.334686][ T5260] REISERFS (device loop0): checking transaction log (loop0) [ 52.342744][ T5260] REISERFS (device loop0): Using r5 hash to sort names [ 52.349779][ T5260] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 52.362506][ T5260] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5259] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5260] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5259] exit_group(0) = ? [pid 5260] +++ exited with 0 +++ [pid 5259] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./61/binderfs") = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./61/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5262 ./strace-static-x86_64: Process 5262 attached [pid 5262] set_robust_list(0x5555559356e0, 24) = 0 [pid 5262] chdir("./62") = 0 [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5262] setpgid(0, 0) = 0 [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5262] write(3, "1000", 4) = 4 [pid 5262] close(3) = 0 [pid 5262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5262] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5262] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5262] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5263 attached , parent_tid=[5263], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5263 [pid 5263] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5263] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5262] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5263] memfd_create("syzkaller", 0) = 3 [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 52.393403][ T5260] overlayfs: upper fs needs to support d_type. [ 52.399660][ T5260] overlayfs: upper fs does not support tmpfile. [ 52.406636][ T5260] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.414207][ T5260] overlayfs: failed to resolve './file0': -2 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5263] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5263] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5263] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5263] close(3) = 0 [pid 5263] mkdir("./file0", 0777) = 0 [ 52.497738][ T5263] loop0: detected capacity change from 0 to 8192 [ 52.506730][ T5263] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.519788][ T5263] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 52.529134][ T5263] REISERFS (device loop0): using ordered data mode [ 52.535693][ T5263] reiserfs: using flush barriers [pid 5263] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5263] chdir("./file0") = 0 [pid 5263] ioctl(4, LOOP_CLR_FD) = 0 [pid 5263] close(4) = 0 [pid 5263] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] <... futex resumed>) = 0 [pid 5262] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 0 [pid 5263] mkdir("./file1", 000) = 0 [pid 5263] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5262] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 1 [pid 5263] mkdir("./bus", 000) = 0 [pid 5263] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5262] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 1 [ 52.541200][ T5263] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.557685][ T5263] REISERFS (device loop0): checking transaction log (loop0) [ 52.565795][ T5263] REISERFS (device loop0): Using r5 hash to sort names [ 52.572743][ T5263] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 52.585557][ T5263] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5263] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5263] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5262] exit_group(0 [pid 5263] <... futex resumed>) = ? [pid 5262] <... exit_group resumed>) = ? [pid 5263] +++ exited with 0 +++ [pid 5262] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./62/binderfs") = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./62/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5265 attached , child_tidptr=0x5555559356d0) = 5265 [pid 5265] set_robust_list(0x5555559356e0, 24) = 0 [pid 5265] chdir("./63") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5265] write(3, "1000", 4) = 4 [pid 5265] close(3) = 0 [pid 5265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5265] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5265] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5265] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5266 attached , parent_tid=[5266], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5266 [pid 5266] set_robust_list(0x7f8d103ee9e0, 24) = 0 [ 52.617188][ T5263] overlayfs: upper fs needs to support d_type. [ 52.623458][ T5263] overlayfs: upper fs does not support tmpfile. [ 52.630470][ T5263] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.638035][ T5263] overlayfs: failed to resolve './file0': -2 [pid 5266] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = 0 [pid 5265] <... futex resumed>) = 1 [pid 5265] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5266] memfd_create("syzkaller", 0) = 3 [pid 5266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5266] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5266] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5266] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5266] close(3) = 0 [pid 5266] mkdir("./file0", 0777) = 0 [ 52.726607][ T5266] loop0: detected capacity change from 0 to 8192 [ 52.736043][ T5266] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.749079][ T5266] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 52.758345][ T5266] REISERFS (device loop0): using ordered data mode [ 52.766920][ T5266] reiserfs: using flush barriers [pid 5266] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5266] chdir("./file0") = 0 [pid 5266] ioctl(4, LOOP_CLR_FD) = 0 [pid 5266] close(4) = 0 [pid 5266] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5266] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] <... futex resumed>) = 0 [pid 5265] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5265] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] <... futex resumed>) = 0 [pid 5266] mkdir("./file1", 000) = 0 [pid 5266] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 0 [pid 5265] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] <... futex resumed>) = 1 [pid 5266] mkdir("./bus", 000) = 0 [pid 5266] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5265] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 52.772670][ T5266] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.788968][ T5266] REISERFS (device loop0): checking transaction log (loop0) [ 52.797018][ T5266] REISERFS (device loop0): Using r5 hash to sort names [ 52.803956][ T5266] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 52.816684][ T5266] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5266] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5266] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5266] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] exit_group(0 [pid 5266] <... futex resumed>) = ? [pid 5265] <... exit_group resumed>) = ? [pid 5266] +++ exited with 0 +++ [pid 5265] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./63/binderfs") = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./63/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5268 ./strace-static-x86_64: Process 5268 attached [pid 5268] set_robust_list(0x5555559356e0, 24) = 0 [pid 5268] chdir("./64") = 0 [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5268] setpgid(0, 0) = 0 [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5268] write(3, "1000", 4) = 4 [pid 5268] close(3) = 0 [pid 5268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5268] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5268] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5268] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5269 attached [pid 5269] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5269] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... clone resumed>, parent_tid=[5269], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5269 [pid 5268] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5269] <... futex resumed>) = 0 [ 52.847404][ T5266] overlayfs: upper fs needs to support d_type. [ 52.853603][ T5266] overlayfs: upper fs does not support tmpfile. [ 52.860290][ T5266] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.867875][ T5266] overlayfs: failed to resolve './file0': -2 [pid 5269] memfd_create("syzkaller", 0) = 3 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5268] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5269] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5269] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5269] close(3) = 0 [pid 5269] mkdir("./file0", 0777) = 0 [ 52.955495][ T5269] loop0: detected capacity change from 0 to 8192 [ 52.964442][ T5269] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.977629][ T5269] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 52.986861][ T5269] REISERFS (device loop0): using ordered data mode [ 52.993356][ T5269] reiserfs: using flush barriers [pid 5269] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5269] chdir("./file0") = 0 [pid 5269] ioctl(4, LOOP_CLR_FD) = 0 [pid 5269] close(4) = 0 [pid 5269] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5269] mkdir("./file1", 000 [pid 5268] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... mkdir resumed>) = 0 [pid 5269] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5269] mkdir("./bus", 000 [pid 5268] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... mkdir resumed>) = 0 [pid 5269] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5269] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 52.999037][ T5269] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.015240][ T5269] REISERFS (device loop0): checking transaction log (loop0) [ 53.023206][ T5269] REISERFS (device loop0): Using r5 hash to sort names [ 53.030221][ T5269] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 53.042856][ T5269] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5268] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5268] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5269] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... futex resumed>) = 0 [pid 5268] exit_group(0) = ? [pid 5269] <... futex resumed>) = ? [pid 5269] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./64/binderfs") = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./64/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5271 attached , child_tidptr=0x5555559356d0) = 5271 [pid 5271] set_robust_list(0x5555559356e0, 24) = 0 [pid 5271] chdir("./65") = 0 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5271] close(3) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5271] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5271] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5271] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5272], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5272 [pid 5271] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5272 attached [pid 5272] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5272] memfd_create("syzkaller", 0) = 3 [pid 5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 53.067891][ T5269] overlayfs: upper fs needs to support d_type. [ 53.074173][ T5269] overlayfs: upper fs does not support tmpfile. [ 53.081267][ T5269] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.089067][ T5269] overlayfs: failed to resolve './file0': -2 [pid 5272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5272] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5272] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5272] close(3) = 0 [pid 5272] mkdir("./file0", 0777) = 0 [ 53.169760][ T5272] loop0: detected capacity change from 0 to 8192 [ 53.179824][ T5272] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.192857][ T5272] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.202090][ T5272] REISERFS (device loop0): using ordered data mode [ 53.208633][ T5272] reiserfs: using flush barriers [pid 5272] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5272] chdir("./file0") = 0 [pid 5272] ioctl(4, LOOP_CLR_FD) = 0 [pid 5272] close(4) = 0 [pid 5272] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... futex resumed>) = 0 [pid 5272] mkdir("./file1", 000) = 0 [pid 5272] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... futex resumed>) = 1 [pid 5272] mkdir("./bus", 000) = 0 [pid 5272] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... futex resumed>) = 1 [ 53.214187][ T5272] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.230514][ T5272] REISERFS (device loop0): checking transaction log (loop0) [ 53.238574][ T5272] REISERFS (device loop0): Using r5 hash to sort names [ 53.245698][ T5272] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 53.258482][ T5272] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5272] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5272] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] <... futex resumed>) = 0 [pid 5271] exit_group(0) = ? [pid 5272] <... futex resumed>) = ? [pid 5272] +++ exited with 0 +++ [pid 5271] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./65/binderfs") = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./65/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./65") = 0 mkdir("./66", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x5555559356e0, 24) = 0 [pid 5274] chdir("./66") = 0 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5274] setpgid(0, 0) = 0 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5274 [pid 5274] <... openat resumed>) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5274] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5274] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5275], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5275 [pid 5274] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5275 attached [pid 5275] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5275] memfd_create("syzkaller", 0) = 3 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 53.280745][ T5272] overlayfs: upper fs needs to support d_type. [ 53.287091][ T5272] overlayfs: upper fs does not support tmpfile. [ 53.293684][ T5272] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.301648][ T5272] overlayfs: failed to resolve './file0': -2 [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5275] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5275] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5275] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5275] close(3) = 0 [pid 5275] mkdir("./file0", 0777) = 0 [ 53.384036][ T5275] loop0: detected capacity change from 0 to 8192 [ 53.394233][ T5275] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.407292][ T5275] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.416472][ T5275] REISERFS (device loop0): using ordered data mode [ 53.422954][ T5275] reiserfs: using flush barriers [ 53.428734][ T5275] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.445361][ T5275] REISERFS (device loop0): checking transaction log (loop0) [ 53.455412][ T5275] REISERFS (device loop0): Using r5 hash to sort names [ 53.463693][ T5275] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [pid 5275] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5275] chdir("./file0") = 0 [pid 5275] ioctl(4, LOOP_CLR_FD) = 0 [pid 5275] close(4) = 0 [pid 5275] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... futex resumed>) = 0 [pid 5274] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5274] <... futex resumed>) = 1 [pid 5275] mkdir("./file1", 000 [pid 5274] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... mkdir resumed>) = 0 [pid 5275] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5275] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] <... futex resumed>) = 0 [pid 5275] mkdir("./bus", 000 [pid 5274] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... mkdir resumed>) = 0 [pid 5275] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5275] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5274] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5275] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... futex resumed>) = 0 [pid 5274] exit_group(0) = ? [pid 5275] <... futex resumed>) = ? [pid 5275] +++ exited with 0 +++ [pid 5274] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./66/binderfs") = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./66/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 53.476443][ T5275] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 53.501099][ T5275] overlayfs: upper fs needs to support d_type. [ 53.507372][ T5275] overlayfs: upper fs does not support tmpfile. [ 53.513853][ T5275] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.521711][ T5275] overlayfs: failed to resolve './file0': -2 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5277 ./strace-static-x86_64: Process 5277 attached [pid 5277] set_robust_list(0x5555559356e0, 24) = 0 [pid 5277] chdir("./67") = 0 [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5277] setpgid(0, 0) = 0 [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5277] write(3, "1000", 4) = 4 [pid 5277] close(3) = 0 [pid 5277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5277] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5277] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5277] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5278 attached , parent_tid=[5278], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5278 [pid 5278] set_robust_list(0x7f8d103ee9e0, 24 [pid 5277] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... set_robust_list resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5277] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5278] memfd_create("syzkaller", 0) = 3 [pid 5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5278] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5278] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5278] close(3) = 0 [pid 5278] mkdir("./file0", 0777) = 0 [ 53.602348][ T5278] loop0: detected capacity change from 0 to 8192 [ 53.612058][ T5278] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.625223][ T5278] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.634550][ T5278] REISERFS (device loop0): using ordered data mode [ 53.641087][ T5278] reiserfs: using flush barriers [pid 5278] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5278] chdir("./file0") = 0 [pid 5278] ioctl(4, LOOP_CLR_FD) = 0 [pid 5278] close(4) = 0 [pid 5278] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5278] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] <... futex resumed>) = 0 [pid 5278] mkdir("./file1", 000 [pid 5277] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] <... mkdir resumed>) = 0 [pid 5278] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5278] mkdir("./bus", 000 [pid 5277] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... mkdir resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5278] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5277] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 53.646591][ T5278] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.662904][ T5278] REISERFS (device loop0): checking transaction log (loop0) [ 53.671000][ T5278] REISERFS (device loop0): Using r5 hash to sort names [ 53.678054][ T5278] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 53.690747][ T5278] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5277] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5278] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = 0 [pid 5277] exit_group(0) = ? [pid 5278] <... futex resumed>) = ? [pid 5278] +++ exited with 0 +++ [pid 5277] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5277, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./67/binderfs") = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./67/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5280 ./strace-static-x86_64: Process 5280 attached [pid 5280] set_robust_list(0x5555559356e0, 24) = 0 [pid 5280] chdir("./68") = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5280] setpgid(0, 0) = 0 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5280] write(3, "1000", 4) = 4 [pid 5280] close(3) = 0 [pid 5280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5280] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5280] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5280] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5281 attached , parent_tid=[5281], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5281 [pid 5281] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5281] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5281] <... futex resumed>) = 0 [pid 5281] memfd_create("syzkaller", 0 [pid 5280] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5281] <... memfd_create resumed>) = 3 [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 53.713653][ T5278] overlayfs: upper fs needs to support d_type. [ 53.720244][ T5278] overlayfs: upper fs does not support tmpfile. [ 53.727225][ T5278] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.735342][ T5278] overlayfs: failed to resolve './file0': -2 [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5281] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5281] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5281] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5281] close(3) = 0 [pid 5281] mkdir("./file0", 0777) = 0 [ 53.818079][ T5281] loop0: detected capacity change from 0 to 8192 [ 53.827471][ T5281] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.840673][ T5281] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.850217][ T5281] REISERFS (device loop0): using ordered data mode [ 53.857054][ T5281] reiserfs: using flush barriers [pid 5281] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5281] chdir("./file0") = 0 [pid 5281] ioctl(4, LOOP_CLR_FD) = 0 [pid 5281] close(4) = 0 [pid 5281] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 5281] mkdir("./file1", 000 [pid 5280] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... mkdir resumed>) = 0 [pid 5281] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 5280] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] mkdir("./bus", 000) = 0 [pid 5281] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5280] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 53.862671][ T5281] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.879049][ T5281] REISERFS (device loop0): checking transaction log (loop0) [ 53.887110][ T5281] REISERFS (device loop0): Using r5 hash to sort names [ 53.894107][ T5281] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 53.906937][ T5281] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5280] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5281] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 0 [pid 5280] exit_group(0) = ? [pid 5281] <... futex resumed>) = ? [pid 5281] +++ exited with 0 +++ [pid 5280] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./68/binderfs") = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./68/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5283 attached , child_tidptr=0x5555559356d0) = 5283 [pid 5283] set_robust_list(0x5555559356e0, 24) = 0 [pid 5283] chdir("./69") = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5283] write(3, "1000", 4) = 4 [pid 5283] close(3) = 0 [pid 5283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5283] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5283] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5284], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5284 ./strace-static-x86_64: Process 5284 attached [pid 5284] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5283] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] memfd_create("syzkaller", 0) = 3 [ 53.934628][ T5281] overlayfs: upper fs needs to support d_type. [ 53.940891][ T5281] overlayfs: upper fs does not support tmpfile. [ 53.948106][ T5281] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.956128][ T5281] overlayfs: failed to resolve './file0': -2 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5284] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5284] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5284] close(3) = 0 [pid 5284] mkdir("./file0", 0777) = 0 [ 54.040261][ T5284] loop0: detected capacity change from 0 to 8192 [ 54.049371][ T5284] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.062483][ T5284] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 54.071762][ T5284] REISERFS (device loop0): using ordered data mode [ 54.078324][ T5284] reiserfs: using flush barriers [pid 5284] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5284] chdir("./file0") = 0 [pid 5284] ioctl(4, LOOP_CLR_FD) = 0 [pid 5284] close(4) = 0 [pid 5284] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5284] mkdir("./file1", 000) = 0 [pid 5284] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5284] mkdir("./bus", 000) = 0 [pid 5284] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5283] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 0 [ 54.084391][ T5284] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.101037][ T5284] REISERFS (device loop0): checking transaction log (loop0) [ 54.109289][ T5284] REISERFS (device loop0): Using r5 hash to sort names [ 54.116783][ T5284] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 54.129551][ T5284] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5284] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5284] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5284] <... futex resumed>) = 1 [pid 5283] exit_group(0) = ? [pid 5284] +++ exited with 0 +++ [pid 5283] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./69/binderfs") = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./69/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5286 attached , child_tidptr=0x5555559356d0) = 5286 [pid 5286] set_robust_list(0x5555559356e0, 24) = 0 [pid 5286] chdir("./70") = 0 [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5286] setpgid(0, 0) = 0 [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5286] write(3, "1000", 4) = 4 [pid 5286] close(3) = 0 [pid 5286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5286] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5286] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5286] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5287], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5287 [pid 5286] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5287 attached [pid 5287] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5287] memfd_create("syzkaller", 0) = 3 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 54.152192][ T5284] overlayfs: upper fs needs to support d_type. [ 54.158473][ T5284] overlayfs: upper fs does not support tmpfile. [ 54.165381][ T5284] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.172993][ T5284] overlayfs: failed to resolve './file0': -2 [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5287] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5287] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5287] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5287] close(3) = 0 [pid 5287] mkdir("./file0", 0777) = 0 [ 54.253666][ T5287] loop0: detected capacity change from 0 to 8192 [ 54.262329][ T5287] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.275555][ T5287] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 54.284882][ T5287] REISERFS (device loop0): using ordered data mode [ 54.291378][ T5287] reiserfs: using flush barriers [pid 5287] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5287] chdir("./file0") = 0 [pid 5287] ioctl(4, LOOP_CLR_FD) = 0 [pid 5287] close(4) = 0 [pid 5287] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 54.297055][ T5287] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.313618][ T5287] REISERFS (device loop0): checking transaction log (loop0) [ 54.321774][ T5287] REISERFS (device loop0): Using r5 hash to sort names [ 54.329147][ T5287] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 54.342088][ T5287] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5287] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] <... futex resumed>) = 0 [pid 5286] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5286] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 0 [pid 5287] mkdir("./file1", 000) = 0 [pid 5287] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = 0 [pid 5286] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 1 [pid 5287] mkdir("./bus", 000) = 0 [pid 5287] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = 0 [pid 5286] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... futex resumed>) = 1 [pid 5287] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5287] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = 0 [pid 5286] exit_group(0) = ? [pid 5287] <... futex resumed>) = ? [pid 5287] +++ exited with 0 +++ [pid 5286] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5286, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./70/binderfs") = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./70/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5289 ./strace-static-x86_64: Process 5289 attached [pid 5289] set_robust_list(0x5555559356e0, 24) = 0 [pid 5289] chdir("./71") = 0 [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5289] setpgid(0, 0) = 0 [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5289] write(3, "1000", 4) = 4 [pid 5289] close(3) = 0 [pid 5289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5289] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5289] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5289] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5290], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5290 ./strace-static-x86_64: Process 5290 attached [pid 5290] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5290] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [ 54.358263][ T5287] overlayfs: upper fs needs to support d_type. [ 54.364977][ T5287] overlayfs: upper fs does not support tmpfile. [ 54.371748][ T5287] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.379646][ T5287] overlayfs: failed to resolve './file0': -2 [pid 5290] memfd_create("syzkaller", 0 [pid 5289] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5290] <... memfd_create resumed>) = 3 [pid 5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5290] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5290] close(3) = 0 [pid 5290] mkdir("./file0", 0777) = 0 [ 54.467959][ T5290] loop0: detected capacity change from 0 to 8192 [ 54.477202][ T5290] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.490210][ T5290] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 54.499435][ T5290] REISERFS (device loop0): using ordered data mode [ 54.505949][ T5290] reiserfs: using flush barriers [pid 5290] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5290] chdir("./file0") = 0 [pid 5290] ioctl(4, LOOP_CLR_FD) = 0 [pid 5290] close(4) = 0 [pid 5290] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5289] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... futex resumed>) = 1 [pid 5290] mkdir("./file1", 000) = 0 [pid 5290] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5290] mkdir("./bus", 000 [pid 5289] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... mkdir resumed>) = 0 [pid 5289] <... futex resumed>) = 0 [pid 5290] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5289] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 54.511921][ T5290] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.528283][ T5290] REISERFS (device loop0): checking transaction log (loop0) [ 54.536263][ T5290] REISERFS (device loop0): Using r5 hash to sort names [ 54.543201][ T5290] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 54.555885][ T5290] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5289] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5290] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5289] exit_group(0) = ? [pid 5290] +++ exited with 0 +++ [pid 5289] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5289, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./71/binderfs") = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./71/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x5555559356e0, 24) = 0 [pid 5292] chdir("./72") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5292] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5293 attached [pid 5293] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5293] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... clone resumed>, parent_tid=[5293], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5293 [pid 5292] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5293] memfd_create("syzkaller", 0 [pid 5292] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5293] <... memfd_create resumed>) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 54.573963][ T5290] overlayfs: upper fs needs to support d_type. [ 54.580315][ T5290] overlayfs: upper fs does not support tmpfile. [ 54.587221][ T5290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.595307][ T5290] overlayfs: failed to resolve './file0': -2 [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5293] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5293] close(3) = 0 [pid 5293] mkdir("./file0", 0777) = 0 [ 54.677223][ T5293] loop0: detected capacity change from 0 to 8192 [ 54.686138][ T5293] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.699131][ T5293] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 54.708313][ T5293] REISERFS (device loop0): using ordered data mode [ 54.714861][ T5293] reiserfs: using flush barriers [pid 5293] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./file0") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5293] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = 1 [pid 5293] mkdir("./file1", 000 [pid 5292] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... mkdir resumed>) = 0 [pid 5293] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5293] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5293] mkdir("./bus", 000 [pid 5292] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... mkdir resumed>) = 0 [pid 5293] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5293] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 54.720346][ T5293] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.736749][ T5293] REISERFS (device loop0): checking transaction log (loop0) [ 54.744784][ T5293] REISERFS (device loop0): Using r5 hash to sort names [ 54.751729][ T5293] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 54.764444][ T5293] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5292] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5293] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5292] exit_group(0 [pid 5293] <... futex resumed>) = ? [pid 5292] <... exit_group resumed>) = ? [pid 5293] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./72/binderfs") = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./72/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5295 attached , child_tidptr=0x5555559356d0) = 5295 [pid 5295] set_robust_list(0x5555559356e0, 24) = 0 [pid 5295] chdir("./73") = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [pid 5295] close(3) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5295] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5295] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5296 attached , parent_tid=[5296], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5296 [pid 5296] set_robust_list(0x7f8d103ee9e0, 24 [pid 5295] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5296] <... set_robust_list resumed>) = 0 [pid 5295] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5296] memfd_create("syzkaller", 0) = 3 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 54.788750][ T5293] overlayfs: upper fs needs to support d_type. [ 54.795253][ T5293] overlayfs: upper fs does not support tmpfile. [ 54.801813][ T5293] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.810035][ T5293] overlayfs: failed to resolve './file0': -2 [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5296] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5296] close(3) = 0 [pid 5296] mkdir("./file0", 0777) = 0 [ 54.891313][ T5296] loop0: detected capacity change from 0 to 8192 [ 54.900064][ T5296] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.913100][ T5296] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 54.922408][ T5296] REISERFS (device loop0): using ordered data mode [ 54.928965][ T5296] reiserfs: using flush barriers [pid 5296] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file0") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... futex resumed>) = 1 [pid 5296] mkdir("./file1", 000) = 0 [pid 5296] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... futex resumed>) = 1 [pid 5296] mkdir("./bus", 000) = 0 [pid 5296] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... futex resumed>) = 0 [ 54.934624][ T5296] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.951023][ T5296] REISERFS (device loop0): checking transaction log (loop0) [ 54.959018][ T5296] REISERFS (device loop0): Using r5 hash to sort names [ 54.966119][ T5296] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 54.978790][ T5296] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5296] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5296] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5295] exit_group(0) = ? [pid 5296] <... futex resumed>) = ? [pid 5296] +++ exited with 0 +++ [pid 5295] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./73/binderfs") = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./73/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5298 ./strace-static-x86_64: Process 5298 attached [pid 5298] set_robust_list(0x5555559356e0, 24) = 0 [pid 5298] chdir("./74") = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5298] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5298] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5299], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5299 ./strace-static-x86_64: Process 5299 attached [pid 5299] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5299] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5298] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5299] memfd_create("syzkaller", 0) = 3 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 55.000604][ T5296] overlayfs: upper fs needs to support d_type. [ 55.006795][ T5296] overlayfs: upper fs does not support tmpfile. [ 55.013216][ T5296] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.021534][ T5296] overlayfs: failed to resolve './file0': -2 [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5299] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5299] close(3) = 0 [pid 5299] mkdir("./file0", 0777) = 0 [ 55.104510][ T5299] loop0: detected capacity change from 0 to 8192 [ 55.114353][ T5299] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.127507][ T5299] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 55.136794][ T5299] REISERFS (device loop0): using ordered data mode [ 55.143287][ T5299] reiserfs: using flush barriers [pid 5299] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5299] chdir("./file0") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [pid 5299] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.149292][ T5299] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.165668][ T5299] REISERFS (device loop0): checking transaction log (loop0) [ 55.173718][ T5299] REISERFS (device loop0): Using r5 hash to sort names [ 55.181419][ T5299] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 55.194132][ T5299] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5298] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... futex resumed>) = 1 [pid 5299] mkdir("./file1", 000) = 0 [pid 5299] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... futex resumed>) = 1 [pid 5299] mkdir("./bus", 000) = 0 [pid 5299] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... futex resumed>) = 1 [pid 5299] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5299] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5298] exit_group(0) = ? [pid 5299] <... futex resumed>) = ? [pid 5299] +++ exited with 0 +++ [pid 5298] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./74/binderfs") = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./74/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5301 attached , child_tidptr=0x5555559356d0) = 5301 [pid 5301] set_robust_list(0x5555559356e0, 24) = 0 [pid 5301] chdir("./75") = 0 [pid 5301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5301] setpgid(0, 0) = 0 [pid 5301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5301] write(3, "1000", 4) = 4 [pid 5301] close(3) = 0 [pid 5301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5301] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5301] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5301] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5302 attached , parent_tid=[5302], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5302 [pid 5302] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5302] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5302] <... futex resumed>) = 0 [pid 5301] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5302] memfd_create("syzkaller", 0) = 3 [pid 5302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 55.210064][ T5299] overlayfs: upper fs needs to support d_type. [ 55.216747][ T5299] overlayfs: upper fs does not support tmpfile. [ 55.223267][ T5299] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.230999][ T5299] overlayfs: failed to resolve './file0': -2 [pid 5302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5302] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5302] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5302] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5302] close(3) = 0 [pid 5302] mkdir("./file0", 0777) = 0 [ 55.314766][ T5302] loop0: detected capacity change from 0 to 8192 [ 55.323725][ T5302] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.336851][ T5302] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 55.346029][ T5302] REISERFS (device loop0): using ordered data mode [ 55.352528][ T5302] reiserfs: using flush barriers [pid 5302] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5302] chdir("./file0") = 0 [pid 5302] ioctl(4, LOOP_CLR_FD) = 0 [pid 5302] close(4) = 0 [pid 5302] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5301] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... futex resumed>) = 1 [pid 5302] mkdir("./file1", 000) = 0 [pid 5302] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5301] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... futex resumed>) = 1 [ 55.358220][ T5302] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.375122][ T5302] REISERFS (device loop0): checking transaction log (loop0) [ 55.383299][ T5302] REISERFS (device loop0): Using r5 hash to sort names [ 55.390377][ T5302] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 55.403067][ T5302] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5302] mkdir("./bus", 000) = 0 [pid 5302] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5301] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... futex resumed>) = 1 [pid 5302] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5302] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5301] <... futex resumed>) = 0 [pid 5302] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] exit_group(0) = ? [pid 5302] <... futex resumed>) = ? [pid 5302] +++ exited with 0 +++ [pid 5301] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5301, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./75/binderfs") = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./75/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5304 attached , child_tidptr=0x5555559356d0) = 5304 [pid 5304] set_robust_list(0x5555559356e0, 24) = 0 [pid 5304] chdir("./76") = 0 [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5304] setpgid(0, 0) = 0 [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5304] write(3, "1000", 4) = 4 [pid 5304] close(3) = 0 [pid 5304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5304] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5304] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5304] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5305], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5305 [pid 5304] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5304] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5305 attached [pid 5305] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5305] memfd_create("syzkaller", 0) = 3 [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 55.426532][ T5302] overlayfs: upper fs needs to support d_type. [ 55.433053][ T5302] overlayfs: upper fs does not support tmpfile. [ 55.439892][ T5302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.447705][ T5302] overlayfs: failed to resolve './file0': -2 [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5305] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5305] close(3) = 0 [pid 5305] mkdir("./file0", 0777) = 0 [ 55.525987][ T5305] loop0: detected capacity change from 0 to 8192 [ 55.535421][ T5305] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.548527][ T5305] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 55.557757][ T5305] REISERFS (device loop0): using ordered data mode [ 55.564278][ T5305] reiserfs: using flush barriers [pid 5305] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5305] chdir("./file0") = 0 [pid 5305] ioctl(4, LOOP_CLR_FD) = 0 [pid 5305] close(4) = 0 [pid 5305] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5305] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] <... futex resumed>) = 0 [pid 5304] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5304] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] <... futex resumed>) = 0 [pid 5305] mkdir("./file1", 000) = 0 [pid 5305] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5305] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] <... futex resumed>) = 0 [pid 5304] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5304] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] <... futex resumed>) = 0 [pid 5305] mkdir("./bus", 000) = 0 [pid 5305] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5304] <... futex resumed>) = 0 [pid 5304] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5304] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 55.570048][ T5305] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.586326][ T5305] REISERFS (device loop0): checking transaction log (loop0) [ 55.594337][ T5305] REISERFS (device loop0): Using r5 hash to sort names [ 55.601460][ T5305] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 55.614473][ T5305] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5305] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5305] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5304] <... futex resumed>) = 0 [pid 5305] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] exit_group(0) = ? [pid 5305] <... futex resumed>) = ? [pid 5305] +++ exited with 0 +++ [pid 5304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5304, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./76/binderfs") = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./76/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./76") = 0 mkdir("./77", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5307 attached [pid 5307] set_robust_list(0x5555559356e0, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5307 [pid 5307] chdir("./77") = 0 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5307] setpgid(0, 0) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5307] write(3, "1000", 4) = 4 [pid 5307] close(3) = 0 [pid 5307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5307] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5307] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5307] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5308], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5308 [pid 5307] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5308 attached [pid 5308] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5308] memfd_create("syzkaller", 0) = 3 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 55.643683][ T5305] overlayfs: upper fs needs to support d_type. [ 55.649962][ T5305] overlayfs: upper fs does not support tmpfile. [ 55.656800][ T5305] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.664770][ T5305] overlayfs: failed to resolve './file0': -2 [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5308] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5308] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5308] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5308] close(3) = 0 [pid 5308] mkdir("./file0", 0777) = 0 [ 55.744452][ T5308] loop0: detected capacity change from 0 to 8192 [ 55.753393][ T5308] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.766522][ T5308] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 55.775988][ T5308] REISERFS (device loop0): using ordered data mode [ 55.782507][ T5308] reiserfs: using flush barriers [pid 5308] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5308] chdir("./file0") = 0 [pid 5308] ioctl(4, LOOP_CLR_FD) = 0 [pid 5308] close(4) = 0 [pid 5308] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... futex resumed>) = 0 [pid 5307] <... futex resumed>) = 1 [pid 5308] mkdir("./file1", 000 [pid 5307] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... mkdir resumed>) = 0 [pid 5308] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5308] mkdir("./bus", 000 [pid 5307] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... mkdir resumed>) = 0 [pid 5307] <... futex resumed>) = 0 [pid 5308] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... futex resumed>) = 0 [pid 5307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5307] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.788342][ T5308] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.804572][ T5308] REISERFS (device loop0): checking transaction log (loop0) [ 55.812634][ T5308] REISERFS (device loop0): Using r5 hash to sort names [ 55.819609][ T5308] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 55.832313][ T5308] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5307] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5308] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5308] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] exit_group(0 [pid 5308] <... futex resumed>) = ? [pid 5307] <... exit_group resumed>) = ? [pid 5308] +++ exited with 0 +++ [pid 5307] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./77/binderfs") = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./77/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./77") = 0 mkdir("./78", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5310 ./strace-static-x86_64: Process 5310 attached [pid 5310] set_robust_list(0x5555559356e0, 24) = 0 [pid 5310] chdir("./78") = 0 [pid 5310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5310] setpgid(0, 0) = 0 [pid 5310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5310] write(3, "1000", 4) = 4 [pid 5310] close(3) = 0 [pid 5310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5310] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5310] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5310] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5311 attached , parent_tid=[5311], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5311 [ 55.851672][ T5308] overlayfs: upper fs needs to support d_type. [ 55.858002][ T5308] overlayfs: upper fs does not support tmpfile. [ 55.864493][ T5308] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.872569][ T5308] overlayfs: failed to resolve './file0': -2 [pid 5311] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5311] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5310] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5310] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5311] memfd_create("syzkaller", 0) = 3 [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5311] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5311] close(3) = 0 [pid 5311] mkdir("./file0", 0777) = 0 [ 55.959882][ T5311] loop0: detected capacity change from 0 to 8192 [ 55.968825][ T5311] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.981886][ T5311] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 55.991056][ T5311] REISERFS (device loop0): using ordered data mode [ 55.997583][ T5311] reiserfs: using flush barriers [pid 5311] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file0") = 0 [pid 5311] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(4) = 0 [pid 5311] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5310] <... futex resumed>) = 0 [pid 5311] mkdir("./file1", 000 [pid 5310] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... mkdir resumed>) = 0 [pid 5310] <... futex resumed>) = 0 [pid 5311] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5311] <... futex resumed>) = 0 [pid 5310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5311] mkdir("./bus", 000 [pid 5310] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... mkdir resumed>) = 0 [pid 5310] <... futex resumed>) = 0 [pid 5311] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5311] <... futex resumed>) = 0 [pid 5310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5311] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5310] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 56.003171][ T5311] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.019599][ T5311] REISERFS (device loop0): checking transaction log (loop0) [ 56.027735][ T5311] REISERFS (device loop0): Using r5 hash to sort names [ 56.034771][ T5311] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 56.047464][ T5311] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5310] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5311] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5311] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5310] <... futex resumed>) = 0 [pid 5311] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5310] exit_group(0 [pid 5311] <... futex resumed>) = ? [pid 5310] <... exit_group resumed>) = ? [pid 5311] +++ exited with 0 +++ [pid 5310] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5310, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./78/binderfs") = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./78/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./78") = 0 mkdir("./79", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5313 ./strace-static-x86_64: Process 5313 attached [pid 5313] set_robust_list(0x5555559356e0, 24) = 0 [pid 5313] chdir("./79") = 0 [pid 5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5313] setpgid(0, 0) = 0 [pid 5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5313] write(3, "1000", 4) = 4 [pid 5313] close(3) = 0 [pid 5313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5313] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5313] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5313] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5314 attached , parent_tid=[5314], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5314 [pid 5314] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5314] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5314] memfd_create("syzkaller", 0) = 3 [pid 5314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5313] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5314] <... mmap resumed>) = 0x7f8d07fce000 [ 56.066212][ T5311] overlayfs: upper fs needs to support d_type. [ 56.072566][ T5311] overlayfs: upper fs does not support tmpfile. [ 56.079250][ T5311] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.087013][ T5311] overlayfs: failed to resolve './file0': -2 [pid 5314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5314] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5314] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5314] close(3) = 0 [pid 5314] mkdir("./file0", 0777) = 0 [ 56.168444][ T5314] loop0: detected capacity change from 0 to 8192 [ 56.177513][ T5314] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.190660][ T5314] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 56.199995][ T5314] REISERFS (device loop0): using ordered data mode [ 56.206534][ T5314] reiserfs: using flush barriers [pid 5314] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5314] chdir("./file0") = 0 [pid 5314] ioctl(4, LOOP_CLR_FD) = 0 [pid 5314] close(4) = 0 [pid 5314] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5314] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... futex resumed>) = 0 [pid 5314] mkdir("./file1", 000) = 0 [pid 5314] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... futex resumed>) = 1 [pid 5314] mkdir("./bus", 000) = 0 [pid 5314] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5314] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5313] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 56.212225][ T5314] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.228572][ T5314] REISERFS (device loop0): checking transaction log (loop0) [ 56.236774][ T5314] REISERFS (device loop0): Using r5 hash to sort names [ 56.243746][ T5314] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 56.256520][ T5314] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5313] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5314] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = 0 [pid 5313] exit_group(0 [pid 5314] <... futex resumed>) = ? [pid 5313] <... exit_group resumed>) = ? [pid 5314] +++ exited with 0 +++ [pid 5313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5313, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./79/binderfs") = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./79/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./79") = 0 mkdir("./80", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5316 attached [pid 5316] set_robust_list(0x5555559356e0, 24) = 0 [pid 5316] chdir("./80" [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5316 [pid 5316] <... chdir resumed>) = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5316] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5316] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5317], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5317 [pid 5316] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5316] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5317 attached [pid 5317] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5317] memfd_create("syzkaller", 0) = 3 [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 56.278003][ T5314] overlayfs: upper fs needs to support d_type. [ 56.284264][ T5314] overlayfs: upper fs does not support tmpfile. [ 56.290963][ T5314] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.298718][ T5314] overlayfs: failed to resolve './file0': -2 [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5317] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5317] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5317] close(3) = 0 [pid 5317] mkdir("./file0", 0777) = 0 [ 56.382661][ T5317] loop0: detected capacity change from 0 to 8192 [ 56.392016][ T5317] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.405196][ T5317] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 56.414353][ T5317] REISERFS (device loop0): using ordered data mode [ 56.420882][ T5317] reiserfs: using flush barriers [pid 5317] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5317] chdir("./file0") = 0 [pid 5317] ioctl(4, LOOP_CLR_FD) = 0 [pid 5317] close(4) = 0 [pid 5317] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... futex resumed>) = 0 [pid 5316] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5316] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] <... futex resumed>) = 1 [pid 5317] mkdir("./file1", 000) = 0 [pid 5317] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... futex resumed>) = 0 [pid 5316] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5317] <... futex resumed>) = 1 [pid 5316] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] mkdir("./bus", 000) = 0 [pid 5317] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5316] <... futex resumed>) = 0 [pid 5316] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5316] <... futex resumed>) = 0 [ 56.426662][ T5317] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.443052][ T5317] REISERFS (device loop0): checking transaction log (loop0) [ 56.451216][ T5317] REISERFS (device loop0): Using r5 hash to sort names [ 56.458202][ T5317] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 56.471166][ T5317] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5316] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5317] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5316] <... futex resumed>) = 0 [pid 5317] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] exit_group(0 [pid 5317] <... futex resumed>) = ? [pid 5316] <... exit_group resumed>) = ? [pid 5317] +++ exited with 0 +++ [pid 5316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./80/binderfs") = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./80/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./80") = 0 mkdir("./81", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5319 attached , child_tidptr=0x5555559356d0) = 5319 [pid 5319] set_robust_list(0x5555559356e0, 24) = 0 [pid 5319] chdir("./81") = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5319] setpgid(0, 0) = 0 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5319] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5319] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5320 attached , parent_tid=[5320], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5320 [pid 5320] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5320] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5319] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5320] memfd_create("syzkaller", 0) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 56.497453][ T5317] overlayfs: upper fs needs to support d_type. [ 56.503658][ T5317] overlayfs: upper fs does not support tmpfile. [ 56.510510][ T5317] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.518475][ T5317] overlayfs: failed to resolve './file0': -2 [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5320] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./file0", 0777) = 0 [ 56.600009][ T5320] loop0: detected capacity change from 0 to 8192 [ 56.608781][ T5320] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.621985][ T5320] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 56.631169][ T5320] REISERFS (device loop0): using ordered data mode [ 56.637796][ T5320] reiserfs: using flush barriers [pid 5320] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file0") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [pid 5320] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 0 [pid 5320] mkdir("./file1", 000) = 0 [pid 5320] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 1 [pid 5320] mkdir("./bus", 000) = 0 [pid 5320] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 56.643346][ T5320] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.659746][ T5320] REISERFS (device loop0): checking transaction log (loop0) [ 56.667949][ T5320] REISERFS (device loop0): Using r5 hash to sort names [ 56.675000][ T5320] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 56.687673][ T5320] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5320] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5320] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5319] exit_group(0) = ? [pid 5320] +++ exited with 0 +++ [pid 5319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./81/binderfs") = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./81/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./81") = 0 mkdir("./82", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5322 ./strace-static-x86_64: Process 5322 attached [pid 5322] set_robust_list(0x5555559356e0, 24) = 0 [pid 5322] chdir("./82") = 0 [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5322] setpgid(0, 0) = 0 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5322] write(3, "1000", 4) = 4 [pid 5322] close(3) = 0 [pid 5322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5322] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5322] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5322] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5323 attached , parent_tid=[5323], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5323 [pid 5323] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5323] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0) = 3 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 56.717517][ T5320] overlayfs: upper fs needs to support d_type. [ 56.723761][ T5320] overlayfs: upper fs does not support tmpfile. [ 56.730456][ T5320] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.738182][ T5320] overlayfs: failed to resolve './file0': -2 [pid 5322] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5323] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5323] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5323] close(3) = 0 [pid 5323] mkdir("./file0", 0777) = 0 [ 56.822237][ T5323] loop0: detected capacity change from 0 to 8192 [ 56.831267][ T5323] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.844351][ T5323] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 56.853670][ T5323] REISERFS (device loop0): using ordered data mode [ 56.860199][ T5323] reiserfs: using flush barriers [pid 5323] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5323] chdir("./file0") = 0 [pid 5323] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] close(4) = 0 [pid 5323] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] <... futex resumed>) = 0 [pid 5322] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5323] mkdir("./file1", 000 [pid 5322] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] <... mkdir resumed>) = 0 [pid 5323] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5323] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5323] mkdir("./bus", 000 [pid 5322] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] <... mkdir resumed>) = 0 [pid 5323] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5323] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5322] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 56.865736][ T5323] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.882066][ T5323] REISERFS (device loop0): checking transaction log (loop0) [ 56.890185][ T5323] REISERFS (device loop0): Using r5 hash to sort names [ 56.897216][ T5323] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 56.909921][ T5323] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5322] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5323] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5323] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] exit_group(0 [pid 5323] <... futex resumed>) = ? [pid 5322] <... exit_group resumed>) = ? [pid 5323] +++ exited with 0 +++ [pid 5322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5322, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./82/binderfs") = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./82/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./82") = 0 mkdir("./83", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5325 attached , child_tidptr=0x5555559356d0) = 5325 [pid 5325] set_robust_list(0x5555559356e0, 24) = 0 [pid 5325] chdir("./83") = 0 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5325] setpgid(0, 0) = 0 [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5325] write(3, "1000", 4) = 4 [pid 5325] close(3) = 0 [pid 5325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5325] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5325] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5325] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5326 attached , parent_tid=[5326], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5326 [pid 5326] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5326] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5325] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5326] memfd_create("syzkaller", 0) = 3 [pid 5326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 56.934607][ T5323] overlayfs: upper fs needs to support d_type. [ 56.940880][ T5323] overlayfs: upper fs does not support tmpfile. [ 56.947590][ T5323] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.955639][ T5323] overlayfs: failed to resolve './file0': -2 [pid 5326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5326] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5326] close(3) = 0 [pid 5326] mkdir("./file0", 0777) = 0 [ 57.037736][ T5326] loop0: detected capacity change from 0 to 8192 [ 57.046851][ T5326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.059906][ T5326] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.069117][ T5326] REISERFS (device loop0): using ordered data mode [ 57.075633][ T5326] reiserfs: using flush barriers [pid 5326] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5326] chdir("./file0") = 0 [pid 5326] ioctl(4, LOOP_CLR_FD) = 0 [pid 5326] close(4) = 0 [pid 5326] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] <... futex resumed>) = 0 [pid 5325] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5325] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... futex resumed>) = 0 [pid 5326] mkdir("./file1", 000) = 0 [pid 5326] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = 0 [pid 5325] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... futex resumed>) = 1 [pid 5326] mkdir("./bus", 000) = 0 [pid 5326] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = 0 [pid 5325] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... futex resumed>) = 1 [ 57.081144][ T5326] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.097503][ T5326] REISERFS (device loop0): checking transaction log (loop0) [ 57.105770][ T5326] REISERFS (device loop0): Using r5 hash to sort names [ 57.112912][ T5326] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 57.125584][ T5326] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5326] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5326] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] <... futex resumed>) = 0 [pid 5325] exit_group(0) = ? [pid 5326] <... futex resumed>) = ? [pid 5326] +++ exited with 0 +++ [pid 5325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./83/binderfs") = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./83/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./83") = 0 mkdir("./84", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5328 attached [pid 5328] set_robust_list(0x5555559356e0, 24) = 0 [pid 5328] chdir("./84") = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5328 [pid 5328] <... openat resumed>) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5328] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5328] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5328] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5329], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5329 [pid 5328] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5329 attached [pid 5329] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5329] memfd_create("syzkaller", 0) = 3 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 57.144781][ T5326] overlayfs: upper fs needs to support d_type. [ 57.151232][ T5326] overlayfs: upper fs does not support tmpfile. [ 57.158020][ T5326] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.165689][ T5326] overlayfs: failed to resolve './file0': -2 [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5329] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5329] close(3) = 0 [pid 5329] mkdir("./file0", 0777) = 0 [ 57.245041][ T5329] loop0: detected capacity change from 0 to 8192 [ 57.254067][ T5329] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.267109][ T5329] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.276361][ T5329] REISERFS (device loop0): using ordered data mode [ 57.283249][ T5329] reiserfs: using flush barriers [pid 5329] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5329] chdir("./file0") = 0 [pid 5329] ioctl(4, LOOP_CLR_FD) = 0 [pid 5329] close(4) = 0 [pid 5329] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 1 [ 57.289083][ T5329] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.306205][ T5329] REISERFS (device loop0): checking transaction log (loop0) [ 57.314709][ T5329] REISERFS (device loop0): Using r5 hash to sort names [ 57.321835][ T5329] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 57.334576][ T5329] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5329] mkdir("./file1", 000) = 0 [pid 5329] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 1 [pid 5329] mkdir("./bus", 000) = 0 [pid 5329] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = 0 [pid 5328] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5328] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 1 [pid 5329] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5329] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5328] <... futex resumed>) = 0 [pid 5328] exit_group(0) = ? [pid 5329] +++ exited with 0 +++ [pid 5328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./84/binderfs") = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./84/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./84") = 0 mkdir("./85", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5331 ./strace-static-x86_64: Process 5331 attached [pid 5331] set_robust_list(0x5555559356e0, 24) = 0 [pid 5331] chdir("./85") = 0 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5331] write(3, "1000", 4) = 4 [pid 5331] close(3) = 0 [pid 5331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5331] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5331] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5331] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5332], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5332 [pid 5331] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5332 attached [pid 5332] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5332] memfd_create("syzkaller", 0) = 3 [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 57.348598][ T5329] overlayfs: upper fs needs to support d_type. [ 57.354903][ T5329] overlayfs: upper fs does not support tmpfile. [ 57.361526][ T5329] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.369327][ T5329] overlayfs: failed to resolve './file0': -2 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5332] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5332] close(3) = 0 [pid 5332] mkdir("./file0", 0777) = 0 [ 57.451430][ T5332] loop0: detected capacity change from 0 to 8192 [ 57.460373][ T5332] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.473511][ T5332] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.482792][ T5332] REISERFS (device loop0): using ordered data mode [ 57.489343][ T5332] reiserfs: using flush barriers [pid 5332] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5332] chdir("./file0") = 0 [pid 5332] ioctl(4, LOOP_CLR_FD) = 0 [ 57.494986][ T5332] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.511258][ T5332] REISERFS (device loop0): checking transaction log (loop0) [ 57.519314][ T5332] REISERFS (device loop0): Using r5 hash to sort names [ 57.526615][ T5332] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 57.539499][ T5332] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5332] close(4) = 0 [pid 5332] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5331] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... futex resumed>) = 1 [pid 5332] mkdir("./file1", 000) = 0 [pid 5332] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5331] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... futex resumed>) = 1 [pid 5332] mkdir("./bus", 000) = 0 [pid 5332] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5331] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... futex resumed>) = 1 [pid 5332] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5332] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5332] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] <... futex resumed>) = 0 [pid 5331] exit_group(0) = ? [pid 5332] <... futex resumed>) = ? [pid 5332] +++ exited with 0 +++ [pid 5331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./85/binderfs") = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./85/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./85") = 0 mkdir("./86", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5334 ./strace-static-x86_64: Process 5334 attached [pid 5334] set_robust_list(0x5555559356e0, 24) = 0 [pid 5334] chdir("./86") = 0 [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5334] setpgid(0, 0) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5334] write(3, "1000", 4) = 4 [pid 5334] close(3) = 0 [pid 5334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5334] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5334] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5334] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5335 attached , parent_tid=[5335], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5335 [pid 5335] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5335] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5334] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5335] memfd_create("syzkaller", 0) = 3 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 57.553900][ T5332] overlayfs: upper fs needs to support d_type. [ 57.560432][ T5332] overlayfs: upper fs does not support tmpfile. [ 57.567464][ T5332] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.575624][ T5332] overlayfs: failed to resolve './file0': -2 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5335] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5335] close(3) = 0 [pid 5335] mkdir("./file0", 0777) = 0 [ 57.655033][ T5335] loop0: detected capacity change from 0 to 8192 [ 57.664293][ T5335] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.677345][ T5335] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.686673][ T5335] REISERFS (device loop0): using ordered data mode [ 57.693194][ T5335] reiserfs: using flush barriers [pid 5335] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5335] chdir("./file0") = 0 [pid 5335] ioctl(4, LOOP_CLR_FD) = 0 [pid 5335] close(4) = 0 [pid 5335] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5334] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... futex resumed>) = 1 [pid 5335] mkdir("./file1", 000) = 0 [pid 5335] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5334] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... futex resumed>) = 1 [pid 5335] mkdir("./bus", 000) = 0 [pid 5335] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5334] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... futex resumed>) = 1 [ 57.699069][ T5335] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.715332][ T5335] REISERFS (device loop0): checking transaction log (loop0) [ 57.723413][ T5335] REISERFS (device loop0): Using r5 hash to sort names [ 57.730488][ T5335] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 57.743243][ T5335] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5335] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5335] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5334] exit_group(0) = ? [pid 5335] <... futex resumed>) = ? [pid 5335] +++ exited with 0 +++ [pid 5334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5334, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./86/binderfs") = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./86/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./86") = 0 mkdir("./87", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5337 attached [pid 5337] set_robust_list(0x5555559356e0, 24) = 0 [pid 5337] chdir("./87" [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5337 [pid 5337] <... chdir resumed>) = 0 [pid 5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5337] setpgid(0, 0) = 0 [pid 5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5337] write(3, "1000", 4) = 4 [pid 5337] close(3) = 0 [pid 5337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5337] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5337] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5337] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5338], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5338 [pid 5337] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5338 attached [pid 5338] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5338] memfd_create("syzkaller", 0) = 3 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 57.758029][ T5335] overlayfs: upper fs needs to support d_type. [ 57.764258][ T5335] overlayfs: upper fs does not support tmpfile. [ 57.770873][ T5335] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.778518][ T5335] overlayfs: failed to resolve './file0': -2 [pid 5338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5338] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5338] close(3) = 0 [pid 5338] mkdir("./file0", 0777) = 0 [ 57.854287][ T5338] loop0: detected capacity change from 0 to 8192 [ 57.863568][ T5338] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.876628][ T5338] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.885927][ T5338] REISERFS (device loop0): using ordered data mode [ 57.892409][ T5338] reiserfs: using flush barriers [pid 5338] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5338] chdir("./file0") = 0 [pid 5338] ioctl(4, LOOP_CLR_FD) = 0 [pid 5338] close(4) = 0 [pid 5338] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5338] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] <... futex resumed>) = 0 [pid 5337] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5338] <... futex resumed>) = 0 [pid 5337] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] mkdir("./file1", 000) = 0 [pid 5338] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] mkdir("./bus", 000 [pid 5337] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] <... mkdir resumed>) = 0 [pid 5337] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5337] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 57.898395][ T5338] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.914832][ T5338] REISERFS (device loop0): checking transaction log (loop0) [ 57.923032][ T5338] REISERFS (device loop0): Using r5 hash to sort names [ 57.930035][ T5338] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 57.942925][ T5338] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5337] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5338] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] <... futex resumed>) = 0 [pid 5337] exit_group(0) = ? [pid 5338] <... futex resumed>) = ? [pid 5338] +++ exited with 0 +++ [pid 5337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./87/binderfs") = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./87/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./87") = 0 mkdir("./88", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5340 ./strace-static-x86_64: Process 5340 attached [pid 5340] set_robust_list(0x5555559356e0, 24) = 0 [pid 5340] chdir("./88") = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5340] close(3) = 0 [pid 5340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5340] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5340] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5340] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5341 attached , parent_tid=[5341], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5341 [pid 5341] set_robust_list(0x7f8d103ee9e0, 24 [pid 5340] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... set_robust_list resumed>) = 0 [pid 5340] <... futex resumed>) = 0 [pid 5340] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5341] memfd_create("syzkaller", 0) = 3 [pid 5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 57.969573][ T5338] overlayfs: upper fs needs to support d_type. [ 57.975894][ T5338] overlayfs: upper fs does not support tmpfile. [ 57.982849][ T5338] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.990855][ T5338] overlayfs: failed to resolve './file0': -2 [pid 5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5341] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5341] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5341] close(3) = 0 [pid 5341] mkdir("./file0", 0777) = 0 [ 58.072709][ T5341] loop0: detected capacity change from 0 to 8192 [ 58.081940][ T5341] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.095024][ T5341] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.104181][ T5341] REISERFS (device loop0): using ordered data mode [ 58.110739][ T5341] reiserfs: using flush barriers [pid 5341] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5341] chdir("./file0") = 0 [pid 5341] ioctl(4, LOOP_CLR_FD) = 0 [pid 5341] close(4) = 0 [pid 5341] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = 0 [pid 5340] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... futex resumed>) = 1 [pid 5341] mkdir("./file1", 000) = 0 [pid 5341] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = 0 [pid 5340] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... futex resumed>) = 1 [pid 5341] mkdir("./bus", 000) = 0 [pid 5341] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = 0 [pid 5340] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... futex resumed>) = 1 [ 58.116367][ T5341] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.132930][ T5341] REISERFS (device loop0): checking transaction log (loop0) [ 58.141332][ T5341] REISERFS (device loop0): Using r5 hash to sort names [ 58.149001][ T5341] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 58.161734][ T5341] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5341] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5341] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = 0 [pid 5340] exit_group(0) = ? [pid 5341] <... futex resumed>) = ? [pid 5341] +++ exited with 0 +++ [pid 5340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./88/binderfs") = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./88/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./88") = 0 mkdir("./89", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5343 ./strace-static-x86_64: Process 5343 attached [pid 5343] set_robust_list(0x5555559356e0, 24) = 0 [pid 5343] chdir("./89") = 0 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5343] setpgid(0, 0) = 0 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5343] write(3, "1000", 4) = 4 [pid 5343] close(3) = 0 [pid 5343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5343] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5343] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5344], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5344 [pid 5343] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5344 attached [pid 5344] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5344] memfd_create("syzkaller", 0) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 58.184252][ T5341] overlayfs: upper fs needs to support d_type. [ 58.190542][ T5341] overlayfs: upper fs does not support tmpfile. [ 58.197811][ T5341] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.206187][ T5341] overlayfs: failed to resolve './file0': -2 [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5344] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5344] close(3) = 0 [pid 5344] mkdir("./file0", 0777) = 0 [ 58.285250][ T5344] loop0: detected capacity change from 0 to 8192 [ 58.293896][ T5344] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.307599][ T5344] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.317476][ T5344] REISERFS (device loop0): using ordered data mode [ 58.323983][ T5344] reiserfs: using flush barriers [pid 5344] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file0") = 0 [pid 5344] ioctl(4, LOOP_CLR_FD) = 0 [pid 5344] close(4) = 0 [pid 5344] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = 1 [pid 5344] mkdir("./file1", 000) = 0 [pid 5344] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = 1 [pid 5344] mkdir("./bus", 000) = 0 [pid 5344] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = 1 [ 58.329766][ T5344] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.346185][ T5344] REISERFS (device loop0): checking transaction log (loop0) [ 58.354182][ T5344] REISERFS (device loop0): Using r5 hash to sort names [ 58.361279][ T5344] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 58.374021][ T5344] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5344] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5344] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] exit_group(0) = ? [pid 5344] <... futex resumed>) = ? [pid 5344] +++ exited with 0 +++ [pid 5343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5343, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./89/binderfs") = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./89/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./89") = 0 mkdir("./90", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5346 attached , child_tidptr=0x5555559356d0) = 5346 [pid 5346] set_robust_list(0x5555559356e0, 24) = 0 [pid 5346] chdir("./90") = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5346] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5346] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5347 attached , parent_tid=[5347], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5347 [pid 5347] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5347] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 58.392494][ T5344] overlayfs: upper fs needs to support d_type. [ 58.399032][ T5344] overlayfs: upper fs does not support tmpfile. [ 58.405991][ T5344] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.413854][ T5344] overlayfs: failed to resolve './file0': -2 [pid 5347] <... futex resumed>) = 0 [pid 5346] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5347] memfd_create("syzkaller", 0) = 3 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5347] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5347] close(3) = 0 [pid 5347] mkdir("./file0", 0777) = 0 [ 58.502740][ T5347] loop0: detected capacity change from 0 to 8192 [ 58.511748][ T5347] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.524792][ T5347] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.533946][ T5347] REISERFS (device loop0): using ordered data mode [ 58.540553][ T5347] reiserfs: using flush barriers [pid 5347] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5347] chdir("./file0") = 0 [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 5347] close(4) = 0 [pid 5347] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5347] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] <... futex resumed>) = 0 [pid 5346] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = 1 [pid 5347] mkdir("./file1", 000 [pid 5346] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... mkdir resumed>) = 0 [pid 5347] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5347] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5346] <... futex resumed>) = 0 [pid 5347] mkdir("./bus", 000 [pid 5346] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... mkdir resumed>) = 0 [pid 5347] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5347] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5346] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 58.546065][ T5347] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.562376][ T5347] REISERFS (device loop0): checking transaction log (loop0) [ 58.570376][ T5347] REISERFS (device loop0): Using r5 hash to sort names [ 58.577398][ T5347] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 58.590056][ T5347] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5346] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5347] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5347] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] exit_group(0 [pid 5347] <... futex resumed>) = ? [pid 5346] <... exit_group resumed>) = ? [pid 5347] +++ exited with 0 +++ [pid 5346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./90/binderfs") = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./90/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./90") = 0 mkdir("./91", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5349 ./strace-static-x86_64: Process 5349 attached [pid 5349] set_robust_list(0x5555559356e0, 24) = 0 [pid 5349] chdir("./91") = 0 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5349] setpgid(0, 0) = 0 [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5349] write(3, "1000", 4) = 4 [pid 5349] close(3) = 0 [pid 5349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5349] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5349] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5349] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5350], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5350 [pid 5349] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5350 attached [pid 5350] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5350] memfd_create("syzkaller", 0) = 3 [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 58.615978][ T5347] overlayfs: upper fs needs to support d_type. [ 58.622285][ T5347] overlayfs: upper fs does not support tmpfile. [ 58.629075][ T5347] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.636665][ T5347] overlayfs: failed to resolve './file0': -2 [pid 5350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5350] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5350] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5350] close(3) = 0 [pid 5350] mkdir("./file0", 0777) = 0 [ 58.709892][ T5350] loop0: detected capacity change from 0 to 8192 [ 58.719052][ T5350] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.732088][ T5350] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.741289][ T5350] REISERFS (device loop0): using ordered data mode [ 58.747838][ T5350] reiserfs: using flush barriers [pid 5350] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5350] chdir("./file0") = 0 [pid 5350] ioctl(4, LOOP_CLR_FD) = 0 [pid 5350] close(4) = 0 [pid 5350] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5349] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] mkdir("./file1", 000) = 0 [pid 5350] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5350] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... futex resumed>) = 0 [pid 5350] mkdir("./bus", 000 [pid 5349] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... mkdir resumed>) = 0 [pid 5350] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5350] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... futex resumed>) = 0 [pid 5350] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 58.753568][ T5350] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.769875][ T5350] REISERFS (device loop0): checking transaction log (loop0) [ 58.777903][ T5350] REISERFS (device loop0): Using r5 hash to sort names [ 58.784967][ T5350] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 58.797694][ T5350] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5349] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5350] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5350] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] exit_group(0 [pid 5350] <... futex resumed>) = ? [pid 5349] <... exit_group resumed>) = ? [pid 5350] +++ exited with 0 +++ [pid 5349] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5349, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./91/binderfs") = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./91/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./91") = 0 mkdir("./92", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5352 attached , child_tidptr=0x5555559356d0) = 5352 [pid 5352] set_robust_list(0x5555559356e0, 24) = 0 [pid 5352] chdir("./92") = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5352] setpgid(0, 0) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5352] write(3, "1000", 4) = 4 [pid 5352] close(3) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5352] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5352] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5352] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5353 attached , parent_tid=[5353], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5353 [pid 5353] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5353] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5352] <... futex resumed>) = 0 [pid 5353] memfd_create("syzkaller", 0) = 3 [pid 5352] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 58.827809][ T5350] overlayfs: upper fs needs to support d_type. [ 58.833980][ T5350] overlayfs: upper fs does not support tmpfile. [ 58.840600][ T5350] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.848224][ T5350] overlayfs: failed to resolve './file0': -2 [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5353] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5353] close(3) = 0 [pid 5353] mkdir("./file0", 0777) = 0 [ 58.930844][ T5353] loop0: detected capacity change from 0 to 8192 [ 58.939772][ T5353] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.952806][ T5353] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.962028][ T5353] REISERFS (device loop0): using ordered data mode [ 58.968568][ T5353] reiserfs: using flush barriers [pid 5353] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5353] chdir("./file0") = 0 [pid 5353] ioctl(4, LOOP_CLR_FD) = 0 [pid 5353] close(4) = 0 [pid 5353] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5352] <... futex resumed>) = 0 [pid 5353] mkdir("./file1", 000 [pid 5352] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... mkdir resumed>) = 0 [pid 5352] <... futex resumed>) = 0 [pid 5353] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] mkdir("./bus", 000 [pid 5352] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... mkdir resumed>) = 0 [pid 5352] <... futex resumed>) = 0 [pid 5353] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5352] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 58.974031][ T5353] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.990404][ T5353] REISERFS (device loop0): checking transaction log (loop0) [ 58.998501][ T5353] REISERFS (device loop0): Using r5 hash to sort names [ 59.005544][ T5353] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 59.018176][ T5353] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5352] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5353] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = 0 [pid 5352] exit_group(0) = ? [pid 5353] <... futex resumed>) = ? [pid 5353] +++ exited with 0 +++ [pid 5352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./92/binderfs") = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./92/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./92") = 0 mkdir("./93", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5355 attached , child_tidptr=0x5555559356d0) = 5355 [pid 5355] set_robust_list(0x5555559356e0, 24) = 0 [pid 5355] chdir("./93") = 0 [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5355] setpgid(0, 0) = 0 [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5355] write(3, "1000", 4) = 4 [pid 5355] close(3) = 0 [pid 5355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5355] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5355] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5355] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5356 attached [pid 5356] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5356] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... clone resumed>, parent_tid=[5356], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5356 [pid 5355] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5356] <... futex resumed>) = 0 [pid 5356] memfd_create("syzkaller", 0 [pid 5355] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5356] <... memfd_create resumed>) = 3 [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 59.036881][ T5353] overlayfs: upper fs needs to support d_type. [ 59.043070][ T5353] overlayfs: upper fs does not support tmpfile. [ 59.049865][ T5353] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.057703][ T5353] overlayfs: failed to resolve './file0': -2 [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5356] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5356] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5356] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5356] close(3) = 0 [pid 5356] mkdir("./file0", 0777) = 0 [ 59.140755][ T5356] loop0: detected capacity change from 0 to 8192 [ 59.149983][ T5356] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.163222][ T5356] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.172608][ T5356] REISERFS (device loop0): using ordered data mode [ 59.179127][ T5356] reiserfs: using flush barriers [pid 5356] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5356] chdir("./file0") = 0 [pid 5356] ioctl(4, LOOP_CLR_FD) = 0 [pid 5356] close(4) = 0 [pid 5356] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5356] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... futex resumed>) = 0 [pid 5355] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5356] <... futex resumed>) = 0 [pid 5355] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] mkdir("./file1", 000) = 0 [pid 5356] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5356] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5355] <... futex resumed>) = 0 [pid 5355] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] mkdir("./bus", 000) = 0 [pid 5356] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5356] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5355] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.184699][ T5356] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.201003][ T5356] REISERFS (device loop0): checking transaction log (loop0) [ 59.209277][ T5356] REISERFS (device loop0): Using r5 hash to sort names [ 59.216239][ T5356] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 59.228934][ T5356] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5355] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5356] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... futex resumed>) = 0 [pid 5355] exit_group(0) = ? [pid 5356] <... futex resumed>) = ? [pid 5356] +++ exited with 0 +++ [pid 5355] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./93/binderfs") = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./93/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./93") = 0 mkdir("./94", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5358 ./strace-static-x86_64: Process 5358 attached [pid 5358] set_robust_list(0x5555559356e0, 24) = 0 [pid 5358] chdir("./94") = 0 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5358] setpgid(0, 0) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] write(3, "1000", 4) = 4 [pid 5358] close(3) = 0 [pid 5358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5358] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5358] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5358] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5359], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5359 [pid 5358] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5359 attached [pid 5359] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5359] memfd_create("syzkaller", 0) = 3 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 59.259131][ T5356] overlayfs: upper fs needs to support d_type. [ 59.265574][ T5356] overlayfs: upper fs does not support tmpfile. [ 59.272185][ T5356] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.280277][ T5356] overlayfs: failed to resolve './file0': -2 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5359] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5359] close(3) = 0 [pid 5359] mkdir("./file0", 0777) = 0 [ 59.361487][ T5359] loop0: detected capacity change from 0 to 8192 [ 59.370554][ T5359] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.383869][ T5359] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.393905][ T5359] REISERFS (device loop0): using ordered data mode [ 59.400442][ T5359] reiserfs: using flush barriers [pid 5359] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] chdir("./file0") = 0 [pid 5359] ioctl(4, LOOP_CLR_FD) = 0 [pid 5359] close(4) = 0 [pid 5359] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... futex resumed>) = 1 [pid 5359] mkdir("./file1", 000) = 0 [pid 5359] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... futex resumed>) = 1 [pid 5359] mkdir("./bus", 000) = 0 [pid 5359] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5358] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... futex resumed>) = 1 [ 59.406114][ T5359] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.422386][ T5359] REISERFS (device loop0): checking transaction log (loop0) [ 59.430539][ T5359] REISERFS (device loop0): Using r5 hash to sort names [ 59.437787][ T5359] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 59.450469][ T5359] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5359] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5359] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5358] exit_group(0) = ? [pid 5359] +++ exited with 0 +++ [pid 5358] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./94/binderfs") = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./94/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./94") = 0 mkdir("./95", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5361 ./strace-static-x86_64: Process 5361 attached [pid 5361] set_robust_list(0x5555559356e0, 24) = 0 [pid 5361] chdir("./95") = 0 [pid 5361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5361] setpgid(0, 0) = 0 [pid 5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5361] write(3, "1000", 4) = 4 [pid 5361] close(3) = 0 [pid 5361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5361] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5361] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5361] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5362], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5362 ./strace-static-x86_64: Process 5362 attached [pid 5361] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 59.475581][ T5359] overlayfs: upper fs needs to support d_type. [ 59.482093][ T5359] overlayfs: upper fs does not support tmpfile. [ 59.488965][ T5359] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.496955][ T5359] overlayfs: failed to resolve './file0': -2 [pid 5362] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5362] memfd_create("syzkaller", 0) = 3 [pid 5362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5362] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5362] close(3) = 0 [pid 5362] mkdir("./file0", 0777) = 0 [ 59.584079][ T5362] loop0: detected capacity change from 0 to 8192 [ 59.593097][ T5362] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.606133][ T5362] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.615985][ T5362] REISERFS (device loop0): using ordered data mode [ 59.622567][ T5362] reiserfs: using flush barriers [pid 5362] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5362] chdir("./file0") = 0 [pid 5362] ioctl(4, LOOP_CLR_FD) = 0 [pid 5362] close(4) = 0 [pid 5362] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5361] <... futex resumed>) = 0 [pid 5362] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5361] <... futex resumed>) = 0 [pid 5362] mkdir("./file1", 000 [pid 5361] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... mkdir resumed>) = 0 [pid 5362] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5361] <... futex resumed>) = 0 [pid 5362] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5361] <... futex resumed>) = 0 [pid 5362] mkdir("./bus", 000 [pid 5361] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... mkdir resumed>) = 0 [pid 5362] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5361] <... futex resumed>) = 0 [pid 5362] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5361] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.628412][ T5362] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.644752][ T5362] REISERFS (device loop0): checking transaction log (loop0) [ 59.652721][ T5362] REISERFS (device loop0): Using r5 hash to sort names [ 59.659798][ T5362] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 59.672655][ T5362] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5361] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5362] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... futex resumed>) = 0 [pid 5361] exit_group(0) = ? [pid 5362] <... futex resumed>) = ? [pid 5362] +++ exited with 0 +++ [pid 5361] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5361, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./95/binderfs") = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./95/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./95") = 0 mkdir("./96", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5364 attached [pid 5364] set_robust_list(0x5555559356e0, 24 [pid 5074] <... clone resumed>, child_tidptr=0x5555559356d0) = 5364 [ 59.703002][ T5362] overlayfs: upper fs needs to support d_type. [ 59.709412][ T5362] overlayfs: upper fs does not support tmpfile. [ 59.716462][ T5362] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.724134][ T5362] overlayfs: failed to resolve './file0': -2 [pid 5364] <... set_robust_list resumed>) = 0 [pid 5364] chdir("./96") = 0 [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5364] setpgid(0, 0) = 0 [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5364] write(3, "1000", 4) = 4 [pid 5364] close(3) = 0 [pid 5364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5364] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5364] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5364] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5365], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5365 [pid 5364] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5365 attached [pid 5365] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5365] memfd_create("syzkaller", 0) = 3 [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5365] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5365] close(3) = 0 [pid 5365] mkdir("./file0", 0777) = 0 [ 59.817263][ T5365] loop0: detected capacity change from 0 to 8192 [ 59.826052][ T5365] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.839205][ T5365] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.848717][ T5365] REISERFS (device loop0): using ordered data mode [ 59.856049][ T5365] reiserfs: using flush barriers [pid 5365] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5365] chdir("./file0") = 0 [pid 5365] ioctl(4, LOOP_CLR_FD) = 0 [pid 5365] close(4) = 0 [pid 5365] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5364] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] <... futex resumed>) = 1 [pid 5365] mkdir("./file1", 000) = 0 [pid 5365] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5364] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] <... futex resumed>) = 1 [pid 5365] mkdir("./bus", 000) = 0 [pid 5365] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... futex resumed>) = 0 [pid 5364] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] <... futex resumed>) = 1 [ 59.861759][ T5365] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.878119][ T5365] REISERFS (device loop0): checking transaction log (loop0) [ 59.886219][ T5365] REISERFS (device loop0): Using r5 hash to sort names [ 59.893611][ T5365] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 59.906333][ T5365] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5365] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5365] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5364] exit_group(0) = ? [pid 5365] +++ exited with 0 +++ [pid 5364] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./96/binderfs") = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./96/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./96") = 0 mkdir("./97", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5367 ./strace-static-x86_64: Process 5367 attached [pid 5367] set_robust_list(0x5555559356e0, 24) = 0 [pid 5367] chdir("./97") = 0 [pid 5367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5367] setpgid(0, 0) = 0 [pid 5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5367] write(3, "1000", 4) = 4 [pid 5367] close(3) = 0 [pid 5367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5367] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5367] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5367] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5368 attached , parent_tid=[5368], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5368 [pid 5368] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5368] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5367] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5368] memfd_create("syzkaller", 0) = 3 [ 59.921250][ T5365] overlayfs: upper fs needs to support d_type. [ 59.927851][ T5365] overlayfs: upper fs does not support tmpfile. [ 59.935430][ T5365] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.943128][ T5365] overlayfs: failed to resolve './file0': -2 [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5368] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5368] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5368] close(3) = 0 [pid 5368] mkdir("./file0", 0777) = 0 [ 60.027190][ T5368] loop0: detected capacity change from 0 to 8192 [ 60.036616][ T5368] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.049655][ T5368] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.058857][ T5368] REISERFS (device loop0): using ordered data mode [ 60.065399][ T5368] reiserfs: using flush barriers [pid 5368] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5368] chdir("./file0") = 0 [pid 5368] ioctl(4, LOOP_CLR_FD) = 0 [pid 5368] close(4) = 0 [pid 5368] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5367] <... futex resumed>) = 0 [ 60.070942][ T5368] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.087370][ T5368] REISERFS (device loop0): checking transaction log (loop0) [ 60.096007][ T5368] REISERFS (device loop0): Using r5 hash to sort names [ 60.103024][ T5368] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 60.115756][ T5368] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5368] mkdir("./file1", 000 [pid 5367] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... mkdir resumed>) = 0 [pid 5367] <... futex resumed>) = 0 [pid 5368] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5368] mkdir("./bus", 000 [pid 5367] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... mkdir resumed>) = 0 [pid 5367] <... futex resumed>) = 0 [pid 5368] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5368] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5367] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5367] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5368] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 0 [pid 5367] exit_group(0) = ? [pid 5368] <... futex resumed>) = ? [pid 5368] +++ exited with 0 +++ [pid 5367] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5367, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./97/binderfs") = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./97/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./97") = 0 mkdir("./98", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5370 ./strace-static-x86_64: Process 5370 attached [pid 5370] set_robust_list(0x5555559356e0, 24) = 0 [pid 5370] chdir("./98") = 0 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] setpgid(0, 0) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5370] write(3, "1000", 4) = 4 [pid 5370] close(3) = 0 [pid 5370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5370] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5370] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5370] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5371 attached , parent_tid=[5371], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5371 [pid 5371] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5371] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5371] <... futex resumed>) = 0 [pid 5370] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5371] memfd_create("syzkaller", 0) = 3 [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 60.130925][ T5368] overlayfs: upper fs needs to support d_type. [ 60.137397][ T5368] overlayfs: upper fs does not support tmpfile. [ 60.144379][ T5368] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.152120][ T5368] overlayfs: failed to resolve './file0': -2 [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5371] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5371] close(3) = 0 [pid 5371] mkdir("./file0", 0777) = 0 [ 60.235756][ T5371] loop0: detected capacity change from 0 to 8192 [ 60.244803][ T5371] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.258004][ T5371] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.267333][ T5371] REISERFS (device loop0): using ordered data mode [ 60.273855][ T5371] reiserfs: using flush barriers [pid 5371] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5371] chdir("./file0") = 0 [pid 5371] ioctl(4, LOOP_CLR_FD) = 0 [pid 5371] close(4) = 0 [pid 5371] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] <... futex resumed>) = 0 [pid 5370] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] <... futex resumed>) = 1 [pid 5371] mkdir("./file1", 000) = 0 [pid 5371] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] <... futex resumed>) = 0 [pid 5370] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] <... futex resumed>) = 1 [pid 5371] mkdir("./bus", 000) = 0 [pid 5371] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] <... futex resumed>) = 0 [pid 5370] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] <... futex resumed>) = 1 [ 60.279552][ T5371] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.295813][ T5371] REISERFS (device loop0): checking transaction log (loop0) [ 60.303849][ T5371] REISERFS (device loop0): Using r5 hash to sort names [ 60.310943][ T5371] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 60.323665][ T5371] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5371] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5371] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5370] exit_group(0) = ? [pid 5371] +++ exited with 0 +++ [pid 5370] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./98/binderfs") = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./98/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./98") = 0 mkdir("./99", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5373 ./strace-static-x86_64: Process 5373 attached [pid 5373] set_robust_list(0x5555559356e0, 24) = 0 [pid 5373] chdir("./99") = 0 [pid 5373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5373] setpgid(0, 0) = 0 [pid 5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5373] write(3, "1000", 4) = 4 [pid 5373] close(3) = 0 [pid 5373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5373] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5373] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5373] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5374 attached , parent_tid=[5374], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5374 [pid 5374] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5374] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5373] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5374] memfd_create("syzkaller", 0) = 3 [pid 5374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 60.345972][ T5371] overlayfs: upper fs needs to support d_type. [ 60.352315][ T5371] overlayfs: upper fs does not support tmpfile. [ 60.359027][ T5371] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.366959][ T5371] overlayfs: failed to resolve './file0': -2 [pid 5374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5374] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5374] close(3) = 0 [pid 5374] mkdir("./file0", 0777) = 0 [ 60.451093][ T5374] loop0: detected capacity change from 0 to 8192 [ 60.460160][ T5374] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.473260][ T5374] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.482503][ T5374] REISERFS (device loop0): using ordered data mode [ 60.489063][ T5374] reiserfs: using flush barriers [pid 5374] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5374] chdir("./file0") = 0 [pid 5374] ioctl(4, LOOP_CLR_FD) = 0 [pid 5374] close(4) = 0 [pid 5374] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5374] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] <... futex resumed>) = 0 [pid 5373] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [pid 5373] <... futex resumed>) = 1 [pid 5374] mkdir("./file1", 000 [pid 5373] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... mkdir resumed>) = 0 [pid 5374] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5373] <... futex resumed>) = 0 [pid 5374] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5373] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5373] <... futex resumed>) = 0 [pid 5374] mkdir("./bus", 000 [pid 5373] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... mkdir resumed>) = 0 [pid 5374] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5373] <... futex resumed>) = 0 [pid 5374] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 60.494549][ T5374] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.511194][ T5374] REISERFS (device loop0): checking transaction log (loop0) [ 60.519294][ T5374] REISERFS (device loop0): Using r5 hash to sort names [ 60.526257][ T5374] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 60.538949][ T5374] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5373] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5373] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5374] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = 0 [pid 5373] exit_group(0) = ? [pid 5374] <... futex resumed>) = ? [pid 5374] +++ exited with 0 +++ [pid 5373] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5373, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./99/binderfs") = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./99/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./99") = 0 mkdir("./100", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5376 ./strace-static-x86_64: Process 5376 attached [pid 5376] set_robust_list(0x5555559356e0, 24) = 0 [pid 5376] chdir("./100") = 0 [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5376] setpgid(0, 0) = 0 [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5376] write(3, "1000", 4) = 4 [pid 5376] close(3) = 0 [pid 5376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5376] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 60.564957][ T5374] overlayfs: upper fs needs to support d_type. [ 60.571271][ T5374] overlayfs: upper fs does not support tmpfile. [ 60.585607][ T5374] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.593188][ T5374] overlayfs: failed to resolve './file0': -2 [pid 5376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5376] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5376] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5377], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5377 [pid 5376] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5377 attached [pid 5377] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5377] memfd_create("syzkaller", 0) = 3 [pid 5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5377] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5377] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5377] close(3) = 0 [pid 5377] mkdir("./file0", 0777) = 0 [ 60.689495][ T5377] loop0: detected capacity change from 0 to 8192 [ 60.699046][ T5377] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.712742][ T5377] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.722296][ T5377] REISERFS (device loop0): using ordered data mode [ 60.728994][ T5377] reiserfs: using flush barriers [pid 5377] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5377] chdir("./file0") = 0 [pid 5377] ioctl(4, LOOP_CLR_FD) = 0 [pid 5377] close(4) = 0 [pid 5377] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5377] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... futex resumed>) = 0 [pid 5376] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5376] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5377] <... futex resumed>) = 0 [pid 5377] mkdir("./file1", 000) = 0 [pid 5377] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 0 [pid 5376] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5377] <... futex resumed>) = 1 [pid 5377] mkdir("./bus", 000) = 0 [pid 5377] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 0 [pid 5376] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5377] <... futex resumed>) = 1 [ 60.734854][ T5377] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.751679][ T5377] REISERFS (device loop0): checking transaction log (loop0) [ 60.759873][ T5377] REISERFS (device loop0): Using r5 hash to sort names [ 60.767034][ T5377] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 60.779763][ T5377] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5377] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5377] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5376] <... futex resumed>) = 0 [pid 5377] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] exit_group(0 [pid 5377] <... futex resumed>) = ? [pid 5376] <... exit_group resumed>) = ? [pid 5377] +++ exited with 0 +++ [pid 5376] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5376, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./100/binderfs") = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./100/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./100") = 0 mkdir("./101", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5379 ./strace-static-x86_64: Process 5379 attached [pid 5379] set_robust_list(0x5555559356e0, 24) = 0 [pid 5379] chdir("./101") = 0 [pid 5379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5379] setpgid(0, 0) = 0 [pid 5379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5379] write(3, "1000", 4) = 4 [pid 5379] close(3) = 0 [pid 5379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5379] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5379] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5379] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5380 attached [pid 5380] set_robust_list(0x7f8d103ee9e0, 24 [pid 5379] <... clone resumed>, parent_tid=[5380], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5380 [pid 5380] <... set_robust_list resumed>) = 0 [pid 5379] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5380] memfd_create("syzkaller", 0) = 3 [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 60.800935][ T5377] overlayfs: upper fs needs to support d_type. [ 60.807311][ T5377] overlayfs: upper fs does not support tmpfile. [ 60.813859][ T5377] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.821976][ T5377] overlayfs: failed to resolve './file0': -2 [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5380] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5380] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5380] close(3) = 0 [pid 5380] mkdir("./file0", 0777) = 0 [ 60.902338][ T5380] loop0: detected capacity change from 0 to 8192 [ 60.911442][ T5380] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.924561][ T5380] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.933756][ T5380] REISERFS (device loop0): using ordered data mode [ 60.940311][ T5380] reiserfs: using flush barriers [pid 5380] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5380] chdir("./file0") = 0 [pid 5380] ioctl(4, LOOP_CLR_FD) = 0 [pid 5380] close(4) = 0 [pid 5380] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] <... futex resumed>) = 0 [pid 5379] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... futex resumed>) = 1 [ 60.945988][ T5380] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.962440][ T5380] REISERFS (device loop0): checking transaction log (loop0) [ 60.970541][ T5380] REISERFS (device loop0): Using r5 hash to sort names [ 60.977586][ T5380] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 60.990332][ T5380] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5380] mkdir("./file1", 000) = 0 [pid 5380] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] <... futex resumed>) = 0 [pid 5379] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... futex resumed>) = 1 [pid 5380] mkdir("./bus", 000) = 0 [pid 5380] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] <... futex resumed>) = 0 [pid 5379] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... futex resumed>) = 1 [pid 5380] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5380] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5379] <... futex resumed>) = 0 [pid 5379] exit_group(0) = ? [pid 5380] +++ exited with 0 +++ [pid 5379] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5379, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./101/binderfs") = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./101/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./101") = 0 mkdir("./102", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5382 ./strace-static-x86_64: Process 5382 attached [pid 5382] set_robust_list(0x5555559356e0, 24) = 0 [pid 5382] chdir("./102") = 0 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5382] setpgid(0, 0) = 0 [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5382] write(3, "1000", 4) = 4 [pid 5382] close(3) = 0 [pid 5382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5382] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5382] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5382] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5383 attached [pid 5383] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5383] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] <... clone resumed>, parent_tid=[5383], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5383 [pid 5382] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5382] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5383] memfd_create("syzkaller", 0) = 3 [pid 5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 61.006620][ T5380] overlayfs: upper fs needs to support d_type. [ 61.013047][ T5380] overlayfs: upper fs does not support tmpfile. [ 61.020189][ T5380] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.028049][ T5380] overlayfs: failed to resolve './file0': -2 [pid 5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5383] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5383] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5383] close(3) = 0 [pid 5383] mkdir("./file0", 0777) = 0 [ 61.112261][ T5383] loop0: detected capacity change from 0 to 8192 [ 61.122179][ T5383] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.135184][ T5383] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.144473][ T5383] REISERFS (device loop0): using ordered data mode [ 61.151110][ T5383] reiserfs: using flush barriers [pid 5383] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5383] chdir("./file0") = 0 [pid 5383] ioctl(4, LOOP_CLR_FD) = 0 [pid 5383] close(4) = 0 [pid 5383] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... futex resumed>) = 0 [pid 5382] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5382] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5383] <... futex resumed>) = 1 [pid 5383] mkdir("./file1", 000) = 0 [pid 5383] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... futex resumed>) = 0 [pid 5382] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5382] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5383] <... futex resumed>) = 1 [pid 5383] mkdir("./bus", 000) = 0 [pid 5383] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... futex resumed>) = 0 [pid 5382] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5382] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5383] <... futex resumed>) = 1 [ 61.156633][ T5383] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.172984][ T5383] REISERFS (device loop0): checking transaction log (loop0) [ 61.181069][ T5383] REISERFS (device loop0): Using r5 hash to sort names [ 61.188102][ T5383] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 61.200885][ T5383] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5383] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5383] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... futex resumed>) = 0 [pid 5382] exit_group(0) = ? [pid 5383] <... futex resumed>) = ? [pid 5383] +++ exited with 0 +++ [pid 5382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./102/binderfs") = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./102/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./102") = 0 mkdir("./103", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5385 ./strace-static-x86_64: Process 5385 attached [pid 5385] set_robust_list(0x5555559356e0, 24) = 0 [pid 5385] chdir("./103") = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5385] setpgid(0, 0) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5385] write(3, "1000", 4) = 4 [pid 5385] close(3) = 0 [pid 5385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5385] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5385] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5385] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5386 attached , parent_tid=[5386], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5386 [pid 5386] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5386] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5385] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5386] <... futex resumed>) = 0 [pid 5385] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5386] memfd_create("syzkaller", 0) = 3 [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 61.222872][ T5383] overlayfs: upper fs needs to support d_type. [ 61.229228][ T5383] overlayfs: upper fs does not support tmpfile. [ 61.236233][ T5383] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.243829][ T5383] overlayfs: failed to resolve './file0': -2 [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5386] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5386] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5386] close(3) = 0 [pid 5386] mkdir("./file0", 0777) = 0 [ 61.324473][ T5386] loop0: detected capacity change from 0 to 8192 [ 61.334045][ T5386] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.347171][ T5386] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.356529][ T5386] REISERFS (device loop0): using ordered data mode [ 61.363043][ T5386] reiserfs: using flush barriers [pid 5386] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5386] chdir("./file0") = 0 [pid 5386] ioctl(4, LOOP_CLR_FD) = 0 [pid 5386] close(4) = 0 [pid 5386] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5386] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5385] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5385] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] mkdir("./file1", 000) = 0 [pid 5386] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5385] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... futex resumed>) = 1 [pid 5386] mkdir("./bus", 000) = 0 [pid 5386] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5385] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 61.368904][ T5386] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.385172][ T5386] REISERFS (device loop0): checking transaction log (loop0) [ 61.393254][ T5386] REISERFS (device loop0): Using r5 hash to sort names [ 61.400335][ T5386] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 61.413042][ T5386] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5386] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5386] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5385] exit_group(0 [pid 5386] ???( [pid 5385] <... exit_group resumed>) = ? [pid 5386] <... ??? resumed>) = ? [pid 5386] +++ exited with 0 +++ [pid 5385] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./103/binderfs") = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./103/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./103") = 0 mkdir("./104", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5388 ./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x5555559356e0, 24) = 0 [pid 5388] chdir("./104") = 0 [pid 5388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5388] setpgid(0, 0) = 0 [pid 5388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5388] write(3, "1000", 4) = 4 [pid 5388] close(3) = 0 [pid 5388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5388] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5388] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5388] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5389 attached , parent_tid=[5389], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5389 [pid 5389] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5389] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5388] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5389] memfd_create("syzkaller", 0) = 3 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 61.441489][ T5386] overlayfs: upper fs needs to support d_type. [ 61.447794][ T5386] overlayfs: upper fs does not support tmpfile. [ 61.454327][ T5386] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.462178][ T5386] overlayfs: failed to resolve './file0': -2 [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5389] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5389] close(3) = 0 [pid 5389] mkdir("./file0", 0777) = 0 [ 61.545439][ T5389] loop0: detected capacity change from 0 to 8192 [ 61.555905][ T5389] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.568959][ T5389] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.578228][ T5389] REISERFS (device loop0): using ordered data mode [ 61.584770][ T5389] reiserfs: using flush barriers [pid 5389] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5389] chdir("./file0") = 0 [pid 5389] ioctl(4, LOOP_CLR_FD) = 0 [pid 5389] close(4) = 0 [pid 5389] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.590400][ T5389] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.606795][ T5389] REISERFS (device loop0): checking transaction log (loop0) [ 61.615047][ T5389] REISERFS (device loop0): Using r5 hash to sort names [ 61.622286][ T5389] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 61.635064][ T5389] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5388] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... futex resumed>) = 1 [pid 5389] mkdir("./file1", 000) = 0 [pid 5389] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... futex resumed>) = 1 [pid 5389] mkdir("./bus", 000) = 0 [pid 5389] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5388] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5388] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... futex resumed>) = 1 [pid 5389] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5389] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5389] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] <... futex resumed>) = 0 [pid 5388] exit_group(0) = ? [pid 5389] <... futex resumed>) = ? [pid 5389] +++ exited with 0 +++ [pid 5388] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5388, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./104/binderfs") = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./104/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./104") = 0 mkdir("./105", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5391 attached , child_tidptr=0x5555559356d0) = 5391 [pid 5391] set_robust_list(0x5555559356e0, 24) = 0 [pid 5391] chdir("./105") = 0 [pid 5391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5391] setpgid(0, 0) = 0 [pid 5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5391] write(3, "1000", 4) = 4 [pid 5391] close(3) = 0 [pid 5391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5391] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5391] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5391] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5392], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5392 [pid 5391] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5392 attached [pid 5392] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5392] memfd_create("syzkaller", 0) = 3 [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 61.650608][ T5389] overlayfs: upper fs needs to support d_type. [ 61.657140][ T5389] overlayfs: upper fs does not support tmpfile. [ 61.663882][ T5389] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.672194][ T5389] overlayfs: failed to resolve './file0': -2 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5392] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file0", 0777) = 0 [ 61.753806][ T5392] loop0: detected capacity change from 0 to 8192 [ 61.762456][ T5392] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.775674][ T5392] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.785015][ T5392] REISERFS (device loop0): using ordered data mode [ 61.791543][ T5392] reiserfs: using flush barriers [pid 5392] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5392] chdir("./file0") = 0 [pid 5392] ioctl(4, LOOP_CLR_FD) = 0 [ 61.797350][ T5392] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.813610][ T5392] REISERFS (device loop0): checking transaction log (loop0) [ 61.821747][ T5392] REISERFS (device loop0): Using r5 hash to sort names [ 61.828912][ T5392] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 61.841647][ T5392] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5392] close(4) = 0 [pid 5392] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = 0 [pid 5391] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... futex resumed>) = 1 [pid 5392] mkdir("./file1", 000) = 0 [pid 5392] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = 0 [pid 5391] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... futex resumed>) = 1 [pid 5392] mkdir("./bus", 000) = 0 [pid 5392] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = 0 [pid 5391] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... futex resumed>) = 1 [pid 5392] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5392] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = 0 [pid 5391] exit_group(0) = ? [pid 5392] <... futex resumed>) = ? [pid 5392] +++ exited with 0 +++ [pid 5391] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./105/binderfs") = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./105/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./105") = 0 mkdir("./106", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5394 ./strace-static-x86_64: Process 5394 attached [pid 5394] set_robust_list(0x5555559356e0, 24) = 0 [pid 5394] chdir("./106") = 0 [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] setpgid(0, 0) = 0 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5394] write(3, "1000", 4) = 4 [pid 5394] close(3) = 0 [pid 5394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5394] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5394] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5394] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5395], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5395 [pid 5394] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5394] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5395 attached [pid 5395] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5395] memfd_create("syzkaller", 0) = 3 [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 61.857863][ T5392] overlayfs: upper fs needs to support d_type. [ 61.864293][ T5392] overlayfs: upper fs does not support tmpfile. [ 61.871302][ T5392] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.879257][ T5392] overlayfs: failed to resolve './file0': -2 [pid 5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5395] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5395] close(3) = 0 [pid 5395] mkdir("./file0", 0777) = 0 [ 61.949990][ T5395] loop0: detected capacity change from 0 to 8192 [ 61.959068][ T5395] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.972207][ T5395] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.981469][ T5395] REISERFS (device loop0): using ordered data mode [ 61.988033][ T5395] reiserfs: using flush barriers [pid 5395] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5395] chdir("./file0") = 0 [pid 5395] ioctl(4, LOOP_CLR_FD) = 0 [pid 5395] close(4) = 0 [pid 5395] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5395] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] <... futex resumed>) = 0 [pid 5394] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... futex resumed>) = 0 [pid 5394] <... futex resumed>) = 1 [pid 5395] mkdir("./file1", 000 [pid 5394] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] <... mkdir resumed>) = 0 [pid 5395] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5395] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5395] mkdir("./bus", 000 [pid 5394] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] <... mkdir resumed>) = 0 [pid 5395] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5395] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5395] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 61.993564][ T5395] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.009961][ T5395] REISERFS (device loop0): checking transaction log (loop0) [ 62.017994][ T5395] REISERFS (device loop0): Using r5 hash to sort names [ 62.025041][ T5395] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 62.037744][ T5395] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5394] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5395] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5395] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] exit_group(0) = ? [pid 5395] <... futex resumed>) = ? [pid 5395] +++ exited with 0 +++ [pid 5394] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5394, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./106/binderfs") = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./106/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./106") = 0 mkdir("./107", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5397 ./strace-static-x86_64: Process 5397 attached [pid 5397] set_robust_list(0x5555559356e0, 24) = 0 [pid 5397] chdir("./107") = 0 [pid 5397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5397] setpgid(0, 0) = 0 [pid 5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5397] write(3, "1000", 4) = 4 [pid 5397] close(3) = 0 [pid 5397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5397] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5397] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5397] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5398 attached , parent_tid=[5398], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5398 [pid 5398] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5398] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5397] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5398] memfd_create("syzkaller", 0 [ 62.063212][ T5395] overlayfs: upper fs needs to support d_type. [ 62.069545][ T5395] overlayfs: upper fs does not support tmpfile. [ 62.076243][ T5395] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.083816][ T5395] overlayfs: failed to resolve './file0': -2 [pid 5397] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5398] <... memfd_create resumed>) = 3 [pid 5398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5398] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5398] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5398] close(3) = 0 [pid 5398] mkdir("./file0", 0777) = 0 [ 62.170388][ T5398] loop0: detected capacity change from 0 to 8192 [ 62.179792][ T5398] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.192911][ T5398] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.202099][ T5398] REISERFS (device loop0): using ordered data mode [ 62.208657][ T5398] reiserfs: using flush barriers [pid 5398] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5398] chdir("./file0") = 0 [pid 5398] ioctl(4, LOOP_CLR_FD) = 0 [pid 5398] close(4) = 0 [pid 5398] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5397] <... futex resumed>) = 0 [pid 5397] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] <... futex resumed>) = 0 [pid 5397] <... futex resumed>) = 1 [pid 5398] mkdir("./file1", 000 [pid 5397] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5398] <... mkdir resumed>) = 0 [pid 5398] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5397] <... futex resumed>) = 0 [pid 5398] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5397] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5397] <... futex resumed>) = 0 [pid 5398] mkdir("./bus", 000 [pid 5397] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5398] <... mkdir resumed>) = 0 [pid 5398] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5397] <... futex resumed>) = 0 [pid 5398] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 62.214231][ T5398] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.230604][ T5398] REISERFS (device loop0): checking transaction log (loop0) [ 62.238659][ T5398] REISERFS (device loop0): Using r5 hash to sort names [ 62.245735][ T5398] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 62.258470][ T5398] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5397] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5398] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5398] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 0 [pid 5397] exit_group(0) = ? [pid 5398] <... futex resumed>) = ? [pid 5398] +++ exited with 0 +++ [pid 5397] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./107/binderfs") = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./107/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./107") = 0 mkdir("./108", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5400 ./strace-static-x86_64: Process 5400 attached [pid 5400] set_robust_list(0x5555559356e0, 24) = 0 [pid 5400] chdir("./108") = 0 [pid 5400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5400] setpgid(0, 0) = 0 [pid 5400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5400] write(3, "1000", 4) = 4 [pid 5400] close(3) = 0 [pid 5400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5400] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5400] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5400] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5401], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5401 ./strace-static-x86_64: Process 5401 attached [pid 5401] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5401] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5400] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5400] <... futex resumed>) = 0 [pid 5401] memfd_create("syzkaller", 0 [pid 5400] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5401] <... memfd_create resumed>) = 3 [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 62.282580][ T5398] overlayfs: upper fs needs to support d_type. [ 62.288888][ T5398] overlayfs: upper fs does not support tmpfile. [ 62.295654][ T5398] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.303616][ T5398] overlayfs: failed to resolve './file0': -2 [pid 5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5401] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5401] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5401] close(3) = 0 [pid 5401] mkdir("./file0", 0777) = 0 [ 62.388358][ T5401] loop0: detected capacity change from 0 to 8192 [ 62.397422][ T5401] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.410573][ T5401] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.419827][ T5401] REISERFS (device loop0): using ordered data mode [ 62.426381][ T5401] reiserfs: using flush barriers [pid 5401] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5401] chdir("./file0") = 0 [pid 5401] ioctl(4, LOOP_CLR_FD) = 0 [pid 5401] close(4) = 0 [pid 5401] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5400] <... futex resumed>) = 0 [pid 5401] mkdir("./file1", 000 [pid 5400] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... mkdir resumed>) = 0 [pid 5400] <... futex resumed>) = 0 [pid 5401] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 0 [pid 5400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5401] mkdir("./bus", 000 [pid 5400] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... mkdir resumed>) = 0 [pid 5400] <... futex resumed>) = 0 [pid 5401] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 0 [pid 5400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5401] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5400] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 62.431915][ T5401] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.448338][ T5401] REISERFS (device loop0): checking transaction log (loop0) [ 62.456455][ T5401] REISERFS (device loop0): Using r5 hash to sort names [ 62.463421][ T5401] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 62.476156][ T5401] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5400] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5401] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] exit_group(0) = ? [pid 5401] <... futex resumed>) = ? [pid 5401] +++ exited with 0 +++ [pid 5400] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5400, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./108/binderfs") = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./108/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./108") = 0 mkdir("./109", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5403 ./strace-static-x86_64: Process 5403 attached [pid 5403] set_robust_list(0x5555559356e0, 24) = 0 [pid 5403] chdir("./109") = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5403] write(3, "1000", 4) = 4 [pid 5403] close(3) = 0 [pid 5403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5403] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 62.494211][ T5401] overlayfs: upper fs needs to support d_type. [ 62.501157][ T5401] overlayfs: upper fs does not support tmpfile. [ 62.507826][ T5401] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.516003][ T5401] overlayfs: failed to resolve './file0': -2 [pid 5403] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5403] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5404 attached , parent_tid=[5404], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5404 [pid 5404] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5404] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... futex resumed>) = 0 [pid 5403] <... futex resumed>) = 1 [pid 5403] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5404] memfd_create("syzkaller", 0) = 3 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5404] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777) = 0 [ 62.612111][ T5404] loop0: detected capacity change from 0 to 8192 [ 62.621328][ T5404] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.634397][ T5404] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.643625][ T5404] REISERFS (device loop0): using ordered data mode [ 62.650176][ T5404] reiserfs: using flush barriers [pid 5404] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5404] chdir("./file0") = 0 [pid 5404] ioctl(4, LOOP_CLR_FD) = 0 [pid 5404] close(4) = 0 [pid 5404] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5404] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] <... futex resumed>) = 0 [pid 5404] mkdir("./file1", 000 [pid 5403] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] <... mkdir resumed>) = 0 [pid 5404] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5404] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] <... futex resumed>) = 0 [pid 5404] mkdir("./bus", 000 [pid 5403] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] <... mkdir resumed>) = 0 [pid 5404] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5404] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 62.655790][ T5404] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.672148][ T5404] REISERFS (device loop0): checking transaction log (loop0) [ 62.680298][ T5404] REISERFS (device loop0): Using r5 hash to sort names [ 62.688903][ T5404] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 62.701785][ T5404] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5403] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5404] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5404] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] exit_group(0 [pid 5404] <... futex resumed>) = ? [pid 5403] <... exit_group resumed>) = ? [pid 5404] +++ exited with 0 +++ [pid 5403] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./109/binderfs") = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./109/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./109") = 0 mkdir("./110", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5406 attached , child_tidptr=0x5555559356d0) = 5406 [pid 5406] set_robust_list(0x5555559356e0, 24) = 0 [pid 5406] chdir("./110") = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5406] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5406] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5407 attached , parent_tid=[5407], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5407 [pid 5407] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5407] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5407] <... futex resumed>) = 0 [pid 5406] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5407] memfd_create("syzkaller", 0) = 3 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 62.725323][ T5404] overlayfs: upper fs needs to support d_type. [ 62.731669][ T5404] overlayfs: upper fs does not support tmpfile. [ 62.738511][ T5404] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.746434][ T5404] overlayfs: failed to resolve './file0': -2 [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5407] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5407] close(3) = 0 [pid 5407] mkdir("./file0", 0777) = 0 [ 62.828401][ T5407] loop0: detected capacity change from 0 to 8192 [ 62.837036][ T5407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.850059][ T5407] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.859264][ T5407] REISERFS (device loop0): using ordered data mode [ 62.865778][ T5407] reiserfs: using flush barriers [pid 5407] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5407] chdir("./file0") = 0 [pid 5407] ioctl(4, LOOP_CLR_FD) = 0 [pid 5407] close(4) = 0 [pid 5407] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] mkdir("./file1", 000 [pid 5406] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] <... mkdir resumed>) = 0 [pid 5406] <... futex resumed>) = 0 [pid 5407] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... futex resumed>) = 0 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5407] mkdir("./bus", 000 [pid 5406] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] <... mkdir resumed>) = 0 [pid 5406] <... futex resumed>) = 0 [pid 5407] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... futex resumed>) = 0 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5407] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5406] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 62.871428][ T5407] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.887837][ T5407] REISERFS (device loop0): checking transaction log (loop0) [ 62.896117][ T5407] REISERFS (device loop0): Using r5 hash to sort names [ 62.903057][ T5407] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 62.915763][ T5407] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5406] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5407] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = 0 [pid 5406] exit_group(0) = ? [pid 5407] <... futex resumed>) = ? [pid 5407] +++ exited with 0 +++ [pid 5406] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5406, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./110/binderfs") = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./110/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./110") = 0 mkdir("./111", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5409 ./strace-static-x86_64: Process 5409 attached [pid 5409] set_robust_list(0x5555559356e0, 24) = 0 [pid 5409] chdir("./111") = 0 [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5409] setpgid(0, 0) = 0 [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5409] write(3, "1000", 4) = 4 [pid 5409] close(3) = 0 [pid 5409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5409] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5409] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5409] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5410], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5410 [pid 5409] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5410 attached [pid 5410] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5410] memfd_create("syzkaller", 0) = 3 [pid 5410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 62.933848][ T5407] overlayfs: upper fs needs to support d_type. [ 62.940107][ T5407] overlayfs: upper fs does not support tmpfile. [ 62.946921][ T5407] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.954917][ T5407] overlayfs: failed to resolve './file0': -2 [pid 5410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5410] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5410] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5410] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5410] close(3) = 0 [pid 5410] mkdir("./file0", 0777) = 0 [ 63.029054][ T5410] loop0: detected capacity change from 0 to 8192 [ 63.037960][ T5410] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.050935][ T5410] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 63.060150][ T5410] REISERFS (device loop0): using ordered data mode [ 63.066692][ T5410] reiserfs: using flush barriers [pid 5410] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5410] chdir("./file0") = 0 [pid 5410] ioctl(4, LOOP_CLR_FD) = 0 [pid 5410] close(4) = 0 [pid 5410] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... futex resumed>) = 0 [pid 5409] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] <... futex resumed>) = 1 [ 63.072542][ T5410] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.088920][ T5410] REISERFS (device loop0): checking transaction log (loop0) [ 63.097019][ T5410] REISERFS (device loop0): Using r5 hash to sort names [ 63.103978][ T5410] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 63.116679][ T5410] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5410] mkdir("./file1", 000) = 0 [pid 5410] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... futex resumed>) = 0 [pid 5409] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] <... futex resumed>) = 1 [pid 5410] mkdir("./bus", 000) = 0 [pid 5410] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... futex resumed>) = 0 [pid 5409] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] <... futex resumed>) = 1 [pid 5410] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5410] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5409] exit_group(0) = ? [pid 5410] +++ exited with 0 +++ [pid 5409] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./111/binderfs") = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./111/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./111") = 0 mkdir("./112", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5412 ./strace-static-x86_64: Process 5412 attached [pid 5412] set_robust_list(0x5555559356e0, 24) = 0 [pid 5412] chdir("./112") = 0 [pid 5412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5412] setpgid(0, 0) = 0 [pid 5412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5412] write(3, "1000", 4) = 4 [pid 5412] close(3) = 0 [pid 5412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5412] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5412] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5412] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5413 attached , parent_tid=[5413], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5413 [pid 5413] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5413] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5412] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5413] memfd_create("syzkaller", 0) = 3 [pid 5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 63.130115][ T5410] overlayfs: upper fs needs to support d_type. [ 63.136642][ T5410] overlayfs: upper fs does not support tmpfile. [ 63.143280][ T5410] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.150980][ T5410] overlayfs: failed to resolve './file0': -2 [pid 5412] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5413] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5413] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5413] close(3) = 0 [pid 5413] mkdir("./file0", 0777) = 0 [ 63.232796][ T5413] loop0: detected capacity change from 0 to 8192 [ 63.241910][ T5413] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.254982][ T5413] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 63.264135][ T5413] REISERFS (device loop0): using ordered data mode [ 63.270839][ T5413] reiserfs: using flush barriers [pid 5413] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5413] chdir("./file0") = 0 [pid 5413] ioctl(4, LOOP_CLR_FD) = 0 [pid 5413] close(4) = 0 [pid 5413] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5413] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5412] <... futex resumed>) = 0 [pid 5412] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = 1 [pid 5412] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5413] mkdir("./file1", 000) = 0 [pid 5413] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5412] <... futex resumed>) = 0 [pid 5413] mkdir("./bus", 000 [pid 5412] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... mkdir resumed>) = 0 [pid 5412] <... futex resumed>) = 0 [pid 5413] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5413] <... futex resumed>) = 0 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5412] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 63.276482][ T5413] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.292894][ T5413] REISERFS (device loop0): checking transaction log (loop0) [ 63.301006][ T5413] REISERFS (device loop0): Using r5 hash to sort names [ 63.307972][ T5413] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 63.320676][ T5413] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5412] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5413] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5413] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5412] <... futex resumed>) = 0 [pid 5413] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5412] exit_group(0) = ? [pid 5413] <... futex resumed>) = ? [pid 5413] +++ exited with 0 +++ [pid 5412] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5412, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./112/binderfs") = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./112/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./112") = 0 mkdir("./113", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5415 ./strace-static-x86_64: Process 5415 attached [pid 5415] set_robust_list(0x5555559356e0, 24) = 0 [pid 5415] chdir("./113") = 0 [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5415] setpgid(0, 0) = 0 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5415] write(3, "1000", 4) = 4 [pid 5415] close(3) = 0 [pid 5415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5415] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5415] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5415] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5416 attached , parent_tid=[5416], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5416 [pid 5415] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5416] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5416] memfd_create("syzkaller", 0) = 3 [pid 5416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 63.341195][ T5413] overlayfs: upper fs needs to support d_type. [ 63.347535][ T5413] overlayfs: upper fs does not support tmpfile. [ 63.353980][ T5413] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.361884][ T5413] overlayfs: failed to resolve './file0': -2 [pid 5416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5416] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5416] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5416] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5416] close(3) = 0 [pid 5416] mkdir("./file0", 0777) = 0 [ 63.440522][ T5416] loop0: detected capacity change from 0 to 8192 [ 63.449375][ T5416] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.462398][ T5416] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 63.472893][ T5416] REISERFS (device loop0): using ordered data mode [ 63.479461][ T5416] reiserfs: using flush barriers [pid 5416] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5416] chdir("./file0") = 0 [pid 5416] ioctl(4, LOOP_CLR_FD) = 0 [ 63.485066][ T5416] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.501495][ T5416] REISERFS (device loop0): checking transaction log (loop0) [ 63.509799][ T5416] REISERFS (device loop0): Using r5 hash to sort names [ 63.516890][ T5416] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 63.529702][ T5416] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5416] close(4) = 0 [pid 5416] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5415] <... futex resumed>) = 0 [pid 5416] mkdir("./file1", 000 [pid 5415] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] <... mkdir resumed>) = 0 [pid 5415] <... futex resumed>) = 0 [pid 5416] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5416] mkdir("./bus", 000 [pid 5415] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] <... mkdir resumed>) = 0 [pid 5415] <... futex resumed>) = 0 [pid 5416] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... futex resumed>) = 0 [pid 5415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5416] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5415] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5416] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... futex resumed>) = 0 [pid 5415] exit_group(0) = ? [pid 5416] <... futex resumed>) = ? [pid 5416] +++ exited with 0 +++ [pid 5415] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./113/binderfs") = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./113/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./113") = 0 mkdir("./114", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5418 attached , child_tidptr=0x5555559356d0) = 5418 [pid 5418] set_robust_list(0x5555559356e0, 24) = 0 [pid 5418] chdir("./114") = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5418] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5418] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5418] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5419 attached [pid 5419] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5419] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] <... clone resumed>, parent_tid=[5419], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5419 [pid 5418] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5419] <... futex resumed>) = 0 [pid 5418] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5419] memfd_create("syzkaller", 0) = 3 [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 63.543499][ T5416] overlayfs: upper fs needs to support d_type. [ 63.550113][ T5416] overlayfs: upper fs does not support tmpfile. [ 63.556910][ T5416] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.564431][ T5416] overlayfs: failed to resolve './file0': -2 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5419] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5419] close(3) = 0 [pid 5419] mkdir("./file0", 0777) = 0 [ 63.646267][ T5419] loop0: detected capacity change from 0 to 8192 [ 63.655500][ T5419] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.668548][ T5419] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 63.677792][ T5419] REISERFS (device loop0): using ordered data mode [ 63.684286][ T5419] reiserfs: using flush barriers [pid 5419] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5419] chdir("./file0") = 0 [pid 5419] ioctl(4, LOOP_CLR_FD) = 0 [pid 5419] close(4) = 0 [pid 5419] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5419] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] <... futex resumed>) = 0 [pid 5418] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = 0 [pid 5418] <... futex resumed>) = 1 [pid 5419] mkdir("./file1", 000 [pid 5418] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... mkdir resumed>) = 0 [pid 5419] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5419] mkdir("./bus", 000 [pid 5418] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... mkdir resumed>) = 0 [pid 5419] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [ 63.689942][ T5419] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.706293][ T5419] REISERFS (device loop0): checking transaction log (loop0) [ 63.714784][ T5419] REISERFS (device loop0): Using r5 hash to sort names [ 63.721830][ T5419] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 63.734613][ T5419] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5419] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5418] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5419] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] exit_group(0 [pid 5419] <... futex resumed>) = ? [pid 5418] <... exit_group resumed>) = ? [pid 5419] +++ exited with 0 +++ [pid 5418] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./114/binderfs") = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./114/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./114") = 0 mkdir("./115", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5421 ./strace-static-x86_64: Process 5421 attached [pid 5421] set_robust_list(0x5555559356e0, 24) = 0 [pid 5421] chdir("./115") = 0 [pid 5421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5421] setpgid(0, 0) = 0 [pid 5421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5421] write(3, "1000", 4) = 4 [pid 5421] close(3) = 0 [pid 5421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5421] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5421] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5421] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5422 attached [ 63.757499][ T5419] overlayfs: upper fs needs to support d_type. [ 63.763846][ T5419] overlayfs: upper fs does not support tmpfile. [ 63.770670][ T5419] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.778504][ T5419] overlayfs: failed to resolve './file0': -2 [pid 5422] set_robust_list(0x7f8d103ee9e0, 24 [pid 5421] <... clone resumed>, parent_tid=[5422], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5422 [pid 5422] <... set_robust_list resumed>) = 0 [pid 5422] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5421] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5422] memfd_create("syzkaller", 0) = 3 [pid 5422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5422] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5422] close(3) = 0 [pid 5422] mkdir("./file0", 0777) = 0 [ 63.872696][ T5422] loop0: detected capacity change from 0 to 8192 [ 63.882031][ T5422] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.895150][ T5422] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 63.904355][ T5422] REISERFS (device loop0): using ordered data mode [ 63.910985][ T5422] reiserfs: using flush barriers [pid 5422] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5422] chdir("./file0") = 0 [pid 5422] ioctl(4, LOOP_CLR_FD) = 0 [pid 5422] close(4) = 0 [pid 5422] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] <... futex resumed>) = 0 [pid 5422] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... futex resumed>) = 0 [pid 5421] <... futex resumed>) = 1 [pid 5422] mkdir("./file1", 000 [pid 5421] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] <... mkdir resumed>) = 0 [pid 5422] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] <... futex resumed>) = 0 [pid 5422] mkdir("./bus", 000 [pid 5421] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... mkdir resumed>) = 0 [pid 5421] <... futex resumed>) = 0 [pid 5422] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5421] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] <... futex resumed>) = 0 [pid 5421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5421] <... futex resumed>) = 0 [pid 5422] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 63.916566][ T5422] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.932938][ T5422] REISERFS (device loop0): checking transaction log (loop0) [ 63.941054][ T5422] REISERFS (device loop0): Using r5 hash to sort names [ 63.948139][ T5422] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 63.960844][ T5422] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5421] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5422] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5421] <... futex resumed>) = 0 [pid 5421] exit_group(0) = ? [pid 5422] <... futex resumed>) = ? [pid 5422] +++ exited with 0 +++ [pid 5421] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5421, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./115/binderfs") = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./115/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./115") = 0 mkdir("./116", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5424 ./strace-static-x86_64: Process 5424 attached [pid 5424] set_robust_list(0x5555559356e0, 24) = 0 [pid 5424] chdir("./116") = 0 [pid 5424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5424] setpgid(0, 0) = 0 [pid 5424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5424] write(3, "1000", 4) = 4 [pid 5424] close(3) = 0 [pid 5424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5424] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5424] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5424] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5425 attached , parent_tid=[5425], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5425 [pid 5425] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5425] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5425] <... futex resumed>) = 0 [pid 5425] memfd_create("syzkaller", 0 [ 63.987546][ T5422] overlayfs: upper fs needs to support d_type. [ 63.993740][ T5422] overlayfs: upper fs does not support tmpfile. [ 64.000541][ T5422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.008363][ T5422] overlayfs: failed to resolve './file0': -2 [pid 5424] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5425] <... memfd_create resumed>) = 3 [pid 5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5425] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5425] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5425] close(3) = 0 [pid 5425] mkdir("./file0", 0777) = 0 [ 64.093623][ T5425] loop0: detected capacity change from 0 to 8192 [ 64.102194][ T5425] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.115532][ T5425] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.124848][ T5425] REISERFS (device loop0): using ordered data mode [ 64.131361][ T5425] reiserfs: using flush barriers [pid 5425] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5425] chdir("./file0") = 0 [pid 5425] ioctl(4, LOOP_CLR_FD) = 0 [pid 5425] close(4) = 0 [pid 5425] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] <... futex resumed>) = 0 [pid 5425] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5424] <... futex resumed>) = 0 [pid 5425] mkdir("./file1", 000 [pid 5424] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5425] <... mkdir resumed>) = 0 [pid 5425] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] <... futex resumed>) = 0 [pid 5425] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5424] <... futex resumed>) = 0 [pid 5425] mkdir("./bus", 000 [pid 5424] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5425] <... mkdir resumed>) = 0 [pid 5425] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] <... futex resumed>) = 0 [pid 5425] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5424] <... futex resumed>) = 0 [pid 5425] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 64.137452][ T5425] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.153713][ T5425] REISERFS (device loop0): checking transaction log (loop0) [ 64.161866][ T5425] REISERFS (device loop0): Using r5 hash to sort names [ 64.168961][ T5425] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 64.181656][ T5425] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5424] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5425] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5425] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... futex resumed>) = 0 [pid 5424] exit_group(0) = ? [pid 5425] <... futex resumed>) = ? [pid 5425] +++ exited with 0 +++ [pid 5424] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5424, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./116/binderfs") = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./116/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./116") = 0 mkdir("./117", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5427 ./strace-static-x86_64: Process 5427 attached [pid 5427] set_robust_list(0x5555559356e0, 24) = 0 [pid 5427] chdir("./117") = 0 [pid 5427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5427] setpgid(0, 0) = 0 [pid 5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5427] write(3, "1000", 4) = 4 [pid 5427] close(3) = 0 [pid 5427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5427] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5427] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5427] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5428 attached , parent_tid=[5428], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5428 [pid 5428] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5428] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5427] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5428] memfd_create("syzkaller", 0) = 3 [pid 5428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 64.207641][ T5425] overlayfs: upper fs needs to support d_type. [ 64.213925][ T5425] overlayfs: upper fs does not support tmpfile. [ 64.220840][ T5425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.229208][ T5425] overlayfs: failed to resolve './file0': -2 [pid 5428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5428] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5428] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5428] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5428] close(3) = 0 [pid 5428] mkdir("./file0", 0777) = 0 [ 64.311875][ T5428] loop0: detected capacity change from 0 to 8192 [ 64.321200][ T5428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.334228][ T5428] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.343459][ T5428] REISERFS (device loop0): using ordered data mode [ 64.349993][ T5428] reiserfs: using flush barriers [pid 5428] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5428] chdir("./file0") = 0 [pid 5428] ioctl(4, LOOP_CLR_FD) = 0 [pid 5428] close(4) = 0 [pid 5428] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = 0 [pid 5427] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5427] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5428] <... futex resumed>) = 1 [ 64.355675][ T5428] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.371972][ T5428] REISERFS (device loop0): checking transaction log (loop0) [ 64.380312][ T5428] REISERFS (device loop0): Using r5 hash to sort names [ 64.387540][ T5428] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 64.400227][ T5428] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5428] mkdir("./file1", 000) = 0 [pid 5428] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = 0 [pid 5427] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5427] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5428] <... futex resumed>) = 1 [pid 5428] mkdir("./bus", 000) = 0 [pid 5428] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = 0 [pid 5427] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5427] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5428] <... futex resumed>) = 1 [pid 5428] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5428] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5428] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] <... futex resumed>) = 0 [pid 5427] exit_group(0) = ? [pid 5428] <... futex resumed>) = ? [pid 5428] +++ exited with 0 +++ [pid 5427] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./117/binderfs") = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./117/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./117") = 0 mkdir("./118", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5430 ./strace-static-x86_64: Process 5430 attached [pid 5430] set_robust_list(0x5555559356e0, 24) = 0 [pid 5430] chdir("./118") = 0 [pid 5430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5430] setpgid(0, 0) = 0 [pid 5430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5430] write(3, "1000", 4) = 4 [pid 5430] close(3) = 0 [pid 5430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5430] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5430] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5430] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5431], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5431 [pid 5430] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5431 attached [pid 5431] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5431] memfd_create("syzkaller", 0) = 3 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 64.415277][ T5428] overlayfs: upper fs needs to support d_type. [ 64.421796][ T5428] overlayfs: upper fs does not support tmpfile. [ 64.428734][ T5428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.436515][ T5428] overlayfs: failed to resolve './file0': -2 [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5431] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5431] close(3) = 0 [pid 5431] mkdir("./file0", 0777) = 0 [ 64.514926][ T5431] loop0: detected capacity change from 0 to 8192 [ 64.523891][ T5431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.537106][ T5431] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.546567][ T5431] REISERFS (device loop0): using ordered data mode [ 64.553058][ T5431] reiserfs: using flush barriers [pid 5431] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5431] chdir("./file0") = 0 [pid 5431] ioctl(4, LOOP_CLR_FD) = 0 [pid 5431] close(4) = 0 [pid 5431] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5431] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5430] <... futex resumed>) = 0 [pid 5430] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5430] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] <... futex resumed>) = 0 [pid 5431] mkdir("./file1", 000) = 0 [pid 5431] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = 0 [pid 5430] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] <... futex resumed>) = 1 [pid 5431] mkdir("./bus", 000) = 0 [pid 5431] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = 0 [pid 5430] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] <... futex resumed>) = 1 [ 64.558739][ T5431] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.575057][ T5431] REISERFS (device loop0): checking transaction log (loop0) [ 64.583141][ T5431] REISERFS (device loop0): Using r5 hash to sort names [ 64.590446][ T5431] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 64.603244][ T5431] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5431] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5431] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = 0 [pid 5430] exit_group(0) = ? [pid 5431] <... futex resumed>) = ? [pid 5431] +++ exited with 0 +++ [pid 5430] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5430, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./118/binderfs") = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./118/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./118") = 0 mkdir("./119", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5433 ./strace-static-x86_64: Process 5433 attached [pid 5433] set_robust_list(0x5555559356e0, 24) = 0 [pid 5433] chdir("./119") = 0 [pid 5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5433] setpgid(0, 0) = 0 [pid 5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5433] write(3, "1000", 4) = 4 [pid 5433] close(3) = 0 [pid 5433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5433] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5433] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5433] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5434 attached , parent_tid=[5434], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5434 [pid 5434] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5434] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5434] memfd_create("syzkaller", 0 [pid 5433] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5434] <... memfd_create resumed>) = 3 [ 64.623052][ T5431] overlayfs: upper fs needs to support d_type. [ 64.629392][ T5431] overlayfs: upper fs does not support tmpfile. [ 64.636240][ T5431] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.644206][ T5431] overlayfs: failed to resolve './file0': -2 [pid 5434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5434] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5434] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5434] close(3) = 0 [pid 5434] mkdir("./file0", 0777) = 0 [ 64.730153][ T5434] loop0: detected capacity change from 0 to 8192 [ 64.739524][ T5434] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.752532][ T5434] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.761724][ T5434] REISERFS (device loop0): using ordered data mode [ 64.768270][ T5434] reiserfs: using flush barriers [pid 5434] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5434] chdir("./file0") = 0 [pid 5434] ioctl(4, LOOP_CLR_FD) = 0 [pid 5434] close(4) = 0 [pid 5434] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = 0 [pid 5433] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] <... futex resumed>) = 1 [pid 5434] mkdir("./file1", 000) = 0 [pid 5434] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = 0 [pid 5433] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] <... futex resumed>) = 1 [pid 5434] mkdir("./bus", 000) = 0 [pid 5434] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = 0 [pid 5433] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] <... futex resumed>) = 1 [ 64.773754][ T5434] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.790171][ T5434] REISERFS (device loop0): checking transaction log (loop0) [ 64.798288][ T5434] REISERFS (device loop0): Using r5 hash to sort names [ 64.805463][ T5434] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 64.818176][ T5434] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5434] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5434] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... futex resumed>) = 0 [pid 5433] exit_group(0) = ? [pid 5434] <... futex resumed>) = ? [pid 5434] +++ exited with 0 +++ [pid 5433] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5433, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./119/binderfs") = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./119/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./119") = 0 mkdir("./120", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5436 attached , child_tidptr=0x5555559356d0) = 5436 [pid 5436] set_robust_list(0x5555559356e0, 24) = 0 [pid 5436] chdir("./120") = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5436] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5436] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5437], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5437 ./strace-static-x86_64: Process 5437 attached [pid 5437] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5437] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5437] <... futex resumed>) = 0 [pid 5437] memfd_create("syzkaller", 0) = 3 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 64.832307][ T5434] overlayfs: upper fs needs to support d_type. [ 64.838848][ T5434] overlayfs: upper fs does not support tmpfile. [ 64.845849][ T5434] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.853729][ T5434] overlayfs: failed to resolve './file0': -2 [pid 5436] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5437] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5437] close(3) = 0 [pid 5437] mkdir("./file0", 0777) = 0 [ 64.937564][ T5437] loop0: detected capacity change from 0 to 8192 [ 64.946952][ T5437] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.960028][ T5437] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.969232][ T5437] REISERFS (device loop0): using ordered data mode [ 64.976323][ T5437] reiserfs: using flush barriers [pid 5437] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5437] chdir("./file0") = 0 [pid 5437] ioctl(4, LOOP_CLR_FD) = 0 [pid 5437] close(4) = 0 [pid 5437] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... futex resumed>) = 1 [pid 5437] mkdir("./file1", 000) = 0 [pid 5437] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5436] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] mkdir("./bus", 000 [pid 5436] <... futex resumed>) = 0 [pid 5437] <... mkdir resumed>) = 0 [pid 5437] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5436] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5436] <... futex resumed>) = 0 [ 64.982063][ T5437] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.998428][ T5437] REISERFS (device loop0): checking transaction log (loop0) [ 65.006490][ T5437] REISERFS (device loop0): Using r5 hash to sort names [ 65.013480][ T5437] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 65.026172][ T5437] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5436] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5437] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5437] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] exit_group(0 [pid 5437] <... futex resumed>) = ? [pid 5436] <... exit_group resumed>) = ? [pid 5437] +++ exited with 0 +++ [pid 5436] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./120/binderfs") = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./120/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./120") = 0 mkdir("./121", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5439 ./strace-static-x86_64: Process 5439 attached [pid 5439] set_robust_list(0x5555559356e0, 24) = 0 [pid 5439] chdir("./121") = 0 [pid 5439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5439] setpgid(0, 0) = 0 [pid 5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5439] write(3, "1000", 4) = 4 [pid 5439] close(3) = 0 [pid 5439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5439] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5439] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5439] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5440 attached , parent_tid=[5440], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5440 [pid 5440] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5440] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5440] <... futex resumed>) = 0 [pid 5440] memfd_create("syzkaller", 0 [pid 5439] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5440] <... memfd_create resumed>) = 3 [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 65.048423][ T5437] overlayfs: upper fs needs to support d_type. [ 65.054771][ T5437] overlayfs: upper fs does not support tmpfile. [ 65.061266][ T5437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.069368][ T5437] overlayfs: failed to resolve './file0': -2 [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5440] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5440] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5440] close(3) = 0 [pid 5440] mkdir("./file0", 0777) = 0 [ 65.152372][ T5440] loop0: detected capacity change from 0 to 8192 [ 65.161619][ T5440] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.174773][ T5440] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 65.184043][ T5440] REISERFS (device loop0): using ordered data mode [ 65.190605][ T5440] reiserfs: using flush barriers [pid 5440] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5440] chdir("./file0") = 0 [pid 5440] ioctl(4, LOOP_CLR_FD) = 0 [pid 5440] close(4) = 0 [pid 5440] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5439] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] <... futex resumed>) = 1 [pid 5440] mkdir("./file1", 000) = 0 [pid 5440] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5439] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] <... futex resumed>) = 1 [pid 5440] mkdir("./bus", 000) = 0 [pid 5440] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5439] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5439] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] <... futex resumed>) = 1 [ 65.196123][ T5440] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.212481][ T5440] REISERFS (device loop0): checking transaction log (loop0) [ 65.220503][ T5440] REISERFS (device loop0): Using r5 hash to sort names [ 65.227546][ T5440] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 65.240256][ T5440] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5440] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5440] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = 0 [pid 5440] <... futex resumed>) = 1 [pid 5439] exit_group(0 [pid 5440] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] <... exit_group resumed>) = ? [pid 5440] <... futex resumed>) = ? [pid 5440] +++ exited with 0 +++ [pid 5439] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5439, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./121/binderfs") = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./121/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./121") = 0 mkdir("./122", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5442 ./strace-static-x86_64: Process 5442 attached [pid 5442] set_robust_list(0x5555559356e0, 24) = 0 [pid 5442] chdir("./122") = 0 [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5442] setpgid(0, 0) = 0 [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5442] write(3, "1000", 4) = 4 [pid 5442] close(3) = 0 [pid 5442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5442] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5442] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5442] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5443], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5443 [pid 5442] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5442] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5443 attached [pid 5443] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5443] memfd_create("syzkaller", 0) = 3 [pid 5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 65.255529][ T5440] overlayfs: upper fs needs to support d_type. [ 65.261811][ T5440] overlayfs: upper fs does not support tmpfile. [ 65.268517][ T5440] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.276380][ T5440] overlayfs: failed to resolve './file0': -2 [pid 5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5443] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5443] close(3) = 0 [pid 5443] mkdir("./file0", 0777) = 0 [ 65.359224][ T5443] loop0: detected capacity change from 0 to 8192 [ 65.367907][ T5443] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.381029][ T5443] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 65.390285][ T5443] REISERFS (device loop0): using ordered data mode [ 65.396840][ T5443] reiserfs: using flush barriers [pid 5443] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5443] chdir("./file0") = 0 [pid 5443] ioctl(4, LOOP_CLR_FD) = 0 [pid 5443] close(4) = 0 [pid 5443] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] <... futex resumed>) = 0 [pid 5443] mkdir("./file1", 000 [pid 5442] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] <... mkdir resumed>) = 0 [pid 5443] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = 0 [pid 5442] <... futex resumed>) = 1 [pid 5443] mkdir("./bus", 000 [pid 5442] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] <... mkdir resumed>) = 0 [pid 5443] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] <... futex resumed>) = 0 [pid 5443] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 65.402415][ T5443] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.418917][ T5443] REISERFS (device loop0): checking transaction log (loop0) [ 65.426991][ T5443] REISERFS (device loop0): Using r5 hash to sort names [ 65.433986][ T5443] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 65.446740][ T5443] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5442] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5443] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] <... futex resumed>) = 0 [pid 5442] exit_group(0) = ? [pid 5443] <... futex resumed>) = ? [pid 5443] +++ exited with 0 +++ [pid 5442] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5442, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./122/binderfs") = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./122/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./122") = 0 mkdir("./123", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5445 attached , child_tidptr=0x5555559356d0) = 5445 [pid 5445] set_robust_list(0x5555559356e0, 24) = 0 [pid 5445] chdir("./123") = 0 [pid 5445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5445] setpgid(0, 0) = 0 [pid 5445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5445] write(3, "1000", 4) = 4 [pid 5445] close(3) = 0 [pid 5445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5445] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5445] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5445] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5446 attached , parent_tid=[5446], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5446 [pid 5446] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5446] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5446] <... futex resumed>) = 0 [pid 5445] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5446] memfd_create("syzkaller", 0) = 3 [pid 5446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 65.470130][ T5443] overlayfs: upper fs needs to support d_type. [ 65.476543][ T5443] overlayfs: upper fs does not support tmpfile. [ 65.483054][ T5443] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.491206][ T5443] overlayfs: failed to resolve './file0': -2 [pid 5446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5446] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5446] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5446] close(3) = 0 [pid 5446] mkdir("./file0", 0777) = 0 [ 65.575266][ T5446] loop0: detected capacity change from 0 to 8192 [ 65.584038][ T5446] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.597402][ T5446] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 65.606999][ T5446] REISERFS (device loop0): using ordered data mode [ 65.613544][ T5446] reiserfs: using flush barriers [pid 5446] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5446] chdir("./file0") = 0 [pid 5446] ioctl(4, LOOP_CLR_FD) = 0 [pid 5446] close(4) = 0 [pid 5446] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5446] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] <... futex resumed>) = 0 [pid 5445] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... futex resumed>) = 0 [pid 5445] <... futex resumed>) = 1 [pid 5446] mkdir("./file1", 000 [pid 5445] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5446] <... mkdir resumed>) = 0 [pid 5446] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5446] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] <... futex resumed>) = 0 [pid 5446] mkdir("./bus", 000 [pid 5445] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5446] <... mkdir resumed>) = 0 [pid 5446] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5445] <... futex resumed>) = 0 [pid 5446] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5445] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.619385][ T5446] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.635642][ T5446] REISERFS (device loop0): checking transaction log (loop0) [ 65.643657][ T5446] REISERFS (device loop0): Using r5 hash to sort names [ 65.650765][ T5446] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 65.663728][ T5446] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5445] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5446] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5446] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5445] exit_group(0) = ? [pid 5446] <... futex resumed>) = ? [pid 5446] +++ exited with 0 +++ [pid 5445] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5445, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./123/binderfs") = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./123/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./123") = 0 mkdir("./124", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5448 ./strace-static-x86_64: Process 5448 attached [pid 5448] set_robust_list(0x5555559356e0, 24) = 0 [pid 5448] chdir("./124") = 0 [pid 5448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5448] setpgid(0, 0) = 0 [pid 5448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5448] write(3, "1000", 4) = 4 [pid 5448] close(3) = 0 [pid 5448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5448] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5448] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5448] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5449 attached , parent_tid=[5449], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5449 [pid 5449] set_robust_list(0x7f8d103ee9e0, 24 [pid 5448] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... set_robust_list resumed>) = 0 [pid 5449] memfd_create("syzkaller", 0 [pid 5448] <... futex resumed>) = 0 [pid 5449] <... memfd_create resumed>) = 3 [pid 5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 65.692626][ T5446] overlayfs: upper fs needs to support d_type. [ 65.699132][ T5446] overlayfs: upper fs does not support tmpfile. [ 65.705945][ T5446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.713552][ T5446] overlayfs: failed to resolve './file0': -2 [pid 5448] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5449] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5449] close(3) = 0 [pid 5449] mkdir("./file0", 0777) = 0 [ 65.815593][ T5449] loop0: detected capacity change from 0 to 8192 [ 65.826091][ T5449] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.839126][ T5449] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 65.849248][ T5449] REISERFS (device loop0): using ordered data mode [ 65.856217][ T5449] reiserfs: using flush barriers [ 65.862077][ T5449] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.879481][ T5449] REISERFS (device loop0): checking transaction log (loop0) [ 65.887691][ T5449] REISERFS (device loop0): Using r5 hash to sort names [ 65.894966][ T5449] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [pid 5449] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5449] chdir("./file0") = 0 [pid 5449] ioctl(4, LOOP_CLR_FD) = 0 [pid 5449] close(4) = 0 [pid 5449] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5449] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] <... futex resumed>) = 0 [pid 5448] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... futex resumed>) = 0 [pid 5448] <... futex resumed>) = 1 [pid 5449] mkdir("./file1", 000 [pid 5448] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... mkdir resumed>) = 0 [pid 5449] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5448] <... futex resumed>) = 0 [pid 5449] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5448] <... futex resumed>) = 0 [pid 5449] mkdir("./bus", 000 [pid 5448] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... mkdir resumed>) = 0 [pid 5449] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5448] <... futex resumed>) = 0 [pid 5449] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5448] <... futex resumed>) = 0 [pid 5449] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5448] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5449] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = 0 [pid 5448] exit_group(0 [pid 5449] <... futex resumed>) = ? [pid 5448] <... exit_group resumed>) = ? [pid 5449] +++ exited with 0 +++ [pid 5448] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5448, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./124/binderfs") = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./124/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./124") = 0 mkdir("./125", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5451 attached , child_tidptr=0x5555559356d0) = 5451 [pid 5451] set_robust_list(0x5555559356e0, 24) = 0 [ 65.907650][ T5449] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 65.927358][ T5449] overlayfs: upper fs needs to support d_type. [ 65.933772][ T5449] overlayfs: upper fs does not support tmpfile. [ 65.940463][ T5449] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.948637][ T5449] overlayfs: failed to resolve './file0': -2 [pid 5451] chdir("./125") = 0 [pid 5451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5451] setpgid(0, 0) = 0 [pid 5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5451] write(3, "1000", 4) = 4 [pid 5451] close(3) = 0 [pid 5451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5451] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5451] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5451] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5452 attached , parent_tid=[5452], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5452 [pid 5452] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5452] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5451] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5451] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5452] memfd_create("syzkaller", 0) = 3 [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5452] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5452] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5452] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5452] close(3) = 0 [pid 5452] mkdir("./file0", 0777) = 0 [ 66.033288][ T5452] loop0: detected capacity change from 0 to 8192 [ 66.042838][ T5452] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.055969][ T5452] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.065294][ T5452] REISERFS (device loop0): using ordered data mode [ 66.071821][ T5452] reiserfs: using flush barriers [pid 5452] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5452] chdir("./file0") = 0 [pid 5452] ioctl(4, LOOP_CLR_FD) = 0 [pid 5452] close(4) = 0 [pid 5452] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 1 [pid 5452] mkdir("./file1", 000) = 0 [pid 5452] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 1 [pid 5452] mkdir("./bus", 000) = 0 [pid 5452] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 1 [ 66.077817][ T5452] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.094172][ T5452] REISERFS (device loop0): checking transaction log (loop0) [ 66.102466][ T5452] REISERFS (device loop0): Using r5 hash to sort names [ 66.109545][ T5452] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 66.122289][ T5452] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5452] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5452] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5451] <... futex resumed>) = 0 [pid 5451] exit_group(0) = ? [pid 5452] +++ exited with 0 +++ [pid 5451] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./125/binderfs") = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./125/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./125") = 0 mkdir("./126", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5454 ./strace-static-x86_64: Process 5454 attached [pid 5454] set_robust_list(0x5555559356e0, 24) = 0 [pid 5454] chdir("./126") = 0 [pid 5454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5454] setpgid(0, 0) = 0 [pid 5454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5454] write(3, "1000", 4) = 4 [pid 5454] close(3) = 0 [pid 5454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5454] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5454] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 66.149009][ T5452] overlayfs: upper fs needs to support d_type. [ 66.155447][ T5452] overlayfs: upper fs does not support tmpfile. [ 66.162245][ T5452] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.169968][ T5452] overlayfs: failed to resolve './file0': -2 [pid 5454] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5455 attached , parent_tid=[5455], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5455 [pid 5455] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5455] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5454] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5454] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5455] <... futex resumed>) = 0 [pid 5455] memfd_create("syzkaller", 0) = 3 [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5455] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5455] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5455] close(3) = 0 [pid 5455] mkdir("./file0", 0777) = 0 [ 66.276301][ T5455] loop0: detected capacity change from 0 to 8192 [ 66.285799][ T5455] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.299142][ T5455] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.308620][ T5455] REISERFS (device loop0): using ordered data mode [ 66.315309][ T5455] reiserfs: using flush barriers [pid 5455] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5455] chdir("./file0") = 0 [pid 5455] ioctl(4, LOOP_CLR_FD) = 0 [pid 5455] close(4) = 0 [pid 5455] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5455] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5454] <... futex resumed>) = 0 [pid 5454] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = 0 [pid 5454] <... futex resumed>) = 1 [pid 5455] mkdir("./file1", 000 [pid 5454] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... mkdir resumed>) = 0 [pid 5455] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5454] <... futex resumed>) = 0 [pid 5455] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5454] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5454] <... futex resumed>) = 0 [pid 5455] mkdir("./bus", 000 [pid 5454] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... mkdir resumed>) = 0 [pid 5455] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5454] <... futex resumed>) = 0 [pid 5455] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5454] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.321001][ T5455] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.337435][ T5455] REISERFS (device loop0): checking transaction log (loop0) [ 66.345481][ T5455] REISERFS (device loop0): Using r5 hash to sort names [ 66.352493][ T5455] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 66.365270][ T5455] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5454] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5455] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 0 [pid 5454] exit_group(0) = ? [pid 5455] <... futex resumed>) = ? [pid 5455] +++ exited with 0 +++ [pid 5454] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5454, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./126/binderfs") = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./126/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./126") = 0 mkdir("./127", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5457 attached , child_tidptr=0x5555559356d0) = 5457 [pid 5457] set_robust_list(0x5555559356e0, 24) = 0 [pid 5457] chdir("./127") = 0 [pid 5457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5457] setpgid(0, 0) = 0 [pid 5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5457] write(3, "1000", 4) = 4 [pid 5457] close(3) = 0 [pid 5457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5457] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5457] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5457] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5458 attached [pid 5458] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5458] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] <... clone resumed>, parent_tid=[5458], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5458 [pid 5457] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5457] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5458] memfd_create("syzkaller", 0) = 3 [pid 5458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 66.389144][ T5455] overlayfs: upper fs needs to support d_type. [ 66.395490][ T5455] overlayfs: upper fs does not support tmpfile. [ 66.402301][ T5455] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.410538][ T5455] overlayfs: failed to resolve './file0': -2 [pid 5458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5458] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5458] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5458] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5458] close(3) = 0 [pid 5458] mkdir("./file0", 0777) = 0 [ 66.494526][ T5458] loop0: detected capacity change from 0 to 8192 [ 66.503759][ T5458] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.516812][ T5458] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.526141][ T5458] REISERFS (device loop0): using ordered data mode [ 66.532673][ T5458] reiserfs: using flush barriers [pid 5458] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5458] chdir("./file0") = 0 [pid 5458] ioctl(4, LOOP_CLR_FD) = 0 [pid 5458] close(4) = 0 [pid 5458] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5458] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5458] mkdir("./file1", 000 [pid 5457] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5458] <... mkdir resumed>) = 0 [pid 5458] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5458] mkdir("./bus", 000 [pid 5457] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... mkdir resumed>) = 0 [pid 5457] <... futex resumed>) = 0 [pid 5458] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5458] <... futex resumed>) = 0 [pid 5457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5458] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5457] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.538395][ T5458] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.554675][ T5458] REISERFS (device loop0): checking transaction log (loop0) [ 66.562881][ T5458] REISERFS (device loop0): Using r5 hash to sort names [ 66.569925][ T5458] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 66.583399][ T5458] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5457] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5458] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5458] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... futex resumed>) = 0 [pid 5457] exit_group(0) = ? [pid 5458] <... futex resumed>) = ? [pid 5458] +++ exited with 0 +++ [pid 5457] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./127/binderfs") = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./127/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./127") = 0 mkdir("./128", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5460 ./strace-static-x86_64: Process 5460 attached [pid 5460] set_robust_list(0x5555559356e0, 24) = 0 [pid 5460] chdir("./128") = 0 [pid 5460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5460] setpgid(0, 0) = 0 [pid 5460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5460] write(3, "1000", 4) = 4 [pid 5460] close(3) = 0 [pid 5460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5460] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5460] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5460] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5461 attached , parent_tid=[5461], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5461 [pid 5461] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5461] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5460] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5461] <... futex resumed>) = 0 [pid 5461] memfd_create("syzkaller", 0 [ 66.603733][ T5458] overlayfs: upper fs needs to support d_type. [ 66.610496][ T5458] overlayfs: upper fs does not support tmpfile. [ 66.617406][ T5458] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.625739][ T5458] overlayfs: failed to resolve './file0': -2 [pid 5460] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5461] <... memfd_create resumed>) = 3 [pid 5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5461] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5461] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5461] close(3) = 0 [pid 5461] mkdir("./file0", 0777) = 0 [ 66.713118][ T5461] loop0: detected capacity change from 0 to 8192 [ 66.722453][ T5461] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.735635][ T5461] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.745068][ T5461] REISERFS (device loop0): using ordered data mode [ 66.751583][ T5461] reiserfs: using flush barriers [pid 5461] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5461] chdir("./file0") = 0 [pid 5461] ioctl(4, LOOP_CLR_FD) = 0 [pid 5461] close(4) = 0 [pid 5461] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5461] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5460] <... futex resumed>) = 0 [pid 5460] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] <... futex resumed>) = 0 [pid 5460] <... futex resumed>) = 1 [pid 5461] mkdir("./file1", 000 [pid 5460] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... mkdir resumed>) = 0 [pid 5461] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5460] <... futex resumed>) = 0 [pid 5461] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5460] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5460] <... futex resumed>) = 0 [pid 5461] mkdir("./bus", 000 [pid 5460] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... mkdir resumed>) = 0 [pid 5461] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5460] <... futex resumed>) = 0 [pid 5461] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5460] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5460] <... futex resumed>) = 0 [ 66.757488][ T5461] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.773763][ T5461] REISERFS (device loop0): checking transaction log (loop0) [ 66.782066][ T5461] REISERFS (device loop0): Using r5 hash to sort names [ 66.789106][ T5461] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 66.801959][ T5461] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5460] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5461] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] <... futex resumed>) = 0 [pid 5460] exit_group(0) = ? [pid 5461] <... futex resumed>) = ? [pid 5461] +++ exited with 0 +++ [pid 5460] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5460, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./128/binderfs") = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./128/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./128") = 0 mkdir("./129", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5463 attached , child_tidptr=0x5555559356d0) = 5463 [pid 5463] set_robust_list(0x5555559356e0, 24) = 0 [pid 5463] chdir("./129") = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5463] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5463] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5464 attached [pid 5464] set_robust_list(0x7f8d103ee9e0, 24) = 0 [ 66.829223][ T5461] overlayfs: upper fs needs to support d_type. [ 66.835555][ T5461] overlayfs: upper fs does not support tmpfile. [ 66.842384][ T5461] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.850079][ T5461] overlayfs: failed to resolve './file0': -2 [pid 5464] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... clone resumed>, parent_tid=[5464], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5464 [pid 5463] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5464] <... futex resumed>) = 0 [pid 5463] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5464] memfd_create("syzkaller", 0) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5464] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5464] close(3) = 0 [pid 5464] mkdir("./file0", 0777) = 0 [ 66.937637][ T5464] loop0: detected capacity change from 0 to 8192 [ 66.946355][ T5464] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.960156][ T5464] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.969474][ T5464] REISERFS (device loop0): using ordered data mode [ 66.976098][ T5464] reiserfs: using flush barriers [pid 5464] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5464] chdir("./file0") = 0 [pid 5464] ioctl(4, LOOP_CLR_FD) = 0 [pid 5464] close(4) = 0 [pid 5464] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... futex resumed>) = 1 [pid 5464] mkdir("./file1", 000) = 0 [pid 5464] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... futex resumed>) = 1 [pid 5464] mkdir("./bus", 000) = 0 [pid 5464] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5464] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... futex resumed>) = 0 [ 66.982622][ T5464] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.999102][ T5464] REISERFS (device loop0): checking transaction log (loop0) [ 67.007400][ T5464] REISERFS (device loop0): Using r5 hash to sort names [ 67.014703][ T5464] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 67.027415][ T5464] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5464] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5464] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5463] exit_group(0) = ? [pid 5464] +++ exited with 0 +++ [pid 5463] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./129/binderfs") = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./129/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./129") = 0 mkdir("./130", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5466 attached , child_tidptr=0x5555559356d0) = 5466 [pid 5466] set_robust_list(0x5555559356e0, 24) = 0 [pid 5466] chdir("./130") = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5466] setpgid(0, 0) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5466] write(3, "1000", 4) = 4 [pid 5466] close(3) = 0 [pid 5466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5466] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5466] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5466] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5467 attached , parent_tid=[5467], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5467 [pid 5467] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5467] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5467] <... futex resumed>) = 0 [pid 5467] memfd_create("syzkaller", 0 [ 67.049439][ T5464] overlayfs: upper fs needs to support d_type. [ 67.055775][ T5464] overlayfs: upper fs does not support tmpfile. [ 67.062347][ T5464] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.070598][ T5464] overlayfs: failed to resolve './file0': -2 [pid 5466] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5467] <... memfd_create resumed>) = 3 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5467] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5467] close(3) = 0 [pid 5467] mkdir("./file0", 0777) = 0 [ 67.155188][ T5467] loop0: detected capacity change from 0 to 8192 [ 67.163851][ T5467] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.176940][ T5467] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 67.186169][ T5467] REISERFS (device loop0): using ordered data mode [ 67.192694][ T5467] reiserfs: using flush barriers [pid 5467] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5467] chdir("./file0") = 0 [pid 5467] ioctl(4, LOOP_CLR_FD) = 0 [pid 5467] close(4) = 0 [pid 5467] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] <... futex resumed>) = 0 [pid 5467] mkdir("./file1", 000 [pid 5466] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... mkdir resumed>) = 0 [pid 5466] <... futex resumed>) = 0 [pid 5466] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] <... futex resumed>) = 0 [pid 5467] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5466] <... futex resumed>) = 0 [pid 5467] mkdir("./bus", 000 [pid 5466] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... mkdir resumed>) = 0 [pid 5467] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] <... futex resumed>) = 0 [pid 5467] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5466] <... futex resumed>) = 0 [pid 5467] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 67.198580][ T5467] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.215088][ T5467] REISERFS (device loop0): checking transaction log (loop0) [ 67.223106][ T5467] REISERFS (device loop0): Using r5 hash to sort names [ 67.230149][ T5467] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 67.242835][ T5467] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5466] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5467] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] <... futex resumed>) = 0 [pid 5467] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] exit_group(0 [pid 5467] <... futex resumed>) = ? [pid 5466] <... exit_group resumed>) = ? [pid 5467] +++ exited with 0 +++ [pid 5466] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./130/binderfs") = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./130/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./130") = 0 mkdir("./131", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5469 attached , child_tidptr=0x5555559356d0) = 5469 [pid 5469] set_robust_list(0x5555559356e0, 24) = 0 [pid 5469] chdir("./131") = 0 [pid 5469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5469] setpgid(0, 0) = 0 [pid 5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5469] write(3, "1000", 4) = 4 [pid 5469] close(3) = 0 [pid 5469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5469] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5469] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5469] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5470 attached , parent_tid=[5470], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5470 [pid 5470] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5470] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5470] memfd_create("syzkaller", 0 [pid 5469] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5470] <... memfd_create resumed>) = 3 [pid 5470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 67.275629][ T5467] overlayfs: upper fs needs to support d_type. [ 67.281856][ T5467] overlayfs: upper fs does not support tmpfile. [ 67.288877][ T5467] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.296588][ T5467] overlayfs: failed to resolve './file0': -2 [pid 5470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5470] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5470] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5470] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5470] close(3) = 0 [pid 5470] mkdir("./file0", 0777) = 0 [ 67.378310][ T5470] loop0: detected capacity change from 0 to 8192 [ 67.387340][ T5470] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.400546][ T5470] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 67.409750][ T5470] REISERFS (device loop0): using ordered data mode [ 67.416332][ T5470] reiserfs: using flush barriers [pid 5470] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5470] chdir("./file0") = 0 [pid 5470] ioctl(4, LOOP_CLR_FD) = 0 [pid 5470] close(4) = 0 [pid 5470] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5469] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] <... futex resumed>) = 0 [pid 5470] mkdir("./file1", 000) = 0 [pid 5470] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] <... futex resumed>) = 1 [pid 5470] mkdir("./bus", 000) = 0 [pid 5470] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] <... futex resumed>) = 1 [ 67.421907][ T5470] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.438393][ T5470] REISERFS (device loop0): checking transaction log (loop0) [ 67.446450][ T5470] REISERFS (device loop0): Using r5 hash to sort names [ 67.453474][ T5470] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 67.466374][ T5470] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5470] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5470] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 0 [pid 5469] exit_group(0) = ? [pid 5470] <... futex resumed>) = ? [pid 5470] +++ exited with 0 +++ [pid 5469] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./131/binderfs") = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./131/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./131") = 0 mkdir("./132", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5472 attached , child_tidptr=0x5555559356d0) = 5472 [pid 5472] set_robust_list(0x5555559356e0, 24) = 0 [pid 5472] chdir("./132") = 0 [pid 5472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5472] setpgid(0, 0) = 0 [pid 5472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5472] write(3, "1000", 4) = 4 [pid 5472] close(3) = 0 [pid 5472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5472] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5472] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5472] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5473 attached , parent_tid=[5473], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5473 [pid 5473] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5473] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5472] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] <... futex resumed>) = 0 [pid 5472] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5473] memfd_create("syzkaller", 0) = 3 [pid 5473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 67.487202][ T5470] overlayfs: upper fs needs to support d_type. [ 67.493440][ T5470] overlayfs: upper fs does not support tmpfile. [ 67.500424][ T5470] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.508381][ T5470] overlayfs: failed to resolve './file0': -2 [pid 5473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5473] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5473] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5473] close(3) = 0 [pid 5473] mkdir("./file0", 0777) = 0 [ 67.594053][ T5473] loop0: detected capacity change from 0 to 8192 [ 67.604268][ T5473] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.617466][ T5473] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 67.626957][ T5473] REISERFS (device loop0): using ordered data mode [ 67.633492][ T5473] reiserfs: using flush barriers [pid 5473] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5473] chdir("./file0") = 0 [pid 5473] ioctl(4, LOOP_CLR_FD) = 0 [pid 5473] close(4) = 0 [pid 5473] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5472] <... futex resumed>) = 0 [pid 5473] mkdir("./file1", 000 [pid 5472] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... mkdir resumed>) = 0 [pid 5472] <... futex resumed>) = 0 [pid 5473] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] <... futex resumed>) = 0 [pid 5472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5473] mkdir("./bus", 000 [pid 5472] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... mkdir resumed>) = 0 [pid 5472] <... futex resumed>) = 0 [pid 5473] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] <... futex resumed>) = 0 [pid 5472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5473] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5472] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 67.639328][ T5473] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.655669][ T5473] REISERFS (device loop0): checking transaction log (loop0) [ 67.663693][ T5473] REISERFS (device loop0): Using r5 hash to sort names [ 67.670759][ T5473] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 67.683490][ T5473] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5472] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5473] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] <... futex resumed>) = 0 [pid 5472] exit_group(0) = ? [pid 5473] <... futex resumed>) = ? [pid 5473] +++ exited with 0 +++ [pid 5472] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5472, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./132/binderfs") = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./132/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./132") = 0 mkdir("./133", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5475 ./strace-static-x86_64: Process 5475 attached [pid 5475] set_robust_list(0x5555559356e0, 24) = 0 [pid 5475] chdir("./133") = 0 [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5475] setpgid(0, 0) = 0 [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5475] write(3, "1000", 4) = 4 [pid 5475] close(3) = 0 [pid 5475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5475] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5475] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5475] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5476 attached [pid 5476] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5476] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] <... clone resumed>, parent_tid=[5476], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5476 [pid 5475] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5476] <... futex resumed>) = 0 [pid 5475] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5476] memfd_create("syzkaller", 0) = 3 [pid 5476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 67.702601][ T5473] overlayfs: upper fs needs to support d_type. [ 67.709061][ T5473] overlayfs: upper fs does not support tmpfile. [ 67.716307][ T5473] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.723930][ T5473] overlayfs: failed to resolve './file0': -2 [pid 5476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5476] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5476] close(3) = 0 [pid 5476] mkdir("./file0", 0777) = 0 [ 67.802557][ T5476] loop0: detected capacity change from 0 to 8192 [ 67.811554][ T5476] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.824683][ T5476] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 67.833892][ T5476] REISERFS (device loop0): using ordered data mode [ 67.840574][ T5476] reiserfs: using flush barriers [pid 5476] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5476] chdir("./file0") = 0 [pid 5476] ioctl(4, LOOP_CLR_FD) = 0 [pid 5476] close(4) = 0 [pid 5476] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] <... futex resumed>) = 1 [pid 5476] mkdir("./file1", 000) = 0 [pid 5476] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] <... futex resumed>) = 1 [pid 5476] mkdir("./bus", 000) = 0 [pid 5476] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] <... futex resumed>) = 1 [ 67.846481][ T5476] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.862791][ T5476] REISERFS (device loop0): checking transaction log (loop0) [ 67.871413][ T5476] REISERFS (device loop0): Using r5 hash to sort names [ 67.878424][ T5476] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 67.891212][ T5476] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5476] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5476] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = 0 [pid 5475] exit_group(0) = ? [pid 5476] <... futex resumed>) = ? [pid 5476] +++ exited with 0 +++ [pid 5475] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./133/binderfs") = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./133/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./133") = 0 mkdir("./134", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5478 attached , child_tidptr=0x5555559356d0) = 5478 [pid 5478] set_robust_list(0x5555559356e0, 24) = 0 [pid 5478] chdir("./134") = 0 [pid 5478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5478] setpgid(0, 0) = 0 [pid 5478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5478] write(3, "1000", 4) = 4 [pid 5478] close(3) = 0 [pid 5478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5478] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5478] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5478] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5479 attached [pid 5479] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5479] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5478] <... clone resumed>, parent_tid=[5479], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5479 [pid 5478] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5479] memfd_create("syzkaller", 0 [pid 5478] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5479] <... memfd_create resumed>) = 3 [pid 5479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 67.918643][ T5476] overlayfs: upper fs needs to support d_type. [ 67.925061][ T5476] overlayfs: upper fs does not support tmpfile. [ 67.931656][ T5476] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.939569][ T5476] overlayfs: failed to resolve './file0': -2 [pid 5479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5479] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5479] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5479] close(3) = 0 [pid 5479] mkdir("./file0", 0777) = 0 [ 68.020566][ T5479] loop0: detected capacity change from 0 to 8192 [ 68.029946][ T5479] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.043019][ T5479] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 68.052300][ T5479] REISERFS (device loop0): using ordered data mode [ 68.058898][ T5479] reiserfs: using flush barriers [pid 5479] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5479] chdir("./file0") = 0 [pid 5479] ioctl(4, LOOP_CLR_FD) = 0 [pid 5479] close(4) = 0 [pid 5479] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5479] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5478] <... futex resumed>) = 0 [pid 5478] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5478] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] mkdir("./file1", 000) = 0 [pid 5479] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5478] <... futex resumed>) = 0 [pid 5479] mkdir("./bus", 000 [pid 5478] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... mkdir resumed>) = 0 [pid 5478] <... futex resumed>) = 0 [pid 5479] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5478] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] <... futex resumed>) = 0 [pid 5478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5479] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 68.064577][ T5479] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.081005][ T5479] REISERFS (device loop0): checking transaction log (loop0) [ 68.089286][ T5479] REISERFS (device loop0): Using r5 hash to sort names [ 68.096307][ T5479] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 68.109030][ T5479] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5478] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5478] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5479] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5478] <... futex resumed>) = 0 [pid 5478] exit_group(0) = ? [pid 5479] <... futex resumed>) = ? [pid 5479] +++ exited with 0 +++ [pid 5478] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5478, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./134/binderfs") = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./134/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./134") = 0 mkdir("./135", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5481 ./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x5555559356e0, 24) = 0 [pid 5481] chdir("./135") = 0 [pid 5481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5481] setpgid(0, 0) = 0 [pid 5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5481] write(3, "1000", 4) = 4 [pid 5481] close(3) = 0 [pid 5481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5481] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5481] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5482 attached , parent_tid=[5482], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5482 [pid 5482] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5482] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5481] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5482] memfd_create("syzkaller", 0) = 3 [pid 5482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 68.128889][ T5479] overlayfs: upper fs needs to support d_type. [ 68.135237][ T5479] overlayfs: upper fs does not support tmpfile. [ 68.142252][ T5479] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.150283][ T5479] overlayfs: failed to resolve './file0': -2 [pid 5482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5482] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5482] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5482] close(3) = 0 [pid 5482] mkdir("./file0", 0777) = 0 [ 68.234122][ T5482] loop0: detected capacity change from 0 to 8192 [ 68.242924][ T5482] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.256309][ T5482] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 68.265612][ T5482] REISERFS (device loop0): using ordered data mode [ 68.272169][ T5482] reiserfs: using flush barriers [pid 5482] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5482] chdir("./file0") = 0 [pid 5482] ioctl(4, LOOP_CLR_FD) = 0 [pid 5482] close(4) = 0 [pid 5482] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5481] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... futex resumed>) = 1 [pid 5482] mkdir("./file1", 000) = 0 [pid 5482] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5481] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... futex resumed>) = 1 [pid 5482] mkdir("./bus", 000) = 0 [pid 5482] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5481] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... futex resumed>) = 1 [ 68.277901][ T5482] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.294366][ T5482] REISERFS (device loop0): checking transaction log (loop0) [ 68.302456][ T5482] REISERFS (device loop0): Using r5 hash to sort names [ 68.309501][ T5482] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 68.322211][ T5482] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5482] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5482] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] <... futex resumed>) = 0 [pid 5482] <... futex resumed>) = 1 [pid 5481] exit_group(0) = ? [pid 5482] +++ exited with 0 +++ [pid 5481] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5481, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./135/binderfs") = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./135/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./135") = 0 mkdir("./136", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5484 attached , child_tidptr=0x5555559356d0) = 5484 [pid 5484] set_robust_list(0x5555559356e0, 24) = 0 [pid 5484] chdir("./136") = 0 [pid 5484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5484] setpgid(0, 0) = 0 [pid 5484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5484] write(3, "1000", 4) = 4 [pid 5484] close(3) = 0 [pid 5484] symlink("/dev/binderfs", "./binderfs") = 0 [ 68.336697][ T5482] overlayfs: upper fs needs to support d_type. [ 68.343239][ T5482] overlayfs: upper fs does not support tmpfile. [ 68.350134][ T5482] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.357708][ T5482] overlayfs: failed to resolve './file0': -2 [pid 5484] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5484] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5484] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5485 attached , parent_tid=[5485], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5485 [pid 5485] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5485] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5484] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5485] memfd_create("syzkaller", 0 [pid 5484] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5485] <... memfd_create resumed>) = 3 [pid 5485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5485] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5485] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5485] close(3) = 0 [pid 5485] mkdir("./file0", 0777) = 0 [ 68.447609][ T5485] loop0: detected capacity change from 0 to 8192 [ 68.456753][ T5485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.469845][ T5485] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 68.479125][ T5485] REISERFS (device loop0): using ordered data mode [ 68.485671][ T5485] reiserfs: using flush barriers [pid 5485] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5485] chdir("./file0") = 0 [pid 5485] ioctl(4, LOOP_CLR_FD) = 0 [pid 5485] close(4) = 0 [pid 5485] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5484] <... futex resumed>) = 0 [pid 5484] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... futex resumed>) = 0 [pid 5484] <... futex resumed>) = 1 [pid 5485] mkdir("./file1", 000 [pid 5484] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5485] <... mkdir resumed>) = 0 [pid 5485] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5484] <... futex resumed>) = 0 [pid 5485] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5484] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5484] <... futex resumed>) = 0 [pid 5485] mkdir("./bus", 000 [pid 5484] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5485] <... mkdir resumed>) = 0 [pid 5485] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5484] <... futex resumed>) = 0 [pid 5485] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5484] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5484] <... futex resumed>) = 0 [pid 5485] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 68.491235][ T5485] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.507595][ T5485] REISERFS (device loop0): checking transaction log (loop0) [ 68.515567][ T5485] REISERFS (device loop0): Using r5 hash to sort names [ 68.522532][ T5485] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 68.535264][ T5485] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5484] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5485] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5485] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = 0 [pid 5485] <... futex resumed>) = 1 [pid 5484] exit_group(0) = ? [pid 5485] +++ exited with 0 +++ [pid 5484] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5484, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./136/binderfs") = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./136/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./136") = 0 mkdir("./137", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5487 ./strace-static-x86_64: Process 5487 attached [pid 5487] set_robust_list(0x5555559356e0, 24) = 0 [pid 5487] chdir("./137") = 0 [pid 5487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5487] setpgid(0, 0) = 0 [pid 5487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5487] write(3, "1000", 4) = 4 [pid 5487] close(3) = 0 [pid 5487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5487] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5487] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5487] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5488 attached , parent_tid=[5488], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5488 [pid 5488] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5488] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5488] <... futex resumed>) = 0 [pid 5487] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5488] memfd_create("syzkaller", 0) = 3 [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 68.558124][ T5485] overlayfs: upper fs needs to support d_type. [ 68.564360][ T5485] overlayfs: upper fs does not support tmpfile. [ 68.570989][ T5485] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.578649][ T5485] overlayfs: failed to resolve './file0': -2 [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5488] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5488] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5488] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5488] close(3) = 0 [pid 5488] mkdir("./file0", 0777) = 0 [ 68.659328][ T5488] loop0: detected capacity change from 0 to 8192 [ 68.668162][ T5488] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.681155][ T5488] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 68.690362][ T5488] REISERFS (device loop0): using ordered data mode [ 68.696881][ T5488] reiserfs: using flush barriers [pid 5488] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5488] chdir("./file0") = 0 [pid 5488] ioctl(4, LOOP_CLR_FD) = 0 [pid 5488] close(4) = 0 [pid 5488] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5488] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] <... futex resumed>) = 0 [pid 5487] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = 0 [pid 5487] <... futex resumed>) = 1 [pid 5488] mkdir("./file1", 000 [pid 5487] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5488] <... mkdir resumed>) = 0 [pid 5488] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5487] <... futex resumed>) = 0 [pid 5488] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5487] <... futex resumed>) = 0 [pid 5488] mkdir("./bus", 000 [pid 5487] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5488] <... mkdir resumed>) = 0 [pid 5488] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5487] <... futex resumed>) = 0 [pid 5488] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5487] <... futex resumed>) = 0 [ 68.702520][ T5488] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.718912][ T5488] REISERFS (device loop0): checking transaction log (loop0) [ 68.726988][ T5488] REISERFS (device loop0): Using r5 hash to sort names [ 68.733957][ T5488] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 68.746665][ T5488] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5488] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5487] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5488] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5488] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5487] <... futex resumed>) = 0 [pid 5488] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] exit_group(0 [pid 5488] <... futex resumed>) = ? [pid 5487] <... exit_group resumed>) = ? [pid 5488] +++ exited with 0 +++ [pid 5487] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5487, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./137/binderfs") = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./137/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./137") = 0 mkdir("./138", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5490 ./strace-static-x86_64: Process 5490 attached [pid 5490] set_robust_list(0x5555559356e0, 24) = 0 [pid 5490] chdir("./138") = 0 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5490] setpgid(0, 0) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5490] write(3, "1000", 4) = 4 [pid 5490] close(3) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5490] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5490] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5490] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5491 attached [pid 5491] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5491] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] <... clone resumed>, parent_tid=[5491], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5491 [pid 5490] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5491] <... futex resumed>) = 0 [pid 5490] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5491] memfd_create("syzkaller", 0) = 3 [pid 5491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 68.768884][ T5488] overlayfs: upper fs needs to support d_type. [ 68.775140][ T5488] overlayfs: upper fs does not support tmpfile. [ 68.781636][ T5488] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.789577][ T5488] overlayfs: failed to resolve './file0': -2 [pid 5491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5491] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5491] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5491] close(3) = 0 [pid 5491] mkdir("./file0", 0777) = 0 [ 68.871199][ T5491] loop0: detected capacity change from 0 to 8192 [ 68.880482][ T5491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.893638][ T5491] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 68.903020][ T5491] REISERFS (device loop0): using ordered data mode [ 68.909595][ T5491] reiserfs: using flush barriers [pid 5491] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5491] chdir("./file0") = 0 [pid 5491] ioctl(4, LOOP_CLR_FD) = 0 [pid 5491] close(4) = 0 [pid 5491] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5491] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] <... futex resumed>) = 0 [pid 5490] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... futex resumed>) = 0 [pid 5490] <... futex resumed>) = 1 [pid 5491] mkdir("./file1", 000 [pid 5490] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] <... mkdir resumed>) = 0 [pid 5491] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5491] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [pid 5491] mkdir("./bus", 000 [pid 5490] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] <... mkdir resumed>) = 0 [pid 5491] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5491] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [ 68.915348][ T5491] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.931928][ T5491] REISERFS (device loop0): checking transaction log (loop0) [ 68.940141][ T5491] REISERFS (device loop0): Using r5 hash to sort names [ 68.947137][ T5491] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 68.959844][ T5491] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5491] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5490] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5491] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] <... futex resumed>) = 0 [pid 5490] exit_group(0) = ? [pid 5491] <... futex resumed>) = ? [pid 5491] +++ exited with 0 +++ [pid 5490] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./138/binderfs") = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./138/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./138") = 0 mkdir("./139", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5493 attached , child_tidptr=0x5555559356d0) = 5493 [pid 5493] set_robust_list(0x5555559356e0, 24) = 0 [pid 5493] chdir("./139") = 0 [pid 5493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5493] setpgid(0, 0) = 0 [pid 5493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5493] write(3, "1000", 4) = 4 [pid 5493] close(3) = 0 [pid 5493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5493] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5493] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5493] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5494 attached , parent_tid=[5494], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5494 [pid 5494] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5494] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5494] <... futex resumed>) = 0 [pid 5494] memfd_create("syzkaller", 0) = 3 [pid 5494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 68.982736][ T5491] overlayfs: upper fs needs to support d_type. [ 68.989618][ T5491] overlayfs: upper fs does not support tmpfile. [ 68.996591][ T5491] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.004299][ T5491] overlayfs: failed to resolve './file0': -2 [pid 5493] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5494] <... mmap resumed>) = 0x7f8d07fce000 [pid 5494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5494] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5494] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5494] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5494] close(3) = 0 [pid 5494] mkdir("./file0", 0777) = 0 [ 69.090018][ T5494] loop0: detected capacity change from 0 to 8192 [ 69.099315][ T5494] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.112564][ T5494] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 69.122223][ T5494] REISERFS (device loop0): using ordered data mode [ 69.128816][ T5494] reiserfs: using flush barriers [pid 5494] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5494] chdir("./file0") = 0 [pid 5494] ioctl(4, LOOP_CLR_FD) = 0 [pid 5494] close(4) = 0 [pid 5494] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = 0 [ 69.134731][ T5494] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.151099][ T5494] REISERFS (device loop0): checking transaction log (loop0) [ 69.159597][ T5494] REISERFS (device loop0): Using r5 hash to sort names [ 69.166647][ T5494] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 69.179590][ T5494] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5493] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... futex resumed>) = 1 [pid 5494] mkdir("./file1", 000) = 0 [pid 5494] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = 0 [pid 5493] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... futex resumed>) = 1 [pid 5494] mkdir("./bus", 000) = 0 [pid 5494] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = 0 [pid 5493] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... futex resumed>) = 1 [pid 5494] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5494] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5493] exit_group(0) = ? [pid 5494] +++ exited with 0 +++ [pid 5493] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5493, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./139/binderfs") = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./139/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./139") = 0 mkdir("./140", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5496 ./strace-static-x86_64: Process 5496 attached [pid 5496] set_robust_list(0x5555559356e0, 24) = 0 [pid 5496] chdir("./140") = 0 [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5496] setpgid(0, 0) = 0 [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5496] write(3, "1000", 4) = 4 [pid 5496] close(3) = 0 [pid 5496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5496] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 69.196428][ T5494] overlayfs: upper fs needs to support d_type. [ 69.204380][ T5494] overlayfs: upper fs does not support tmpfile. [ 69.211664][ T5494] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.219999][ T5494] overlayfs: failed to resolve './file0': -2 [pid 5496] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5496] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5497 attached , parent_tid=[5497], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5497 [pid 5497] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5497] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] <... futex resumed>) = 0 [pid 5497] memfd_create("syzkaller", 0) = 3 [pid 5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5496] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5497] <... mmap resumed>) = 0x7f8d07fce000 [pid 5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5497] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5497] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5497] close(3) = 0 [pid 5497] mkdir("./file0", 0777) = 0 [ 69.307637][ T5497] loop0: detected capacity change from 0 to 8192 [ 69.317511][ T5497] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.330610][ T5497] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 69.339856][ T5497] REISERFS (device loop0): using ordered data mode [ 69.346384][ T5497] reiserfs: using flush barriers [pid 5497] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5497] chdir("./file0") = 0 [pid 5497] ioctl(4, LOOP_CLR_FD) = 0 [pid 5497] close(4) = 0 [pid 5497] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5497] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5497] <... futex resumed>) = 0 [pid 5497] mkdir("./file1", 000) = 0 [pid 5497] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5497] <... futex resumed>) = 1 [pid 5497] mkdir("./bus", 000) = 0 [pid 5497] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 69.351936][ T5497] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.368373][ T5497] REISERFS (device loop0): checking transaction log (loop0) [ 69.376564][ T5497] REISERFS (device loop0): Using r5 hash to sort names [ 69.383821][ T5497] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 69.396552][ T5497] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5497] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5497] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5496] exit_group(0) = ? [pid 5497] +++ exited with 0 +++ [pid 5496] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./140/binderfs") = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./140/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./140") = 0 mkdir("./141", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5499 attached , child_tidptr=0x5555559356d0) = 5499 [pid 5499] set_robust_list(0x5555559356e0, 24) = 0 [pid 5499] chdir("./141") = 0 [pid 5499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5499] setpgid(0, 0) = 0 [pid 5499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5499] write(3, "1000", 4) = 4 [pid 5499] close(3) = 0 [pid 5499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5499] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5499] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5499] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5500], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5500 ./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5500] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5499] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5500] <... futex resumed>) = 0 [pid 5499] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5500] memfd_create("syzkaller", 0) = 3 [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 69.420607][ T5497] overlayfs: upper fs needs to support d_type. [ 69.426907][ T5497] overlayfs: upper fs does not support tmpfile. [ 69.433474][ T5497] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.441410][ T5497] overlayfs: failed to resolve './file0': -2 [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5500] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5500] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5500] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5500] close(3) = 0 [pid 5500] mkdir("./file0", 0777) = 0 [ 69.527823][ T5500] loop0: detected capacity change from 0 to 8192 [ 69.537133][ T5500] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.550185][ T5500] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 69.559406][ T5500] REISERFS (device loop0): using ordered data mode [ 69.565936][ T5500] reiserfs: using flush barriers [pid 5500] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5500] chdir("./file0") = 0 [pid 5500] ioctl(4, LOOP_CLR_FD) = 0 [pid 5500] close(4) = 0 [pid 5500] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5500] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5499] <... futex resumed>) = 0 [pid 5499] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5499] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... futex resumed>) = 0 [pid 5500] mkdir("./file1", 000) = 0 [pid 5500] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] <... futex resumed>) = 0 [pid 5499] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5499] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... futex resumed>) = 1 [ 69.571476][ T5500] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.587820][ T5500] REISERFS (device loop0): checking transaction log (loop0) [ 69.596034][ T5500] REISERFS (device loop0): Using r5 hash to sort names [ 69.602988][ T5500] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 69.615798][ T5500] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5500] mkdir("./bus", 000) = 0 [pid 5500] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] <... futex resumed>) = 0 [pid 5499] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5499] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... futex resumed>) = 1 [pid 5500] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5500] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5499] <... futex resumed>) = 0 [pid 5499] exit_group(0) = ? [pid 5500] <... futex resumed>) = ? [pid 5500] +++ exited with 0 +++ [pid 5499] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5499, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./141/binderfs") = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./141/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./141") = 0 mkdir("./142", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5502 ./strace-static-x86_64: Process 5502 attached [pid 5502] set_robust_list(0x5555559356e0, 24) = 0 [pid 5502] chdir("./142") = 0 [pid 5502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5502] setpgid(0, 0) = 0 [pid 5502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5502] write(3, "1000", 4) = 4 [pid 5502] close(3) = 0 [pid 5502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5502] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5502] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5502] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5503], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5503 ./strace-static-x86_64: Process 5503 attached [pid 5503] set_robust_list(0x7f8d103ee9e0, 24) = 0 [ 69.636072][ T5500] overlayfs: upper fs needs to support d_type. [ 69.642688][ T5500] overlayfs: upper fs does not support tmpfile. [ 69.650069][ T5500] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.657865][ T5500] overlayfs: failed to resolve './file0': -2 [pid 5503] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5502] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5503] <... futex resumed>) = 0 [pid 5503] memfd_create("syzkaller", 0 [pid 5502] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5503] <... memfd_create resumed>) = 3 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5503] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5503] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5503] close(3) = 0 [pid 5503] mkdir("./file0", 0777) = 0 [ 69.743880][ T5503] loop0: detected capacity change from 0 to 8192 [ 69.752574][ T5503] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.765900][ T5503] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 69.775234][ T5503] REISERFS (device loop0): using ordered data mode [ 69.781759][ T5503] reiserfs: using flush barriers [pid 5503] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5503] chdir("./file0") = 0 [pid 5503] ioctl(4, LOOP_CLR_FD) = 0 [pid 5503] close(4) = 0 [pid 5503] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5503] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5502] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... futex resumed>) = 0 [pid 5503] mkdir("./file1", 000) = 0 [pid 5503] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... futex resumed>) = 1 [pid 5503] mkdir("./bus", 000) = 0 [pid 5503] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... futex resumed>) = 1 [ 69.787595][ T5503] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.803951][ T5503] REISERFS (device loop0): checking transaction log (loop0) [ 69.812103][ T5503] REISERFS (device loop0): Using r5 hash to sort names [ 69.819598][ T5503] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 69.832358][ T5503] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5503] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5503] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5502] exit_group(0) = ? [pid 5503] <... futex resumed>) = ? [pid 5503] +++ exited with 0 +++ [pid 5502] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5502, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./142/binderfs") = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./142/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./142") = 0 mkdir("./143", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5505 ./strace-static-x86_64: Process 5505 attached [pid 5505] set_robust_list(0x5555559356e0, 24) = 0 [pid 5505] chdir("./143") = 0 [pid 5505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5505] setpgid(0, 0) = 0 [pid 5505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5505] write(3, "1000", 4) = 4 [pid 5505] close(3) = 0 [pid 5505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5505] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5505] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5505] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5506 attached [ 69.854035][ T5503] overlayfs: upper fs needs to support d_type. [ 69.860359][ T5503] overlayfs: upper fs does not support tmpfile. [ 69.867002][ T5503] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.874729][ T5503] overlayfs: failed to resolve './file0': -2 , parent_tid=[5506], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5506 [pid 5506] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5506] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5505] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5505] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5506] memfd_create("syzkaller", 0) = 3 [pid 5506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5506] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5506] close(3) = 0 [pid 5506] mkdir("./file0", 0777) = 0 [ 69.960873][ T5506] loop0: detected capacity change from 0 to 8192 [ 69.969849][ T5506] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.983017][ T5506] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 69.992257][ T5506] REISERFS (device loop0): using ordered data mode [ 69.998825][ T5506] reiserfs: using flush barriers [pid 5506] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5506] chdir("./file0") = 0 [pid 5506] ioctl(4, LOOP_CLR_FD) = 0 [pid 5506] close(4) = 0 [pid 5506] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5505] <... futex resumed>) = 0 [pid 5506] mkdir("./file1", 000 [ 70.004442][ T5506] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.020839][ T5506] REISERFS (device loop0): checking transaction log (loop0) [ 70.028879][ T5506] REISERFS (device loop0): Using r5 hash to sort names [ 70.035943][ T5506] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 70.048774][ T5506] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5505] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5506] <... mkdir resumed>) = 0 [pid 5505] <... futex resumed>) = 0 [pid 5506] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5505] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5506] <... futex resumed>) = 0 [pid 5505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5506] mkdir("./bus", 000 [pid 5505] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5506] <... mkdir resumed>) = 0 [pid 5505] <... futex resumed>) = 0 [pid 5506] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5505] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5506] <... futex resumed>) = 0 [pid 5505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5506] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5505] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5506] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5506] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5506] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5505] <... futex resumed>) = 0 [pid 5505] exit_group(0) = ? [pid 5506] <... futex resumed>) = ? [pid 5506] +++ exited with 0 +++ [pid 5505] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5505, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./143/binderfs") = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./143/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./143") = 0 mkdir("./144", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5508 ./strace-static-x86_64: Process 5508 attached [pid 5508] set_robust_list(0x5555559356e0, 24) = 0 [pid 5508] chdir("./144") = 0 [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5508] setpgid(0, 0) = 0 [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5508] write(3, "1000", 4) = 4 [pid 5508] close(3) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5508] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 70.062121][ T5506] overlayfs: upper fs needs to support d_type. [ 70.070033][ T5506] overlayfs: upper fs does not support tmpfile. [ 70.077024][ T5506] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.085136][ T5506] overlayfs: failed to resolve './file0': -2 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5508] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5508] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5509 attached [pid 5509] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5509] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... clone resumed>, parent_tid=[5509], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5509 [pid 5508] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] <... futex resumed>) = 0 [pid 5509] memfd_create("syzkaller", 0 [pid 5508] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5509] <... memfd_create resumed>) = 3 [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5509] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5509] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5509] close(3) = 0 [pid 5509] mkdir("./file0", 0777) = 0 [ 70.172547][ T5509] loop0: detected capacity change from 0 to 8192 [ 70.182564][ T5509] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.195562][ T5509] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 70.204795][ T5509] REISERFS (device loop0): using ordered data mode [ 70.211304][ T5509] reiserfs: using flush barriers [pid 5509] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5509] chdir("./file0") = 0 [pid 5509] ioctl(4, LOOP_CLR_FD) = 0 [pid 5509] close(4) = 0 [pid 5509] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5508] <... futex resumed>) = 1 [pid 5509] mkdir("./file1", 000 [pid 5508] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... mkdir resumed>) = 0 [pid 5509] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5509] mkdir("./bus", 000 [pid 5508] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... mkdir resumed>) = 0 [pid 5509] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5509] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5508] <... futex resumed>) = 1 [pid 5509] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 70.216950][ T5509] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.233298][ T5509] REISERFS (device loop0): checking transaction log (loop0) [ 70.241515][ T5509] REISERFS (device loop0): Using r5 hash to sort names [ 70.248540][ T5509] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 70.261275][ T5509] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5508] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5509] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] exit_group(0 [pid 5509] <... futex resumed>) = ? [pid 5508] <... exit_group resumed>) = ? [pid 5509] +++ exited with 0 +++ [pid 5508] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./144/binderfs") = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./144/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./144") = 0 mkdir("./145", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5511 ./strace-static-x86_64: Process 5511 attached [pid 5511] set_robust_list(0x5555559356e0, 24) = 0 [pid 5511] chdir("./145") = 0 [pid 5511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5511] setpgid(0, 0) = 0 [pid 5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5511] write(3, "1000", 4) = 4 [pid 5511] close(3) = 0 [pid 5511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5511] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5511] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 70.284947][ T5509] overlayfs: upper fs needs to support d_type. [ 70.291176][ T5509] overlayfs: upper fs does not support tmpfile. [ 70.297866][ T5509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.305681][ T5509] overlayfs: failed to resolve './file0': -2 [pid 5511] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5512 attached , parent_tid=[5512], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5512 [pid 5512] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5512] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5511] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5512] <... futex resumed>) = 0 [pid 5511] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5512] memfd_create("syzkaller", 0) = 3 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5512] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5512] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5512] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5512] close(3) = 0 [pid 5512] mkdir("./file0", 0777) = 0 [ 70.394459][ T5512] loop0: detected capacity change from 0 to 8192 [ 70.404819][ T5512] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.418179][ T5512] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 70.430701][ T895] cfg80211: failed to load regulatory.db [ 70.432239][ T5512] REISERFS (device loop0): using ordered data mode [ 70.443257][ T5512] reiserfs: using flush barriers [ 70.449363][ T5512] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.466257][ T5512] REISERFS (device loop0): checking transaction log (loop0) [ 70.477009][ T5512] REISERFS (device loop0): Using r5 hash to sort names [pid 5512] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5512] chdir("./file0") = 0 [pid 5512] ioctl(4, LOOP_CLR_FD) = 0 [pid 5512] close(4) = 0 [pid 5512] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = 0 [pid 5511] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5511] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [pid 5512] mkdir("./file1", 000) = 0 [pid 5512] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = 0 [pid 5511] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5511] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [pid 5512] mkdir("./bus", 000) = 0 [pid 5512] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = 0 [pid 5511] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5511] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [ 70.484310][ T5512] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 70.497640][ T5512] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5512] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5512] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = 0 [pid 5511] exit_group(0) = ? [pid 5512] <... futex resumed>) = ? [pid 5512] +++ exited with 0 +++ [pid 5511] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./145/binderfs") = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./145/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./145") = 0 mkdir("./146", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.546334][ T5512] overlayfs: upper fs needs to support d_type. [ 70.552824][ T5512] overlayfs: upper fs does not support tmpfile. [ 70.560058][ T5512] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.568367][ T5512] overlayfs: failed to resolve './file0': -2 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5514 ./strace-static-x86_64: Process 5514 attached [pid 5514] set_robust_list(0x5555559356e0, 24) = 0 [pid 5514] chdir("./146") = 0 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] setpgid(0, 0) = 0 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5514] write(3, "1000", 4) = 4 [pid 5514] close(3) = 0 [pid 5514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5514] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5514] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5514] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5515], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5515 [pid 5514] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5515 attached [pid 5515] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5515] memfd_create("syzkaller", 0) = 3 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5515] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5515] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5515] close(3) = 0 [pid 5515] mkdir("./file0", 0777) = 0 [ 70.700434][ T5515] loop0: detected capacity change from 0 to 8192 [ 70.711212][ T5515] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.724590][ T5515] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 70.733890][ T5515] REISERFS (device loop0): using ordered data mode [ 70.740490][ T5515] reiserfs: using flush barriers [pid 5515] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5515] chdir("./file0") = 0 [pid 5515] ioctl(4, LOOP_CLR_FD) = 0 [pid 5515] close(4) = 0 [pid 5515] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5515] mkdir("./file1", 000 [ 70.746382][ T5515] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.762654][ T5515] REISERFS (device loop0): checking transaction log (loop0) [ 70.770885][ T5515] REISERFS (device loop0): Using r5 hash to sort names [ 70.777963][ T5515] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 70.790669][ T5515] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5514] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... mkdir resumed>) = 0 [pid 5514] <... futex resumed>) = 0 [pid 5515] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... futex resumed>) = 0 [pid 5514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5515] mkdir("./bus", 000 [pid 5514] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... mkdir resumed>) = 0 [pid 5514] <... futex resumed>) = 0 [pid 5515] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... futex resumed>) = 0 [pid 5514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5515] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5514] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5515] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5515] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] <... futex resumed>) = 0 [pid 5514] exit_group(0) = ? [pid 5515] <... futex resumed>) = ? [pid 5515] +++ exited with 0 +++ [pid 5514] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./146/binderfs") = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./146/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./146") = 0 mkdir("./147", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5517 ./strace-static-x86_64: Process 5517 attached [pid 5517] set_robust_list(0x5555559356e0, 24) = 0 [pid 5517] chdir("./147") = 0 [pid 5517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5517] setpgid(0, 0) = 0 [pid 5517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5517] write(3, "1000", 4) = 4 [pid 5517] close(3) = 0 [pid 5517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5517] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 70.804519][ T5515] overlayfs: upper fs needs to support d_type. [ 70.811357][ T5515] overlayfs: upper fs does not support tmpfile. [ 70.819194][ T5515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.827121][ T5515] overlayfs: failed to resolve './file0': -2 [pid 5517] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5517] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5518 attached [pid 5518] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5518] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5517] <... clone resumed>, parent_tid=[5518], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5518 [pid 5517] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5518] <... futex resumed>) = 0 [pid 5517] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5518] memfd_create("syzkaller", 0) = 3 [pid 5518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5518] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5518] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5518] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5518] close(3) = 0 [pid 5518] mkdir("./file0", 0777) = 0 [ 70.917611][ T5518] loop0: detected capacity change from 0 to 8192 [ 70.927603][ T5518] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.940589][ T5518] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 70.949815][ T5518] REISERFS (device loop0): using ordered data mode [ 70.956333][ T5518] reiserfs: using flush barriers [pid 5518] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5518] chdir("./file0") = 0 [pid 5518] ioctl(4, LOOP_CLR_FD) = 0 [ 70.962072][ T5518] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.978693][ T5518] REISERFS (device loop0): checking transaction log (loop0) [ 70.986806][ T5518] REISERFS (device loop0): Using r5 hash to sort names [ 70.993779][ T5518] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 71.006499][ T5518] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5518] close(4) = 0 [pid 5518] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5517] <... futex resumed>) = 0 [pid 5517] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5517] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5518] <... futex resumed>) = 1 [pid 5518] mkdir("./file1", 000) = 0 [pid 5518] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5517] <... futex resumed>) = 0 [pid 5517] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5517] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5518] <... futex resumed>) = 1 [pid 5518] mkdir("./bus", 000) = 0 [pid 5518] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5517] <... futex resumed>) = 0 [pid 5517] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5517] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5518] <... futex resumed>) = 1 [pid 5518] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5518] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5517] <... futex resumed>) = 0 [pid 5518] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5517] exit_group(0) = ? [pid 5518] <... futex resumed>) = ? [pid 5518] +++ exited with 0 +++ [pid 5517] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5517, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./147/binderfs") = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./147/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./147") = 0 mkdir("./148", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5520 attached , child_tidptr=0x5555559356d0) = 5520 [pid 5520] set_robust_list(0x5555559356e0, 24) = 0 [pid 5520] chdir("./148") = 0 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5520] setpgid(0, 0) = 0 [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5520] write(3, "1000", 4) = 4 [pid 5520] close(3) = 0 [pid 5520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5520] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.021550][ T5518] overlayfs: upper fs needs to support d_type. [ 71.028390][ T5518] overlayfs: upper fs does not support tmpfile. [ 71.035912][ T5518] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.043836][ T5518] overlayfs: failed to resolve './file0': -2 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5520] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5521 attached , parent_tid=[5521], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5521 [pid 5521] set_robust_list(0x7f8d103ee9e0, 24 [pid 5520] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... set_robust_list resumed>) = 0 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5521] memfd_create("syzkaller", 0) = 3 [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5521] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5521] close(3) = 0 [pid 5521] mkdir("./file0", 0777) = 0 [ 71.131013][ T5521] loop0: detected capacity change from 0 to 8192 [ 71.140039][ T5521] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.153395][ T5521] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 71.162835][ T5521] REISERFS (device loop0): using ordered data mode [ 71.169389][ T5521] reiserfs: using flush barriers [pid 5521] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5521] chdir("./file0") = 0 [pid 5521] ioctl(4, LOOP_CLR_FD) = 0 [pid 5521] close(4) = 0 [pid 5521] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5521] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 0 [pid 5521] mkdir("./file1", 000) = 0 [pid 5521] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 1 [ 71.175281][ T5521] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.191537][ T5521] REISERFS (device loop0): checking transaction log (loop0) [ 71.199671][ T5521] REISERFS (device loop0): Using r5 hash to sort names [ 71.207096][ T5521] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 71.219797][ T5521] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5521] mkdir("./bus", 000) = 0 [pid 5521] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 0 [pid 5520] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 1 [pid 5521] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5521] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5520] exit_group(0) = ? [pid 5521] +++ exited with 0 +++ [pid 5520] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5520, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./148/binderfs") = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./148/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./148") = 0 mkdir("./149", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5523 ./strace-static-x86_64: Process 5523 attached [pid 5523] set_robust_list(0x5555559356e0, 24) = 0 [pid 5523] chdir("./149") = 0 [pid 5523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5523] setpgid(0, 0) = 0 [pid 5523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5523] write(3, "1000", 4) = 4 [pid 5523] close(3) = 0 [pid 5523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5523] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5523] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5523] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5524], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5524 [pid 5523] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5523] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5524 attached [pid 5524] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5524] memfd_create("syzkaller", 0) = 3 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 71.247275][ T5521] overlayfs: upper fs needs to support d_type. [ 71.253962][ T5521] overlayfs: upper fs does not support tmpfile. [ 71.260775][ T5521] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.268754][ T5521] overlayfs: failed to resolve './file0': -2 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5524] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5524] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5524] close(3) = 0 [pid 5524] mkdir("./file0", 0777) = 0 [ 71.352705][ T5524] loop0: detected capacity change from 0 to 8192 [ 71.362191][ T5524] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.375482][ T5524] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 71.384750][ T5524] REISERFS (device loop0): using ordered data mode [ 71.391263][ T5524] reiserfs: using flush barriers [pid 5524] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5524] chdir("./file0") = 0 [pid 5524] ioctl(4, LOOP_CLR_FD) = 0 [ 71.397445][ T5524] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.413782][ T5524] REISERFS (device loop0): checking transaction log (loop0) [ 71.421963][ T5524] REISERFS (device loop0): Using r5 hash to sort names [ 71.429424][ T5524] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 71.442135][ T5524] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5524] close(4) = 0 [pid 5524] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5523] <... futex resumed>) = 0 [pid 5523] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5523] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] mkdir("./file1", 000) = 0 [pid 5524] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5523] <... futex resumed>) = 0 [pid 5523] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5523] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] mkdir("./bus", 000) = 0 [pid 5524] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5523] <... futex resumed>) = 0 [pid 5523] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5523] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5524] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5523] <... futex resumed>) = 0 [pid 5524] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5523] exit_group(0) = ? [pid 5524] <... futex resumed>) = ? [pid 5524] +++ exited with 0 +++ [pid 5523] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5523, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./149/binderfs") = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./149/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./149") = 0 mkdir("./150", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5526 attached , child_tidptr=0x5555559356d0) = 5526 [pid 5526] set_robust_list(0x5555559356e0, 24) = 0 [pid 5526] chdir("./150") = 0 [pid 5526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5526] setpgid(0, 0) = 0 [pid 5526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5526] write(3, "1000", 4) = 4 [pid 5526] close(3) = 0 [pid 5526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5526] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5526] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5526] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5527], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5527 ./strace-static-x86_64: Process 5527 attached [pid 5527] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5527] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [ 71.457795][ T5524] overlayfs: upper fs needs to support d_type. [ 71.464394][ T5524] overlayfs: upper fs does not support tmpfile. [ 71.471351][ T5524] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.479687][ T5524] overlayfs: failed to resolve './file0': -2 [pid 5526] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5526] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5527] memfd_create("syzkaller", 0) = 3 [pid 5527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5527] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5527] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5527] close(3) = 0 [pid 5527] mkdir("./file0", 0777) = 0 [ 71.565525][ T5527] loop0: detected capacity change from 0 to 8192 [ 71.574305][ T5527] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.587447][ T5527] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 71.596694][ T5527] REISERFS (device loop0): using ordered data mode [ 71.603196][ T5527] reiserfs: using flush barriers [pid 5527] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5527] chdir("./file0") = 0 [pid 5527] ioctl(4, LOOP_CLR_FD) = 0 [pid 5527] close(4) = 0 [pid 5527] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... futex resumed>) = 0 [pid 5526] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... futex resumed>) = 1 [pid 5527] mkdir("./file1", 000) = 0 [pid 5527] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... futex resumed>) = 0 [pid 5526] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... futex resumed>) = 1 [pid 5527] mkdir("./bus", 000) = 0 [pid 5527] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... futex resumed>) = 0 [pid 5526] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... futex resumed>) = 1 [ 71.608884][ T5527] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.625201][ T5527] REISERFS (device loop0): checking transaction log (loop0) [ 71.633328][ T5527] REISERFS (device loop0): Using r5 hash to sort names [ 71.640618][ T5527] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 71.653521][ T5527] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5527] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5527] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... futex resumed>) = 0 [pid 5526] exit_group(0) = ? [pid 5527] <... futex resumed>) = ? [pid 5527] +++ exited with 0 +++ [pid 5526] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5526, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./150/binderfs") = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./150/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./150") = 0 mkdir("./151", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5529 ./strace-static-x86_64: Process 5529 attached [pid 5529] set_robust_list(0x5555559356e0, 24) = 0 [pid 5529] chdir("./151") = 0 [pid 5529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5529] setpgid(0, 0) = 0 [pid 5529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5529] write(3, "1000", 4) = 4 [pid 5529] close(3) = 0 [pid 5529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5529] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5529] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5530 attached [pid 5530] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5530] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5529] <... clone resumed>, parent_tid=[5530], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5530 [pid 5529] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5529] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5530] memfd_create("syzkaller", 0) = 3 [pid 5530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 71.677134][ T5527] overlayfs: upper fs needs to support d_type. [ 71.683613][ T5527] overlayfs: upper fs does not support tmpfile. [ 71.690217][ T5527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.698066][ T5527] overlayfs: failed to resolve './file0': -2 [pid 5530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5530] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5530] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5530] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5530] close(3) = 0 [pid 5530] mkdir("./file0", 0777) = 0 [ 71.781803][ T5530] loop0: detected capacity change from 0 to 8192 [ 71.790900][ T5530] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.803923][ T5530] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 71.813144][ T5530] REISERFS (device loop0): using ordered data mode [ 71.819783][ T5530] reiserfs: using flush barriers [pid 5530] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5530] chdir("./file0") = 0 [pid 5530] ioctl(4, LOOP_CLR_FD) = 0 [pid 5530] close(4) = 0 [pid 5530] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5529] <... futex resumed>) = 0 [pid 5530] mkdir("./file1", 000 [ 71.825377][ T5530] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.841755][ T5530] REISERFS (device loop0): checking transaction log (loop0) [ 71.849757][ T5530] REISERFS (device loop0): Using r5 hash to sort names [ 71.856820][ T5530] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 71.869530][ T5530] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5529] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5530] <... mkdir resumed>) = 0 [pid 5529] <... futex resumed>) = 0 [pid 5530] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] <... futex resumed>) = 0 [pid 5529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5530] mkdir("./bus", 000 [pid 5529] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5530] <... mkdir resumed>) = 0 [pid 5529] <... futex resumed>) = 0 [pid 5530] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] <... futex resumed>) = 0 [pid 5529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5530] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5529] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5530] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] <... futex resumed>) = 0 [pid 5529] exit_group(0) = ? [pid 5530] <... futex resumed>) = ? [pid 5530] +++ exited with 0 +++ [pid 5529] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5529, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./151/binderfs") = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./151/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./151") = 0 mkdir("./152", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5532 ./strace-static-x86_64: Process 5532 attached [pid 5532] set_robust_list(0x5555559356e0, 24) = 0 [pid 5532] chdir("./152") = 0 [pid 5532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5532] setpgid(0, 0) = 0 [pid 5532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5532] write(3, "1000", 4) = 4 [pid 5532] close(3) = 0 [pid 5532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5532] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5532] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 71.883642][ T5530] overlayfs: upper fs needs to support d_type. [ 71.892199][ T5530] overlayfs: upper fs does not support tmpfile. [ 71.899327][ T5530] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.907266][ T5530] overlayfs: failed to resolve './file0': -2 [pid 5532] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5533 attached , parent_tid=[5533], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5533 [pid 5533] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5533] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5532] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5533] <... futex resumed>) = 0 [pid 5533] memfd_create("syzkaller", 0) = 3 [pid 5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5532] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5533] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5533] close(3) = 0 [pid 5533] mkdir("./file0", 0777) = 0 [ 71.993292][ T5533] loop0: detected capacity change from 0 to 8192 [ 72.002446][ T5533] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.015527][ T5533] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 72.024738][ T5533] REISERFS (device loop0): using ordered data mode [ 72.031244][ T5533] reiserfs: using flush barriers [pid 5533] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5533] chdir("./file0") = 0 [pid 5533] ioctl(4, LOOP_CLR_FD) = 0 [pid 5533] close(4) = 0 [pid 5533] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5532] <... futex resumed>) = 0 [pid 5533] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5532] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5532] <... futex resumed>) = 0 [pid 5532] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5533] mkdir("./file1", 000) = 0 [pid 5533] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5532] <... futex resumed>) = 0 [pid 5533] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5532] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5532] <... futex resumed>) = 0 [pid 5533] mkdir("./bus", 000 [pid 5532] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5533] <... mkdir resumed>) = 0 [pid 5533] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5532] <... futex resumed>) = 0 [pid 5533] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 72.037063][ T5533] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.053318][ T5533] REISERFS (device loop0): checking transaction log (loop0) [ 72.061374][ T5533] REISERFS (device loop0): Using r5 hash to sort names [ 72.068440][ T5533] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 72.081428][ T5533] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5532] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5532] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5533] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5533] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5532] <... futex resumed>) = 0 [pid 5533] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5532] exit_group(0 [pid 5533] <... futex resumed>) = ? [pid 5532] <... exit_group resumed>) = ? [pid 5533] +++ exited with 0 +++ [pid 5532] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5532, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./152/binderfs") = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./152/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./152") = 0 mkdir("./153", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5535 attached , child_tidptr=0x5555559356d0) = 5535 [pid 5535] set_robust_list(0x5555559356e0, 24) = 0 [pid 5535] chdir("./153") = 0 [pid 5535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5535] setpgid(0, 0) = 0 [pid 5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5535] write(3, "1000", 4) = 4 [pid 5535] close(3) = 0 [pid 5535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5535] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5535] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5535] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5536 attached , parent_tid=[5536], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5536 [pid 5536] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5536] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5536] <... futex resumed>) = 0 [pid 5535] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5536] memfd_create("syzkaller", 0) = 3 [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 72.106407][ T5533] overlayfs: upper fs needs to support d_type. [ 72.112739][ T5533] overlayfs: upper fs does not support tmpfile. [ 72.119677][ T5533] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.127314][ T5533] overlayfs: failed to resolve './file0': -2 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5536] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5536] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5536] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5536] close(3) = 0 [pid 5536] mkdir("./file0", 0777) = 0 [ 72.208158][ T5536] loop0: detected capacity change from 0 to 8192 [ 72.217133][ T5536] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.230175][ T5536] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 72.239414][ T5536] REISERFS (device loop0): using ordered data mode [ 72.245933][ T5536] reiserfs: using flush barriers [pid 5536] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5536] chdir("./file0") = 0 [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5536] close(4) = 0 [pid 5536] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5535] <... futex resumed>) = 0 [pid 5536] mkdir("./file1", 000 [ 72.251435][ T5536] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.267729][ T5536] REISERFS (device loop0): checking transaction log (loop0) [ 72.275915][ T5536] REISERFS (device loop0): Using r5 hash to sort names [ 72.282863][ T5536] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 72.295580][ T5536] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5535] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... mkdir resumed>) = 0 [pid 5535] <... futex resumed>) = 0 [pid 5536] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... futex resumed>) = 0 [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5536] mkdir("./bus", 000 [pid 5535] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... mkdir resumed>) = 0 [pid 5535] <... futex resumed>) = 0 [pid 5536] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... futex resumed>) = 0 [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5536] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5535] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5536] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5536] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5535] <... futex resumed>) = 0 [pid 5535] exit_group(0) = ? [pid 5536] +++ exited with 0 +++ [pid 5535] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5535, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./153/binderfs") = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./153/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./153") = 0 mkdir("./154", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5538 ./strace-static-x86_64: Process 5538 attached [pid 5538] set_robust_list(0x5555559356e0, 24) = 0 [pid 5538] chdir("./154") = 0 [pid 5538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5538] setpgid(0, 0) = 0 [pid 5538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5538] write(3, "1000", 4) = 4 [pid 5538] close(3) = 0 [pid 5538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5538] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5538] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5538] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5539 attached [pid 5539] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5539] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] <... clone resumed>, parent_tid=[5539], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5539 [pid 5538] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5538] <... futex resumed>) = 1 [ 72.309933][ T5536] overlayfs: upper fs needs to support d_type. [ 72.316502][ T5536] overlayfs: upper fs does not support tmpfile. [ 72.324443][ T5536] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.332515][ T5536] overlayfs: failed to resolve './file0': -2 [pid 5539] memfd_create("syzkaller", 0) = 3 [pid 5539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5538] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5539] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5539] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5539] close(3) = 0 [pid 5539] mkdir("./file0", 0777) = 0 [ 72.413394][ T5539] loop0: detected capacity change from 0 to 8192 [ 72.422364][ T5539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.435392][ T5539] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 72.444794][ T5539] REISERFS (device loop0): using ordered data mode [ 72.451316][ T5539] reiserfs: using flush barriers [pid 5539] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5539] chdir("./file0") = 0 [pid 5539] ioctl(4, LOOP_CLR_FD) = 0 [pid 5539] close(4) = 0 [pid 5539] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] <... futex resumed>) = 0 [pid 5538] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5538] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5539] <... futex resumed>) = 0 [pid 5539] mkdir("./file1", 000) = 0 [pid 5539] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5538] <... futex resumed>) = 0 [pid 5538] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5539] <... futex resumed>) = 1 [pid 5539] mkdir("./bus", 000) = 0 [pid 5539] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5538] <... futex resumed>) = 0 [pid 5538] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5539] <... futex resumed>) = 1 [ 72.457350][ T5539] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.474064][ T5539] REISERFS (device loop0): checking transaction log (loop0) [ 72.482238][ T5539] REISERFS (device loop0): Using r5 hash to sort names [ 72.489350][ T5539] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 72.502075][ T5539] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5539] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5539] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5538] <... futex resumed>) = 0 [pid 5538] exit_group(0) = ? [pid 5539] <... futex resumed>) = ? [pid 5539] +++ exited with 0 +++ [pid 5538] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5538, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./154/binderfs") = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./154/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./154") = 0 mkdir("./155", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5541 ./strace-static-x86_64: Process 5541 attached [pid 5541] set_robust_list(0x5555559356e0, 24) = 0 [pid 5541] chdir("./155") = 0 [pid 5541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5541] setpgid(0, 0) = 0 [pid 5541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5541] write(3, "1000", 4) = 4 [pid 5541] close(3) = 0 [pid 5541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5541] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5541] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5541] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5542], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5542 ./strace-static-x86_64: Process 5542 attached [pid 5542] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5542] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5542] <... futex resumed>) = 0 [pid 5541] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5542] memfd_create("syzkaller", 0) = 3 [ 72.522935][ T5539] overlayfs: upper fs needs to support d_type. [ 72.529421][ T5539] overlayfs: upper fs does not support tmpfile. [ 72.536255][ T5539] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.543973][ T5539] overlayfs: failed to resolve './file0': -2 [pid 5542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5542] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5542] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5542] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5542] close(3) = 0 [pid 5542] mkdir("./file0", 0777) = 0 [ 72.631538][ T5542] loop0: detected capacity change from 0 to 8192 [ 72.641067][ T5542] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.654258][ T5542] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 72.663486][ T5542] REISERFS (device loop0): using ordered data mode [ 72.670065][ T5542] reiserfs: using flush barriers [pid 5542] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5542] chdir("./file0") = 0 [pid 5542] ioctl(4, LOOP_CLR_FD) = 0 [pid 5542] close(4) = 0 [pid 5542] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = 1 [pid 5541] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] mkdir("./file1", 000 [pid 5541] <... futex resumed>) = 0 [pid 5542] <... mkdir resumed>) = 0 [pid 5541] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5542] mkdir("./bus", 000 [pid 5541] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] <... mkdir resumed>) = 0 [pid 5541] <... futex resumed>) = 0 [pid 5542] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] <... futex resumed>) = 0 [pid 5541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5542] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 72.675762][ T5542] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.692264][ T5542] REISERFS (device loop0): checking transaction log (loop0) [ 72.700645][ T5542] REISERFS (device loop0): Using r5 hash to sort names [ 72.707649][ T5542] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 72.720381][ T5542] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5541] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5542] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5542] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] exit_group(0) = ? [pid 5542] <... futex resumed>) = ? [pid 5542] +++ exited with 0 +++ [pid 5541] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5541, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./155/binderfs") = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./155/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./155") = 0 mkdir("./156", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 72.734133][ T5542] overlayfs: upper fs needs to support d_type. [ 72.742494][ T5542] overlayfs: upper fs does not support tmpfile. [ 72.749319][ T5542] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.758047][ T5542] overlayfs: failed to resolve './file0': -2 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5544 ./strace-static-x86_64: Process 5544 attached [pid 5544] set_robust_list(0x5555559356e0, 24) = 0 [pid 5544] chdir("./156") = 0 [pid 5544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5544] setpgid(0, 0) = 0 [pid 5544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5544] write(3, "1000", 4) = 4 [pid 5544] close(3) = 0 [pid 5544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5544] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5544] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5544] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5545 attached , parent_tid=[5545], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5545 [pid 5545] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5545] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5544] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5544] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5545] memfd_create("syzkaller", 0) = 3 [pid 5545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5545] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5545] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5545] close(3) = 0 [pid 5545] mkdir("./file0", 0777) = 0 [ 72.850420][ T5545] loop0: detected capacity change from 0 to 8192 [ 72.859719][ T5545] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.872877][ T5545] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 72.882078][ T5545] REISERFS (device loop0): using ordered data mode [ 72.888608][ T5545] reiserfs: using flush barriers [pid 5545] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5545] chdir("./file0") = 0 [pid 5545] ioctl(4, LOOP_CLR_FD) = 0 [pid 5545] close(4) = 0 [pid 5545] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5544] <... futex resumed>) = 0 [pid 5545] mkdir("./file1", 000 [pid 5544] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... mkdir resumed>) = 0 [pid 5544] <... futex resumed>) = 0 [pid 5545] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5545] <... futex resumed>) = 0 [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] mkdir("./bus", 000 [pid 5544] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5545] <... mkdir resumed>) = 0 [pid 5544] <... futex resumed>) = 0 [pid 5545] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5545] <... futex resumed>) = 0 [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5544] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 72.894144][ T5545] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.910746][ T5545] REISERFS (device loop0): checking transaction log (loop0) [ 72.918902][ T5545] REISERFS (device loop0): Using r5 hash to sort names [ 72.925894][ T5545] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 72.938627][ T5545] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5544] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5545] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5545] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5544] <... futex resumed>) = 0 [pid 5545] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5544] exit_group(0 [pid 5545] <... futex resumed>) = ? [pid 5544] <... exit_group resumed>) = ? [pid 5545] +++ exited with 0 +++ [pid 5544] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5544, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./156/binderfs") = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./156/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./156") = 0 mkdir("./157", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5547 ./strace-static-x86_64: Process 5547 attached [pid 5547] set_robust_list(0x5555559356e0, 24) = 0 [pid 5547] chdir("./157") = 0 [pid 5547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5547] setpgid(0, 0) = 0 [pid 5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5547] write(3, "1000", 4) = 4 [pid 5547] close(3) = 0 [pid 5547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5547] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5547] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 72.957671][ T5545] overlayfs: upper fs needs to support d_type. [ 72.964913][ T5545] overlayfs: upper fs does not support tmpfile. [ 72.971562][ T5545] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.979606][ T5545] overlayfs: failed to resolve './file0': -2 [pid 5547] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5548 attached [pid 5548] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5548] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] <... clone resumed>, parent_tid=[5548], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5548 [pid 5547] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5548] <... futex resumed>) = 0 [pid 5547] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5548] memfd_create("syzkaller", 0) = 3 [pid 5548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5548] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5548] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5548] close(3) = 0 [pid 5548] mkdir("./file0", 0777) = 0 [ 73.066630][ T5548] loop0: detected capacity change from 0 to 8192 [ 73.075741][ T5548] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.088758][ T5548] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 73.097981][ T5548] REISERFS (device loop0): using ordered data mode [ 73.104482][ T5548] reiserfs: using flush barriers [pid 5548] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5548] chdir("./file0") = 0 [pid 5548] ioctl(4, LOOP_CLR_FD) = 0 [pid 5548] close(4) = 0 [pid 5548] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5547] <... futex resumed>) = 0 [pid 5548] mkdir("./file1", 000 [pid 5547] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5548] <... mkdir resumed>) = 0 [pid 5547] <... futex resumed>) = 0 [pid 5548] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5548] <... futex resumed>) = 0 [pid 5547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5548] mkdir("./bus", 000 [pid 5547] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5548] <... mkdir resumed>) = 0 [pid 5547] <... futex resumed>) = 0 [pid 5548] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5548] <... futex resumed>) = 0 [pid 5547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5548] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5548] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5547] <... futex resumed>) = 0 [pid 5548] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 73.110120][ T5548] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.126574][ T5548] REISERFS (device loop0): checking transaction log (loop0) [ 73.134762][ T5548] REISERFS (device loop0): Using r5 hash to sort names [ 73.141731][ T5548] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 73.154439][ T5548] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5547] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5548] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5548] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5547] <... futex resumed>) = 0 [pid 5548] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] exit_group(0 [pid 5548] <... futex resumed>) = ? [pid 5547] <... exit_group resumed>) = ? [pid 5548] +++ exited with 0 +++ [pid 5547] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./157/binderfs") = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./157/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./157") = 0 mkdir("./158", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5550 attached , child_tidptr=0x5555559356d0) = 5550 [pid 5550] set_robust_list(0x5555559356e0, 24) = 0 [pid 5550] chdir("./158") = 0 [pid 5550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5550] setpgid(0, 0) = 0 [pid 5550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5550] write(3, "1000", 4) = 4 [pid 5550] close(3) = 0 [pid 5550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5550] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5550] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5550] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5551 attached , parent_tid=[5551], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5551 [pid 5551] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5551] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] <... futex resumed>) = 0 [pid 5550] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5551] memfd_create("syzkaller", 0) = 3 [ 73.173716][ T5548] overlayfs: upper fs needs to support d_type. [ 73.179965][ T5548] overlayfs: upper fs does not support tmpfile. [ 73.186623][ T5548] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.194305][ T5548] overlayfs: failed to resolve './file0': -2 [pid 5551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5551] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5551] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5551] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5551] close(3) = 0 [pid 5551] mkdir("./file0", 0777) = 0 [ 73.280637][ T5551] loop0: detected capacity change from 0 to 8192 [ 73.289914][ T5551] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.303233][ T5551] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 73.312578][ T5551] REISERFS (device loop0): using ordered data mode [ 73.319117][ T5551] reiserfs: using flush barriers [pid 5551] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5551] chdir("./file0") = 0 [pid 5551] ioctl(4, LOOP_CLR_FD) = 0 [pid 5551] close(4) = 0 [pid 5551] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5551] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] <... futex resumed>) = 0 [pid 5550] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] <... futex resumed>) = 0 [pid 5550] <... futex resumed>) = 1 [pid 5551] mkdir("./file1", 000 [pid 5550] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] <... mkdir resumed>) = 0 [pid 5551] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5550] <... futex resumed>) = 0 [pid 5551] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5550] <... futex resumed>) = 0 [pid 5551] mkdir("./bus", 000) = 0 [pid 5551] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5551] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5550] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] <... futex resumed>) = 0 [pid 5550] <... futex resumed>) = 1 [pid 5551] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 73.324728][ T5551] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.341173][ T5551] REISERFS (device loop0): checking transaction log (loop0) [ 73.349226][ T5551] REISERFS (device loop0): Using r5 hash to sort names [ 73.356641][ T5551] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 73.369336][ T5551] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5550] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5551] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5550] <... futex resumed>) = 0 [pid 5550] exit_group(0) = ? [pid 5551] +++ exited with 0 +++ [pid 5550] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5550, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./158/binderfs") = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./158/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./158") = 0 mkdir("./159", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5553 ./strace-static-x86_64: Process 5553 attached [pid 5553] set_robust_list(0x5555559356e0, 24) = 0 [pid 5553] chdir("./159") = 0 [pid 5553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5553] setpgid(0, 0) = 0 [pid 5553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5553] write(3, "1000", 4) = 4 [pid 5553] close(3) = 0 [pid 5553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5553] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5553] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5553] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5554 attached [pid 5554] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5553] <... clone resumed>, parent_tid=[5554], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5554 [pid 5554] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5553] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5554] <... futex resumed>) = 0 [pid 5553] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5554] memfd_create("syzkaller", 0) = 3 [ 73.392821][ T5551] overlayfs: upper fs needs to support d_type. [ 73.399226][ T5551] overlayfs: upper fs does not support tmpfile. [ 73.406116][ T5551] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.413661][ T5551] overlayfs: failed to resolve './file0': -2 [pid 5554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5554] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5554] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5554] close(3) = 0 [pid 5554] mkdir("./file0", 0777) = 0 [ 73.499893][ T5554] loop0: detected capacity change from 0 to 8192 [ 73.509022][ T5554] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.522183][ T5554] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 73.531395][ T5554] REISERFS (device loop0): using ordered data mode [ 73.537924][ T5554] reiserfs: using flush barriers [pid 5554] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5554] chdir("./file0") = 0 [pid 5554] ioctl(4, LOOP_CLR_FD) = 0 [pid 5554] close(4) = 0 [pid 5554] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5554] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5553] <... futex resumed>) = 0 [pid 5553] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... futex resumed>) = 0 [pid 5553] <... futex resumed>) = 1 [pid 5554] mkdir("./file1", 000 [pid 5553] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... mkdir resumed>) = 0 [pid 5554] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5554] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5553] <... futex resumed>) = 0 [pid 5553] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... futex resumed>) = 0 [pid 5553] <... futex resumed>) = 1 [pid 5554] mkdir("./bus", 000 [pid 5553] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... mkdir resumed>) = 0 [pid 5554] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5553] <... futex resumed>) = 0 [pid 5554] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5553] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5553] <... futex resumed>) = 0 [pid 5554] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 73.543421][ T5554] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.559813][ T5554] REISERFS (device loop0): checking transaction log (loop0) [ 73.567788][ T5554] REISERFS (device loop0): Using r5 hash to sort names [ 73.574836][ T5554] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 73.587591][ T5554] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5553] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5554] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5554] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5554] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5553] <... futex resumed>) = 0 [pid 5553] exit_group(0) = ? [pid 5554] <... futex resumed>) = ? [pid 5554] +++ exited with 0 +++ [pid 5553] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5553, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./159/binderfs") = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./159/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./159") = 0 mkdir("./160", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5556 attached , child_tidptr=0x5555559356d0) = 5556 [pid 5556] set_robust_list(0x5555559356e0, 24) = 0 [pid 5556] chdir("./160") = 0 [pid 5556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5556] setpgid(0, 0) = 0 [pid 5556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5556] write(3, "1000", 4) = 4 [pid 5556] close(3) = 0 [pid 5556] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5556] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5556] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5556] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5557 attached [pid 5557] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5557] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] <... clone resumed>, parent_tid=[5557], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5557 [pid 5556] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5556] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5557] memfd_create("syzkaller", 0) = 3 [pid 5557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 73.615015][ T5554] overlayfs: upper fs needs to support d_type. [ 73.621277][ T5554] overlayfs: upper fs does not support tmpfile. [ 73.628121][ T5554] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.636246][ T5554] overlayfs: failed to resolve './file0': -2 [pid 5557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5557] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5557] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5557] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5557] close(3) = 0 [pid 5557] mkdir("./file0", 0777) = 0 [ 73.722091][ T5557] loop0: detected capacity change from 0 to 8192 [ 73.731078][ T5557] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.744196][ T5557] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 73.753375][ T5557] REISERFS (device loop0): using ordered data mode [ 73.759921][ T5557] reiserfs: using flush barriers [pid 5557] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5557] chdir("./file0") = 0 [pid 5557] ioctl(4, LOOP_CLR_FD) = 0 [pid 5557] close(4) = 0 [pid 5557] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5557] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] <... futex resumed>) = 0 [pid 5556] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 5556] <... futex resumed>) = 1 [pid 5557] mkdir("./file1", 000 [pid 5556] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5557] <... mkdir resumed>) = 0 [pid 5557] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5556] <... futex resumed>) = 0 [pid 5557] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5556] <... futex resumed>) = 0 [pid 5557] mkdir("./bus", 000 [pid 5556] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5557] <... mkdir resumed>) = 0 [pid 5557] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5556] <... futex resumed>) = 0 [pid 5557] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 73.765455][ T5557] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.781840][ T5557] REISERFS (device loop0): checking transaction log (loop0) [ 73.789817][ T5557] REISERFS (device loop0): Using r5 hash to sort names [ 73.796872][ T5557] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 73.809575][ T5557] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5556] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5557] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5557] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5557] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] <... futex resumed>) = 0 [pid 5556] exit_group(0) = ? [pid 5557] <... futex resumed>) = ? [pid 5557] +++ exited with 0 +++ [pid 5556] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5556, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./160/binderfs") = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./160/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./160") = 0 mkdir("./161", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5559 ./strace-static-x86_64: Process 5559 attached [pid 5559] set_robust_list(0x5555559356e0, 24) = 0 [pid 5559] chdir("./161") = 0 [pid 5559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5559] setpgid(0, 0) = 0 [pid 5559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5559] write(3, "1000", 4) = 4 [pid 5559] close(3) = 0 [pid 5559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5559] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5559] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5559] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5560 attached , parent_tid=[5560], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5560 [pid 5560] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5560] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [ 73.834292][ T5557] overlayfs: upper fs needs to support d_type. [ 73.840692][ T5557] overlayfs: upper fs does not support tmpfile. [ 73.847477][ T5557] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.855862][ T5557] overlayfs: failed to resolve './file0': -2 [pid 5559] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5559] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5560] <... futex resumed>) = 0 [pid 5560] memfd_create("syzkaller", 0) = 3 [pid 5560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5560] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5560] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5560] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5560] close(3) = 0 [pid 5560] mkdir("./file0", 0777) = 0 [ 73.950739][ T5560] loop0: detected capacity change from 0 to 8192 [ 73.960458][ T5560] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.973470][ T5560] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 73.982673][ T5560] REISERFS (device loop0): using ordered data mode [ 73.989200][ T5560] reiserfs: using flush barriers [pid 5560] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5560] chdir("./file0") = 0 [pid 5560] ioctl(4, LOOP_CLR_FD) = 0 [ 73.994732][ T5560] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.011010][ T5560] REISERFS (device loop0): checking transaction log (loop0) [ 74.019126][ T5560] REISERFS (device loop0): Using r5 hash to sort names [ 74.026113][ T5560] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 74.038813][ T5560] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5560] close(4) = 0 [pid 5560] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5559] <... futex resumed>) = 0 [pid 5560] mkdir("./file1", 000 [pid 5559] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5560] <... mkdir resumed>) = 0 [pid 5559] <... futex resumed>) = 0 [pid 5560] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5560] <... futex resumed>) = 0 [pid 5559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5560] mkdir("./bus", 000 [pid 5559] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5560] <... mkdir resumed>) = 0 [pid 5559] <... futex resumed>) = 0 [pid 5560] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5560] <... futex resumed>) = 0 [pid 5559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5560] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5559] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5560] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5560] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5560] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5559] <... futex resumed>) = 0 [pid 5559] exit_group(0 [pid 5560] <... futex resumed>) = ? [pid 5559] <... exit_group resumed>) = ? [pid 5560] +++ exited with 0 +++ [pid 5559] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5559, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./161/binderfs") = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./161/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./161") = 0 mkdir("./162", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5562 attached , child_tidptr=0x5555559356d0) = 5562 [pid 5562] set_robust_list(0x5555559356e0, 24) = 0 [pid 5562] chdir("./162") = 0 [pid 5562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5562] setpgid(0, 0) = 0 [pid 5562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5562] write(3, "1000", 4) = 4 [pid 5562] close(3) = 0 [pid 5562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5562] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5562] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5562] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5563 attached [pid 5563] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5563] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5562] <... clone resumed>, parent_tid=[5563], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5563 [ 74.052904][ T5560] overlayfs: upper fs needs to support d_type. [ 74.059505][ T5560] overlayfs: upper fs does not support tmpfile. [ 74.066615][ T5560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.074213][ T5560] overlayfs: failed to resolve './file0': -2 [pid 5562] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5563] <... futex resumed>) = 0 [pid 5562] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5563] memfd_create("syzkaller", 0) = 3 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5563] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5563] close(3) = 0 [pid 5563] mkdir("./file0", 0777) = 0 [ 74.160299][ T5563] loop0: detected capacity change from 0 to 8192 [ 74.169222][ T5563] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.182238][ T5563] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 74.191536][ T5563] REISERFS (device loop0): using ordered data mode [ 74.198065][ T5563] reiserfs: using flush barriers [pid 5563] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5563] chdir("./file0") = 0 [pid 5563] ioctl(4, LOOP_CLR_FD) = 0 [pid 5563] close(4) = 0 [ 74.203791][ T5563] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.220151][ T5563] REISERFS (device loop0): checking transaction log (loop0) [ 74.228838][ T5563] REISERFS (device loop0): Using r5 hash to sort names [ 74.235885][ T5563] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 74.248587][ T5563] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5563] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5562] <... futex resumed>) = 0 [pid 5562] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 1 [pid 5563] mkdir("./file1", 000) = 0 [pid 5563] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5562] <... futex resumed>) = 0 [pid 5562] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 1 [pid 5563] mkdir("./bus", 000) = 0 [pid 5563] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5562] <... futex resumed>) = 0 [pid 5562] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 1 [pid 5563] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5563] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5562] <... futex resumed>) = 0 [pid 5562] exit_group(0) = ? [pid 5563] +++ exited with 0 +++ [pid 5562] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5562, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./162/binderfs") = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./162/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./162") = 0 mkdir("./163", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5565 attached , child_tidptr=0x5555559356d0) = 5565 [pid 5565] set_robust_list(0x5555559356e0, 24) = 0 [pid 5565] chdir("./163") = 0 [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5565] setpgid(0, 0) = 0 [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5565] write(3, "1000", 4) = 4 [pid 5565] close(3) = 0 [pid 5565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5565] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [ 74.262834][ T5563] overlayfs: upper fs needs to support d_type. [ 74.270319][ T5563] overlayfs: upper fs does not support tmpfile. [ 74.277567][ T5563] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.285486][ T5563] overlayfs: failed to resolve './file0': -2 [pid 5565] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5565] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5566 attached [pid 5566] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5566] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... clone resumed>, parent_tid=[5566], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5566 [pid 5565] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] <... futex resumed>) = 0 [pid 5565] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5566] memfd_create("syzkaller", 0) = 3 [pid 5566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5566] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5566] close(3) = 0 [pid 5566] mkdir("./file0", 0777) = 0 [ 74.372995][ T5566] loop0: detected capacity change from 0 to 8192 [ 74.382812][ T5566] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.396099][ T5566] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 74.405324][ T5566] REISERFS (device loop0): using ordered data mode [ 74.411826][ T5566] reiserfs: using flush barriers [pid 5566] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5566] chdir("./file0") = 0 [pid 5566] ioctl(4, LOOP_CLR_FD) = 0 [pid 5566] close(4) = 0 [pid 5566] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5566] mkdir("./file1", 000 [pid 5565] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... mkdir resumed>) = 0 [pid 5565] <... futex resumed>) = 0 [pid 5566] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] <... futex resumed>) = 0 [pid 5565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5566] mkdir("./bus", 000 [ 74.417750][ T5566] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.434112][ T5566] REISERFS (device loop0): checking transaction log (loop0) [ 74.442338][ T5566] REISERFS (device loop0): Using r5 hash to sort names [ 74.449309][ T5566] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 74.462033][ T5566] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5565] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... mkdir resumed>) = 0 [pid 5565] <... futex resumed>) = 0 [pid 5566] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] <... futex resumed>) = 0 [pid 5565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5566] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5565] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5566] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... futex resumed>) = 0 [pid 5565] exit_group(0 [pid 5566] <... futex resumed>) = ? [pid 5565] <... exit_group resumed>) = ? [pid 5566] +++ exited with 0 +++ [pid 5565] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5565, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./163/binderfs") = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./163/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./163") = 0 mkdir("./164", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5568 attached , child_tidptr=0x5555559356d0) = 5568 [pid 5568] set_robust_list(0x5555559356e0, 24) = 0 [pid 5568] chdir("./164") = 0 [pid 5568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5568] setpgid(0, 0) = 0 [pid 5568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5568] write(3, "1000", 4) = 4 [pid 5568] close(3) = 0 [pid 5568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5568] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5568] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5568] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5569 attached [pid 5569] set_robust_list(0x7f8d103ee9e0, 24) = 0 [ 74.475283][ T5566] overlayfs: upper fs needs to support d_type. [ 74.483274][ T5566] overlayfs: upper fs does not support tmpfile. [ 74.490407][ T5566] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.498163][ T5566] overlayfs: failed to resolve './file0': -2 [pid 5569] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5568] <... clone resumed>, parent_tid=[5569], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5569 [pid 5568] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5569] <... futex resumed>) = 0 [pid 5568] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5569] memfd_create("syzkaller", 0) = 3 [pid 5569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5569] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5569] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5569] close(3) = 0 [pid 5569] mkdir("./file0", 0777) = 0 [ 74.582650][ T5569] loop0: detected capacity change from 0 to 8192 [ 74.591603][ T5569] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.604948][ T5569] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 74.614209][ T5569] REISERFS (device loop0): using ordered data mode [ 74.620846][ T5569] reiserfs: using flush barriers [pid 5569] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5569] chdir("./file0") = 0 [pid 5569] ioctl(4, LOOP_CLR_FD) = 0 [pid 5569] close(4) = 0 [pid 5569] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5569] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5568] <... futex resumed>) = 0 [pid 5568] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5569] <... futex resumed>) = 0 [pid 5568] <... futex resumed>) = 1 [pid 5569] mkdir("./file1", 000 [pid 5568] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5569] <... mkdir resumed>) = 0 [pid 5569] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5568] <... futex resumed>) = 0 [pid 5569] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5568] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5568] <... futex resumed>) = 0 [pid 5569] mkdir("./bus", 000 [pid 5568] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5569] <... mkdir resumed>) = 0 [pid 5569] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5568] <... futex resumed>) = 0 [pid 5569] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5568] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.626633][ T5569] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.643184][ T5569] REISERFS (device loop0): checking transaction log (loop0) [ 74.651347][ T5569] REISERFS (device loop0): Using r5 hash to sort names [ 74.658415][ T5569] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 74.671138][ T5569] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5568] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5569] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5569] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5568] <... futex resumed>) = 0 [pid 5569] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5568] exit_group(0) = ? [pid 5569] <... futex resumed>) = ? [pid 5569] +++ exited with 0 +++ [pid 5568] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5568, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./164/binderfs") = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./164/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./164") = 0 mkdir("./165", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5571 ./strace-static-x86_64: Process 5571 attached [pid 5571] set_robust_list(0x5555559356e0, 24) = 0 [pid 5571] chdir("./165") = 0 [pid 5571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5571] setpgid(0, 0) = 0 [pid 5571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5571] write(3, "1000", 4) = 4 [pid 5571] close(3) = 0 [pid 5571] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5571] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5571] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5571] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5572], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5572 [pid 5571] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5571] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5572 attached [pid 5572] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5572] memfd_create("syzkaller", 0) = 3 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 74.692965][ T5569] overlayfs: upper fs needs to support d_type. [ 74.699383][ T5569] overlayfs: upper fs does not support tmpfile. [ 74.706289][ T5569] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.713778][ T5569] overlayfs: failed to resolve './file0': -2 [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5572] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5572] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5572] close(3) = 0 [pid 5572] mkdir("./file0", 0777) = 0 [ 74.790248][ T5572] loop0: detected capacity change from 0 to 8192 [ 74.799004][ T5572] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.812237][ T5572] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 74.821834][ T5572] REISERFS (device loop0): using ordered data mode [ 74.828370][ T5572] reiserfs: using flush barriers [pid 5572] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5572] chdir("./file0") = 0 [pid 5572] ioctl(4, LOOP_CLR_FD) = 0 [pid 5572] close(4) = 0 [pid 5572] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5572] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] <... futex resumed>) = 0 [pid 5571] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5571] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5572] <... futex resumed>) = 0 [pid 5572] mkdir("./file1", 000) = 0 [pid 5572] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] <... futex resumed>) = 0 [pid 5571] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5571] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5572] <... futex resumed>) = 1 [pid 5572] mkdir("./bus", 000) = 0 [pid 5572] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] <... futex resumed>) = 0 [pid 5571] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5571] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5572] <... futex resumed>) = 1 [ 74.833859][ T5572] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.850296][ T5572] REISERFS (device loop0): checking transaction log (loop0) [ 74.858352][ T5572] REISERFS (device loop0): Using r5 hash to sort names [ 74.865645][ T5572] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 74.878358][ T5572] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5572] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5572] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5571] <... futex resumed>) = 0 [pid 5572] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] exit_group(0 [pid 5572] <... futex resumed>) = ? [pid 5571] <... exit_group resumed>) = ? [pid 5572] +++ exited with 0 +++ [pid 5571] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5571, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./165/binderfs") = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./165/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./165") = 0 mkdir("./166", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5574 ./strace-static-x86_64: Process 5574 attached [pid 5574] set_robust_list(0x5555559356e0, 24) = 0 [pid 5574] chdir("./166") = 0 [pid 5574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5574] setpgid(0, 0) = 0 [pid 5574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5574] write(3, "1000", 4) = 4 [pid 5574] close(3) = 0 [pid 5574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5574] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5574] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5574] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5575], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5575 [pid 5574] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5575 attached [pid 5575] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5575] memfd_create("syzkaller", 0) = 3 [pid 5575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 74.900184][ T5572] overlayfs: upper fs needs to support d_type. [ 74.906632][ T5572] overlayfs: upper fs does not support tmpfile. [ 74.913207][ T5572] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.921071][ T5572] overlayfs: failed to resolve './file0': -2 [pid 5575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5575] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5575] close(3) = 0 [pid 5575] mkdir("./file0", 0777) = 0 [ 74.998777][ T5575] loop0: detected capacity change from 0 to 8192 [ 75.008564][ T5575] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.021710][ T5575] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.031068][ T5575] REISERFS (device loop0): using ordered data mode [ 75.037596][ T5575] reiserfs: using flush barriers [pid 5575] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5575] chdir("./file0") = 0 [pid 5575] ioctl(4, LOOP_CLR_FD) = 0 [pid 5575] close(4) = 0 [pid 5575] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] <... futex resumed>) = 0 [pid 5575] mkdir("./file1", 000) = 0 [pid 5575] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] <... futex resumed>) = 1 [pid 5575] mkdir("./bus", 000) = 0 [pid 5575] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] <... futex resumed>) = 1 [ 75.043112][ T5575] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.059399][ T5575] REISERFS (device loop0): checking transaction log (loop0) [ 75.067384][ T5575] REISERFS (device loop0): Using r5 hash to sort names [ 75.074609][ T5575] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 75.087352][ T5575] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5575] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5575] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5574] exit_group(0) = ? [pid 5575] +++ exited with 0 +++ [pid 5574] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5574, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./166/binderfs") = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./166/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./166") = 0 mkdir("./167", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5577 ./strace-static-x86_64: Process 5577 attached [pid 5577] set_robust_list(0x5555559356e0, 24) = 0 [pid 5577] chdir("./167") = 0 [pid 5577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5577] setpgid(0, 0) = 0 [pid 5577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5577] write(3, "1000", 4) = 4 [pid 5577] close(3) = 0 [pid 5577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5577] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5577] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 75.107333][ T5575] overlayfs: upper fs needs to support d_type. [ 75.113604][ T5575] overlayfs: upper fs does not support tmpfile. [ 75.120238][ T5575] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.127987][ T5575] overlayfs: failed to resolve './file0': -2 [pid 5577] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5578 attached , parent_tid=[5578], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5578 [pid 5578] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5578] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5577] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5578] memfd_create("syzkaller", 0 [pid 5577] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5578] <... memfd_create resumed>) = 3 [pid 5578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5578] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5578] close(3) = 0 [pid 5578] mkdir("./file0", 0777) = 0 [ 75.214783][ T5578] loop0: detected capacity change from 0 to 8192 [ 75.223407][ T5578] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.236451][ T5578] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.245684][ T5578] REISERFS (device loop0): using ordered data mode [ 75.252269][ T5578] reiserfs: using flush barriers [pid 5578] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5578] chdir("./file0") = 0 [pid 5578] ioctl(4, LOOP_CLR_FD) = 0 [pid 5578] close(4) = 0 [pid 5578] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5578] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... futex resumed>) = 0 [pid 5578] mkdir("./file1", 000) = 0 [pid 5578] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... futex resumed>) = 1 [pid 5578] mkdir("./bus", 000) = 0 [pid 5578] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... futex resumed>) = 1 [ 75.258104][ T5578] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.274369][ T5578] REISERFS (device loop0): checking transaction log (loop0) [ 75.282440][ T5578] REISERFS (device loop0): Using r5 hash to sort names [ 75.289594][ T5578] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 75.302334][ T5578] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5578] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5578] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = 0 [pid 5577] exit_group(0) = ? [pid 5578] <... futex resumed>) = ? [pid 5578] +++ exited with 0 +++ [pid 5577] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5577, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./167/binderfs") = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./167/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./167") = 0 mkdir("./168", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5580 ./strace-static-x86_64: Process 5580 attached [pid 5580] set_robust_list(0x5555559356e0, 24) = 0 [pid 5580] chdir("./168") = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] setpgid(0, 0) = 0 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5580] write(3, "1000", 4) = 4 [pid 5580] close(3) = 0 [pid 5580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5580] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5580] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5580] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5581], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5581 [pid 5580] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5581 attached [pid 5581] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5581] memfd_create("syzkaller", 0) = 3 [pid 5581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 75.322576][ T5578] overlayfs: upper fs needs to support d_type. [ 75.328855][ T5578] overlayfs: upper fs does not support tmpfile. [ 75.335667][ T5578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.343649][ T5578] overlayfs: failed to resolve './file0': -2 [pid 5581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5581] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5581] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5581] close(3) = 0 [pid 5581] mkdir("./file0", 0777) = 0 [ 75.423435][ T5581] loop0: detected capacity change from 0 to 8192 [ 75.432666][ T5581] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.445977][ T5581] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.455351][ T5581] REISERFS (device loop0): using ordered data mode [ 75.461882][ T5581] reiserfs: using flush barriers [pid 5581] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5581] chdir("./file0") = 0 [pid 5581] ioctl(4, LOOP_CLR_FD) = 0 [pid 5581] close(4) = 0 [pid 5581] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] mkdir("./file1", 000) = 0 [pid 5581] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... futex resumed>) = 1 [pid 5581] mkdir("./bus", 000) = 0 [pid 5581] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5581] <... futex resumed>) = 1 [ 75.467676][ T5581] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.483911][ T5581] REISERFS (device loop0): checking transaction log (loop0) [ 75.492301][ T5581] REISERFS (device loop0): Using r5 hash to sort names [ 75.499434][ T5581] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 75.512217][ T5581] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5581] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5581] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5581] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] <... futex resumed>) = 0 [pid 5580] exit_group(0) = ? [pid 5581] <... futex resumed>) = ? [pid 5581] +++ exited with 0 +++ [pid 5580] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./168/binderfs") = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./168/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./168") = 0 mkdir("./169", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5583 attached , child_tidptr=0x5555559356d0) = 5583 [pid 5583] set_robust_list(0x5555559356e0, 24) = 0 [pid 5583] chdir("./169") = 0 [pid 5583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5583] setpgid(0, 0) = 0 [pid 5583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5583] write(3, "1000", 4) = 4 [pid 5583] close(3) = 0 [pid 5583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5583] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5583] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5583] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5584 attached , parent_tid=[5584], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5584 [pid 5584] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5584] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [ 75.536382][ T5581] overlayfs: upper fs needs to support d_type. [ 75.542738][ T5581] overlayfs: upper fs does not support tmpfile. [ 75.549524][ T5581] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.557478][ T5581] overlayfs: failed to resolve './file0': -2 [pid 5583] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5584] <... futex resumed>) = 0 [pid 5584] memfd_create("syzkaller", 0 [pid 5583] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5584] <... memfd_create resumed>) = 3 [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5584] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5584] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5584] close(3) = 0 [pid 5584] mkdir("./file0", 0777) = 0 [ 75.643855][ T5584] loop0: detected capacity change from 0 to 8192 [ 75.652862][ T5584] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.665930][ T5584] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.675155][ T5584] REISERFS (device loop0): using ordered data mode [ 75.681671][ T5584] reiserfs: using flush barriers [pid 5584] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5584] chdir("./file0") = 0 [pid 5584] ioctl(4, LOOP_CLR_FD) = 0 [pid 5584] close(4) = 0 [pid 5584] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... futex resumed>) = 0 [pid 5583] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... futex resumed>) = 1 [pid 5584] mkdir("./file1", 000) = 0 [pid 5584] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... futex resumed>) = 0 [pid 5583] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... futex resumed>) = 1 [pid 5584] mkdir("./bus", 000) = 0 [pid 5584] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... futex resumed>) = 0 [pid 5583] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... futex resumed>) = 1 [ 75.687600][ T5584] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.704023][ T5584] REISERFS (device loop0): checking transaction log (loop0) [ 75.712235][ T5584] REISERFS (device loop0): Using r5 hash to sort names [ 75.719221][ T5584] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 75.731918][ T5584] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5584] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5584] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... futex resumed>) = 0 [pid 5583] exit_group(0) = ? [pid 5584] <... futex resumed>) = ? [pid 5584] +++ exited with 0 +++ [pid 5583] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5583, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./169/binderfs") = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./169/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./169") = 0 mkdir("./170", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5586 attached , child_tidptr=0x5555559356d0) = 5586 [pid 5586] set_robust_list(0x5555559356e0, 24) = 0 [pid 5586] chdir("./170") = 0 [pid 5586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5586] setpgid(0, 0) = 0 [pid 5586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5586] write(3, "1000", 4) = 4 [pid 5586] close(3) = 0 [pid 5586] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5586] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5586] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5586] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5587 attached , parent_tid=[5587], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5587 [pid 5587] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5587] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5586] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5587] <... futex resumed>) = 0 [pid 5586] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5587] memfd_create("syzkaller", 0) = 3 [pid 5587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 75.758525][ T5584] overlayfs: upper fs needs to support d_type. [ 75.764808][ T5584] overlayfs: upper fs does not support tmpfile. [ 75.771513][ T5584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.779405][ T5584] overlayfs: failed to resolve './file0': -2 [pid 5587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5587] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5587] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5587] close(3) = 0 [pid 5587] mkdir("./file0", 0777) = 0 [ 75.863091][ T5587] loop0: detected capacity change from 0 to 8192 [ 75.872054][ T5587] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.885111][ T5587] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.894252][ T5587] REISERFS (device loop0): using ordered data mode [ 75.900780][ T5587] reiserfs: using flush barriers [pid 5587] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5587] chdir("./file0") = 0 [pid 5587] ioctl(4, LOOP_CLR_FD) = 0 [pid 5587] close(4) = 0 [pid 5587] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5586] <... futex resumed>) = 0 [pid 5587] mkdir("./file1", 000 [ 75.906573][ T5587] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.922881][ T5587] REISERFS (device loop0): checking transaction log (loop0) [ 75.931065][ T5587] REISERFS (device loop0): Using r5 hash to sort names [ 75.938127][ T5587] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 75.950792][ T5587] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5586] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... mkdir resumed>) = 0 [pid 5586] <... futex resumed>) = 0 [pid 5587] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5587] <... futex resumed>) = 0 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5587] mkdir("./bus", 000 [pid 5586] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... mkdir resumed>) = 0 [pid 5586] <... futex resumed>) = 0 [pid 5587] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5587] <... futex resumed>) = 0 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5587] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5586] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5587] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5587] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5587] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5586] <... futex resumed>) = 0 [pid 5586] exit_group(0) = ? [pid 5587] <... futex resumed>) = ? [pid 5587] +++ exited with 0 +++ [pid 5586] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5586, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./170/binderfs") = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./170/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./170") = 0 mkdir("./171", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5589 ./strace-static-x86_64: Process 5589 attached [pid 5589] set_robust_list(0x5555559356e0, 24) = 0 [pid 5589] chdir("./171") = 0 [pid 5589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5589] setpgid(0, 0) = 0 [pid 5589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5589] write(3, "1000", 4) = 4 [pid 5589] close(3) = 0 [pid 5589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5589] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5589] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5589] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5590], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5590 [pid 5589] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5589] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5590 attached [pid 5590] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5590] memfd_create("syzkaller", 0) = 3 [pid 5590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 75.964913][ T5587] overlayfs: upper fs needs to support d_type. [ 75.973227][ T5587] overlayfs: upper fs does not support tmpfile. [ 75.980092][ T5587] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.987888][ T5587] overlayfs: failed to resolve './file0': -2 [pid 5590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5590] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5590] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5590] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5590] close(3) = 0 [pid 5590] mkdir("./file0", 0777) = 0 [ 76.059575][ T5590] loop0: detected capacity change from 0 to 8192 [ 76.068588][ T5590] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.081742][ T5590] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.091539][ T5590] REISERFS (device loop0): using ordered data mode [ 76.098069][ T5590] reiserfs: using flush barriers [pid 5590] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5590] chdir("./file0") = 0 [pid 5590] ioctl(4, LOOP_CLR_FD) = 0 [pid 5590] close(4) = 0 [pid 5590] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5589] <... futex resumed>) = 0 [pid 5589] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] <... futex resumed>) = 1 [pid 5589] <... futex resumed>) = 0 [pid 5589] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5590] mkdir("./file1", 000) = 0 [pid 5590] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5589] <... futex resumed>) = 0 [pid 5590] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5590] mkdir("./bus", 000 [pid 5589] <... futex resumed>) = 0 [pid 5589] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5590] <... mkdir resumed>) = 0 [pid 5590] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5589] <... futex resumed>) = 0 [pid 5590] <... futex resumed>) = 1 [pid 5589] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5589] <... futex resumed>) = 0 [ 76.103776][ T5590] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.120216][ T5590] REISERFS (device loop0): checking transaction log (loop0) [ 76.128460][ T5590] REISERFS (device loop0): Using r5 hash to sort names [ 76.135513][ T5590] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 76.148288][ T5590] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5589] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5590] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5590] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5589] <... futex resumed>) = 0 [pid 5590] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] exit_group(0 [pid 5590] <... futex resumed>) = ? [pid 5589] <... exit_group resumed>) = ? [pid 5590] +++ exited with 0 +++ [pid 5589] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5589, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./171/binderfs") = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./171/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./171/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./171") = 0 mkdir("./172", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5592 ./strace-static-x86_64: Process 5592 attached [pid 5592] set_robust_list(0x5555559356e0, 24) = 0 [pid 5592] chdir("./172") = 0 [pid 5592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5592] setpgid(0, 0) = 0 [pid 5592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5592] write(3, "1000", 4) = 4 [pid 5592] close(3) = 0 [pid 5592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5592] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5592] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5592] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5593], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5593 [pid 5592] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5593 attached [pid 5593] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5593] memfd_create("syzkaller", 0) = 3 [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 76.183728][ T5590] overlayfs: upper fs needs to support d_type. [ 76.190068][ T5590] overlayfs: upper fs does not support tmpfile. [ 76.196983][ T5590] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.204550][ T5590] overlayfs: failed to resolve './file0': -2 [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5593] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5593] close(3) = 0 [pid 5593] mkdir("./file0", 0777) = 0 [ 76.287258][ T5593] loop0: detected capacity change from 0 to 8192 [ 76.296081][ T5593] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.309116][ T5593] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.318753][ T5593] REISERFS (device loop0): using ordered data mode [ 76.325256][ T5593] reiserfs: using flush barriers [pid 5593] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5593] chdir("./file0") = 0 [pid 5593] ioctl(4, LOOP_CLR_FD) = 0 [pid 5593] close(4) = 0 [pid 5593] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5592] <... futex resumed>) = 0 [pid 5593] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5592] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5592] <... futex resumed>) = 0 [pid 5593] mkdir("./file1", 000 [pid 5592] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5593] <... mkdir resumed>) = 0 [pid 5593] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5592] <... futex resumed>) = 0 [pid 5593] mkdir("./bus", 000 [pid 5592] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... mkdir resumed>) = 0 [pid 5592] <... futex resumed>) = 0 [pid 5593] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5593] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5593] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5592] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 76.330836][ T5593] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.347196][ T5593] REISERFS (device loop0): checking transaction log (loop0) [ 76.355537][ T5593] REISERFS (device loop0): Using r5 hash to sort names [ 76.362649][ T5593] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 76.375417][ T5593] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5592] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5593] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5593] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5592] <... futex resumed>) = 0 [pid 5593] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5592] exit_group(0) = ? [pid 5593] <... futex resumed>) = ? [pid 5593] +++ exited with 0 +++ [pid 5592] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5592, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./172/binderfs") = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./172/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./172") = 0 mkdir("./173", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5595 ./strace-static-x86_64: Process 5595 attached [pid 5595] set_robust_list(0x5555559356e0, 24) = 0 [pid 5595] chdir("./173") = 0 [pid 5595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5595] setpgid(0, 0) = 0 [pid 5595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5595] write(3, "1000", 4) = 4 [pid 5595] close(3) = 0 [pid 5595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5595] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5595] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5595] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5596 attached , parent_tid=[5596], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5596 [pid 5596] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5596] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5595] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5596] memfd_create("syzkaller", 0 [pid 5595] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5596] <... memfd_create resumed>) = 3 [pid 5596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 76.402425][ T5593] overlayfs: upper fs needs to support d_type. [ 76.408687][ T5593] overlayfs: upper fs does not support tmpfile. [ 76.415593][ T5593] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.423218][ T5593] overlayfs: failed to resolve './file0': -2 [pid 5596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5596] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5596] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5596] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5596] close(3) = 0 [pid 5596] mkdir("./file0", 0777) = 0 [ 76.505568][ T5596] loop0: detected capacity change from 0 to 8192 [ 76.514082][ T5596] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.527359][ T5596] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.536671][ T5596] REISERFS (device loop0): using ordered data mode [ 76.543181][ T5596] reiserfs: using flush barriers [pid 5596] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5596] chdir("./file0") = 0 [pid 5596] ioctl(4, LOOP_CLR_FD) = 0 [pid 5596] close(4) = 0 [pid 5596] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] <... futex resumed>) = 1 [pid 5596] mkdir("./file1", 000) = 0 [pid 5596] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] <... futex resumed>) = 1 [ 76.549016][ T5596] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.565264][ T5596] REISERFS (device loop0): checking transaction log (loop0) [ 76.573289][ T5596] REISERFS (device loop0): Using r5 hash to sort names [ 76.580370][ T5596] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 76.593300][ T5596] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5596] mkdir("./bus", 000) = 0 [pid 5596] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5595] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] <... futex resumed>) = 1 [pid 5596] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5596] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5595] <... futex resumed>) = 0 [pid 5595] exit_group(0) = ? [pid 5596] +++ exited with 0 +++ [pid 5595] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5595, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./173/binderfs") = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./173/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./173") = 0 mkdir("./174", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5598 ./strace-static-x86_64: Process 5598 attached [pid 5598] set_robust_list(0x5555559356e0, 24) = 0 [pid 5598] chdir("./174") = 0 [pid 5598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5598] setpgid(0, 0) = 0 [pid 5598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5598] write(3, "1000", 4) = 4 [pid 5598] close(3) = 0 [pid 5598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5598] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5598] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5598] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5599], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5599 [pid 5598] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5598] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5599 attached [pid 5599] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5599] memfd_create("syzkaller", 0) = 3 [pid 5599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 76.607978][ T5596] overlayfs: upper fs needs to support d_type. [ 76.616746][ T5596] overlayfs: upper fs does not support tmpfile. [ 76.623452][ T5596] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.631330][ T5596] overlayfs: failed to resolve './file0': -2 [pid 5599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5599] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5599] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5599] close(3) = 0 [pid 5599] mkdir("./file0", 0777) = 0 [ 76.700477][ T5599] loop0: detected capacity change from 0 to 8192 [ 76.709803][ T5599] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.722862][ T5599] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.732094][ T5599] REISERFS (device loop0): using ordered data mode [ 76.738621][ T5599] reiserfs: using flush barriers [pid 5599] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5599] chdir("./file0") = 0 [pid 5599] ioctl(4, LOOP_CLR_FD) = 0 [pid 5599] close(4) = 0 [pid 5599] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5598] <... futex resumed>) = 0 [pid 5599] mkdir("./file1", 000 [pid 5598] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5599] <... mkdir resumed>) = 0 [pid 5598] <... futex resumed>) = 0 [ 76.744138][ T5599] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.760513][ T5599] REISERFS (device loop0): checking transaction log (loop0) [ 76.768533][ T5599] REISERFS (device loop0): Using r5 hash to sort names [ 76.775575][ T5599] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 76.788237][ T5599] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5599] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5598] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... futex resumed>) = 0 [pid 5598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5599] mkdir("./bus", 000 [pid 5598] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5599] <... mkdir resumed>) = 0 [pid 5598] <... futex resumed>) = 0 [pid 5599] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5598] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... futex resumed>) = 0 [pid 5598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5599] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5598] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5598] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5599] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5599] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5599] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5598] <... futex resumed>) = 0 [pid 5598] exit_group(0 [pid 5599] <... futex resumed>) = ? [pid 5598] <... exit_group resumed>) = ? [pid 5599] +++ exited with 0 +++ [pid 5598] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5598, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./174/binderfs") = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./174/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./174") = 0 mkdir("./175", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5601 ./strace-static-x86_64: Process 5601 attached [pid 5601] set_robust_list(0x5555559356e0, 24) = 0 [pid 5601] chdir("./175") = 0 [pid 5601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5601] setpgid(0, 0) = 0 [pid 5601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5601] write(3, "1000", 4) = 4 [pid 5601] close(3) = 0 [pid 5601] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5601] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5601] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5601] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5602 attached [pid 5602] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5602] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5601] <... clone resumed>, parent_tid=[5602], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5602 [pid 5601] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5602] <... futex resumed>) = 0 [pid 5601] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 76.801445][ T5599] overlayfs: upper fs needs to support d_type. [ 76.808007][ T5599] overlayfs: upper fs does not support tmpfile. [ 76.815149][ T5599] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.822640][ T5599] overlayfs: failed to resolve './file0': -2 [pid 5602] memfd_create("syzkaller", 0) = 3 [pid 5602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5602] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5602] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5602] close(3) = 0 [pid 5602] mkdir("./file0", 0777) = 0 [ 76.915606][ T5602] loop0: detected capacity change from 0 to 8192 [ 76.925119][ T5602] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.938123][ T5602] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.947431][ T5602] REISERFS (device loop0): using ordered data mode [ 76.953926][ T5602] reiserfs: using flush barriers [pid 5602] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5602] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5602] chdir("./file0") = 0 [pid 5602] ioctl(4, LOOP_CLR_FD) = 0 [pid 5602] close(4) = 0 [pid 5602] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5602] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5601] <... futex resumed>) = 0 [pid 5601] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5601] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5602] <... futex resumed>) = 0 [pid 5602] mkdir("./file1", 000) = 0 [pid 5602] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5601] <... futex resumed>) = 0 [pid 5602] mkdir("./bus", 000 [pid 5601] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... mkdir resumed>) = 0 [pid 5601] <... futex resumed>) = 0 [pid 5602] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5602] <... futex resumed>) = 0 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5602] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5601] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 76.959548][ T5602] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.975805][ T5602] REISERFS (device loop0): checking transaction log (loop0) [ 76.983821][ T5602] REISERFS (device loop0): Using r5 hash to sort names [ 76.990850][ T5602] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 77.003527][ T5602] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5601] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5602] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5602] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5601] <... futex resumed>) = 0 [pid 5602] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5601] exit_group(0 [pid 5602] <... futex resumed>) = ? [pid 5601] <... exit_group resumed>) = ? [pid 5602] +++ exited with 0 +++ [pid 5601] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5601, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./175/binderfs") = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./175/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./175") = 0 mkdir("./176", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5604 attached , child_tidptr=0x5555559356d0) = 5604 [pid 5604] set_robust_list(0x5555559356e0, 24) = 0 [pid 5604] chdir("./176") = 0 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5604] setpgid(0, 0) = 0 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1000", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5604] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.025883][ T5602] overlayfs: upper fs needs to support d_type. [ 77.032204][ T5602] overlayfs: upper fs does not support tmpfile. [ 77.038921][ T5602] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.046868][ T5602] overlayfs: failed to resolve './file0': -2 [pid 5604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5604] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5604] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5605], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5605 [pid 5604] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5604] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5605 attached [pid 5605] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5605] memfd_create("syzkaller", 0) = 3 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5605] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5605] close(3) = 0 [pid 5605] mkdir("./file0", 0777) = 0 [ 77.139920][ T5605] loop0: detected capacity change from 0 to 8192 [ 77.149314][ T5605] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.162466][ T5605] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.171797][ T5605] REISERFS (device loop0): using ordered data mode [ 77.178441][ T5605] reiserfs: using flush barriers [pid 5605] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5605] chdir("./file0") = 0 [pid 5605] ioctl(4, LOOP_CLR_FD) = 0 [pid 5605] close(4) = 0 [pid 5605] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] <... futex resumed>) = 0 [pid 5604] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] <... futex resumed>) = 1 [pid 5604] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] mkdir("./file1", 000) = 0 [pid 5605] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] <... futex resumed>) = 0 [pid 5604] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5604] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... futex resumed>) = 1 [pid 5605] mkdir("./bus", 000) = 0 [pid 5605] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] <... futex resumed>) = 0 [pid 5604] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5604] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... futex resumed>) = 1 [ 77.184132][ T5605] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.200766][ T5605] REISERFS (device loop0): checking transaction log (loop0) [ 77.208860][ T5605] REISERFS (device loop0): Using r5 hash to sort names [ 77.216010][ T5605] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 77.228700][ T5605] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5605] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5605] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5604] <... futex resumed>) = 0 [pid 5604] exit_group(0) = ? [pid 5605] +++ exited with 0 +++ [pid 5604] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./176/binderfs") = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./176/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./176") = 0 mkdir("./177", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5607 ./strace-static-x86_64: Process 5607 attached [pid 5607] set_robust_list(0x5555559356e0, 24) = 0 [pid 5607] chdir("./177") = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5607] setpgid(0, 0) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5607] write(3, "1000", 4) = 4 [pid 5607] close(3) = 0 [pid 5607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5607] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5607] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5607] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5608], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5608 [pid 5607] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5608 attached [pid 5608] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5608] memfd_create("syzkaller", 0) = 3 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 77.255674][ T5605] overlayfs: upper fs needs to support d_type. [ 77.261877][ T5605] overlayfs: upper fs does not support tmpfile. [ 77.268802][ T5605] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.277333][ T5605] overlayfs: failed to resolve './file0': -2 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5608] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5608] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5608] close(3) = 0 [pid 5608] mkdir("./file0", 0777) = 0 [ 77.360041][ T5608] loop0: detected capacity change from 0 to 8192 [ 77.369785][ T5608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.383021][ T5608] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.392261][ T5608] REISERFS (device loop0): using ordered data mode [ 77.398840][ T5608] reiserfs: using flush barriers [pid 5608] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5608] chdir("./file0") = 0 [pid 5608] ioctl(4, LOOP_CLR_FD) = 0 [pid 5608] close(4) = 0 [pid 5608] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5608] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5607] <... futex resumed>) = 0 [pid 5607] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] <... futex resumed>) = 0 [pid 5607] <... futex resumed>) = 1 [pid 5608] mkdir("./file1", 000 [pid 5607] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... mkdir resumed>) = 0 [pid 5608] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5608] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5607] <... futex resumed>) = 0 [pid 5607] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] <... futex resumed>) = 0 [pid 5607] <... futex resumed>) = 1 [pid 5608] mkdir("./bus", 000 [pid 5607] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... mkdir resumed>) = 0 [pid 5608] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5607] <... futex resumed>) = 0 [pid 5608] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5607] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.404612][ T5608] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.421106][ T5608] REISERFS (device loop0): checking transaction log (loop0) [ 77.429373][ T5608] REISERFS (device loop0): Using r5 hash to sort names [ 77.436343][ T5608] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 77.449562][ T5608] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5607] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5608] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5608] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5607] <... futex resumed>) = 0 [pid 5607] exit_group(0 [pid 5608] <... futex resumed>) = ? [pid 5607] <... exit_group resumed>) = ? [pid 5608] +++ exited with 0 +++ [pid 5607] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./177/binderfs") = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./177/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./177") = 0 mkdir("./178", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5610 ./strace-static-x86_64: Process 5610 attached [pid 5610] set_robust_list(0x5555559356e0, 24) = 0 [pid 5610] chdir("./178") = 0 [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5610] setpgid(0, 0) = 0 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5610] write(3, "1000", 4) = 4 [pid 5610] close(3) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5610] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5610] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5610] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5611 attached [pid 5611] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5611] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... clone resumed>, parent_tid=[5611], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5611 [pid 5610] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = 0 [pid 5610] <... futex resumed>) = 1 [pid 5610] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] memfd_create("syzkaller", 0) = 3 [pid 5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 77.477390][ T5608] overlayfs: upper fs needs to support d_type. [ 77.483668][ T5608] overlayfs: upper fs does not support tmpfile. [ 77.490622][ T5608] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.498354][ T5608] overlayfs: failed to resolve './file0': -2 [pid 5611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5611] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5611] close(3) = 0 [pid 5611] mkdir("./file0", 0777) = 0 [ 77.582380][ T5611] loop0: detected capacity change from 0 to 8192 [ 77.591437][ T5611] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.604514][ T5611] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.613808][ T5611] REISERFS (device loop0): using ordered data mode [ 77.620601][ T5611] reiserfs: using flush barriers [pid 5611] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5611] chdir("./file0") = 0 [pid 5611] ioctl(4, LOOP_CLR_FD) = 0 [pid 5611] close(4) = 0 [pid 5611] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... futex resumed>) = 0 [pid 5610] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = 0 [pid 5610] <... futex resumed>) = 1 [pid 5611] mkdir("./file1", 000 [pid 5610] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... mkdir resumed>) = 0 [pid 5611] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5611] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 5611] mkdir("./bus", 000 [pid 5610] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... mkdir resumed>) = 0 [pid 5611] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [ 77.626466][ T5611] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.642730][ T5611] REISERFS (device loop0): checking transaction log (loop0) [ 77.650943][ T5611] REISERFS (device loop0): Using r5 hash to sort names [ 77.657904][ T5611] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 77.670577][ T5611] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5610] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5610] <... futex resumed>) = 0 [pid 5610] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5611] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = 0 [pid 5610] exit_group(0) = ? [pid 5611] <... futex resumed>) = ? [pid 5611] +++ exited with 0 +++ [pid 5610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./178/binderfs") = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./178/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./178/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./178") = 0 mkdir("./179", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5613 ./strace-static-x86_64: Process 5613 attached [pid 5613] set_robust_list(0x5555559356e0, 24) = 0 [pid 5613] chdir("./179") = 0 [pid 5613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5613] setpgid(0, 0) = 0 [pid 5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5613] write(3, "1000", 4) = 4 [pid 5613] close(3) = 0 [pid 5613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5613] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5613] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5613] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5614 attached , parent_tid=[5614], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5614 [pid 5613] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5614] memfd_create("syzkaller", 0) = 3 [pid 5614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 77.691696][ T5611] overlayfs: upper fs needs to support d_type. [ 77.698464][ T5611] overlayfs: upper fs does not support tmpfile. [ 77.705333][ T5611] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.712908][ T5611] overlayfs: failed to resolve './file0': -2 [pid 5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5614] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5614] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5614] close(3) = 0 [pid 5614] mkdir("./file0", 0777) = 0 [ 77.789259][ T5614] loop0: detected capacity change from 0 to 8192 [ 77.798614][ T5614] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.811673][ T5614] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.820880][ T5614] REISERFS (device loop0): using ordered data mode [ 77.827444][ T5614] reiserfs: using flush barriers [pid 5614] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5614] chdir("./file0") = 0 [pid 5614] ioctl(4, LOOP_CLR_FD) = 0 [pid 5614] close(4) = 0 [pid 5614] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... futex resumed>) = 0 [pid 5613] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... futex resumed>) = 1 [pid 5614] mkdir("./file1", 000) = 0 [pid 5614] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... futex resumed>) = 0 [pid 5613] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... futex resumed>) = 1 [pid 5614] mkdir("./bus", 000) = 0 [pid 5614] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... futex resumed>) = 0 [pid 5613] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... futex resumed>) = 1 [ 77.832965][ T5614] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.849468][ T5614] REISERFS (device loop0): checking transaction log (loop0) [ 77.857686][ T5614] REISERFS (device loop0): Using r5 hash to sort names [ 77.864822][ T5614] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 77.877532][ T5614] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5614] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5614] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] <... futex resumed>) = 0 [pid 5614] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5613] exit_group(0) = ? [pid 5614] <... futex resumed>) = ? [pid 5614] +++ exited with 0 +++ [pid 5613] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5613, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./179/binderfs") = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./179/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./179") = 0 mkdir("./180", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5616 ./strace-static-x86_64: Process 5616 attached [pid 5616] set_robust_list(0x5555559356e0, 24) = 0 [pid 5616] chdir("./180") = 0 [pid 5616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5616] setpgid(0, 0) = 0 [pid 5616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5616] write(3, "1000", 4) = 4 [pid 5616] close(3) = 0 [pid 5616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5616] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5616] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5616] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5617 attached [pid 5617] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5617] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] <... clone resumed>, parent_tid=[5617], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5617 [pid 5616] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [ 77.901746][ T5614] overlayfs: upper fs needs to support d_type. [ 77.908232][ T5614] overlayfs: upper fs does not support tmpfile. [ 77.915115][ T5614] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.923006][ T5614] overlayfs: failed to resolve './file0': -2 [pid 5617] memfd_create("syzkaller", 0) = 3 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5616] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5617] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5617] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5617] close(3) = 0 [pid 5617] mkdir("./file0", 0777) = 0 [ 78.009235][ T5617] loop0: detected capacity change from 0 to 8192 [ 78.018352][ T5617] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.031370][ T5617] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.040589][ T5617] REISERFS (device loop0): using ordered data mode [ 78.047113][ T5617] reiserfs: using flush barriers [pid 5617] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5617] chdir("./file0") = 0 [pid 5617] ioctl(4, LOOP_CLR_FD) = 0 [pid 5617] close(4) = 0 [pid 5617] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] <... futex resumed>) = 1 [pid 5617] mkdir("./file1", 000) = 0 [pid 5617] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] <... futex resumed>) = 1 [pid 5617] mkdir("./bus", 000) = 0 [pid 5617] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5617] <... futex resumed>) = 1 [ 78.052624][ T5617] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.068988][ T5617] REISERFS (device loop0): checking transaction log (loop0) [ 78.077039][ T5617] REISERFS (device loop0): Using r5 hash to sort names [ 78.084091][ T5617] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 78.096864][ T5617] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5617] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5617] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = 0 [pid 5616] exit_group(0) = ? [pid 5617] <... futex resumed>) = ? [pid 5617] +++ exited with 0 +++ [pid 5616] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5616, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./180/binderfs") = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./180/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./180") = 0 mkdir("./181", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5619 attached , child_tidptr=0x5555559356d0) = 5619 [pid 5619] set_robust_list(0x5555559356e0, 24) = 0 [pid 5619] chdir("./181") = 0 [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5619] setpgid(0, 0) = 0 [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5619] write(3, "1000", 4) = 4 [pid 5619] close(3) = 0 [pid 5619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5619] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5619] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5619] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5620 attached [pid 5620] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5620] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5619] <... clone resumed>, parent_tid=[5620], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5620 [pid 5619] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [ 78.116150][ T5617] overlayfs: upper fs needs to support d_type. [ 78.122608][ T5617] overlayfs: upper fs does not support tmpfile. [ 78.129207][ T5617] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.137065][ T5617] overlayfs: failed to resolve './file0': -2 [pid 5620] memfd_create("syzkaller", 0) = 3 [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5619] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5620] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5620] close(3) = 0 [pid 5620] mkdir("./file0", 0777) = 0 [ 78.223654][ T5620] loop0: detected capacity change from 0 to 8192 [ 78.233491][ T5620] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.246500][ T5620] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.255812][ T5620] REISERFS (device loop0): using ordered data mode [ 78.262433][ T5620] reiserfs: using flush barriers [pid 5620] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5620] chdir("./file0") = 0 [pid 5620] ioctl(4, LOOP_CLR_FD) = 0 [pid 5620] close(4) = 0 [pid 5620] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5619] <... futex resumed>) = 0 [pid 5619] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5619] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5620] <... futex resumed>) = 1 [pid 5620] mkdir("./file1", 000) = 0 [pid 5620] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5619] <... futex resumed>) = 0 [pid 5619] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5620] <... futex resumed>) = 1 [pid 5619] <... futex resumed>) = 0 [pid 5620] mkdir("./bus", 000) = 0 [pid 5620] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5619] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5619] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5620] <... futex resumed>) = 0 [pid 5619] <... futex resumed>) = 1 [pid 5619] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 78.268253][ T5620] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.284947][ T5620] REISERFS (device loop0): checking transaction log (loop0) [ 78.293093][ T5620] REISERFS (device loop0): Using r5 hash to sort names [ 78.300162][ T5620] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 78.312985][ T5620] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5620] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5620] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5619] <... futex resumed>) = 0 [pid 5619] exit_group(0) = ? [pid 5620] <... futex resumed>) = ? [pid 5620] +++ exited with 0 +++ [pid 5619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./181/binderfs") = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./181/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./181/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./181") = 0 mkdir("./182", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5622 attached , child_tidptr=0x5555559356d0) = 5622 [pid 5622] set_robust_list(0x5555559356e0, 24) = 0 [pid 5622] chdir("./182") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5622] write(3, "1000", 4) = 4 [pid 5622] close(3) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5622] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5622] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5622] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5623 attached , parent_tid=[5623], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5623 [pid 5623] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5623] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 0 [pid 5623] memfd_create("syzkaller", 0) = 3 [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 78.334523][ T5620] overlayfs: upper fs needs to support d_type. [ 78.340831][ T5620] overlayfs: upper fs does not support tmpfile. [ 78.348134][ T5620] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.355995][ T5620] overlayfs: failed to resolve './file0': -2 [pid 5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5623] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5623] close(3) = 0 [pid 5623] mkdir("./file0", 0777) = 0 [ 78.436891][ T5623] loop0: detected capacity change from 0 to 8192 [ 78.446070][ T5623] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.459085][ T5623] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.468379][ T5623] REISERFS (device loop0): using ordered data mode [ 78.474928][ T5623] reiserfs: using flush barriers [pid 5623] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5623] chdir("./file0") = 0 [pid 5623] ioctl(4, LOOP_CLR_FD) = 0 [pid 5623] close(4) = 0 [pid 5623] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 1 [pid 5623] mkdir("./file1", 000) = 0 [pid 5623] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 1 [pid 5623] mkdir("./bus", 000) = 0 [pid 5623] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 1 [ 78.480609][ T5623] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.497038][ T5623] REISERFS (device loop0): checking transaction log (loop0) [ 78.505433][ T5623] REISERFS (device loop0): Using r5 hash to sort names [ 78.512684][ T5623] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 78.525420][ T5623] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5623] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5623] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5622] exit_group(0) = ? [pid 5623] +++ exited with 0 +++ [pid 5622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./182/binderfs") = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./182/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./182") = 0 mkdir("./183", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5625 ./strace-static-x86_64: Process 5625 attached [pid 5625] set_robust_list(0x5555559356e0, 24) = 0 [pid 5625] chdir("./183") = 0 [pid 5625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5625] setpgid(0, 0) = 0 [pid 5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5625] write(3, "1000", 4) = 4 [pid 5625] close(3) = 0 [pid 5625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5625] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5625] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5625] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5626 attached , parent_tid=[5626], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5626 [pid 5626] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5626] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5625] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 78.546320][ T5623] overlayfs: upper fs needs to support d_type. [ 78.552618][ T5623] overlayfs: upper fs does not support tmpfile. [ 78.559489][ T5623] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.567155][ T5623] overlayfs: failed to resolve './file0': -2 [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5626] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5626] close(3) = 0 [pid 5626] mkdir("./file0", 0777) = 0 [ 78.650136][ T5626] loop0: detected capacity change from 0 to 8192 [ 78.659320][ T5626] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.672717][ T5626] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.682264][ T5626] REISERFS (device loop0): using ordered data mode [ 78.688872][ T5626] reiserfs: using flush barriers [pid 5626] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5626] chdir("./file0") = 0 [pid 5626] ioctl(4, LOOP_CLR_FD) = 0 [pid 5626] close(4) = 0 [pid 5626] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... futex resumed>) = 1 [pid 5626] mkdir("./file1", 000) = 0 [pid 5626] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... futex resumed>) = 1 [pid 5626] mkdir("./bus", 000) = 0 [pid 5626] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... futex resumed>) = 1 [ 78.694542][ T5626] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.710992][ T5626] REISERFS (device loop0): checking transaction log (loop0) [ 78.719172][ T5626] REISERFS (device loop0): Using r5 hash to sort names [ 78.726148][ T5626] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 78.738932][ T5626] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5626] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5626] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5625] exit_group(0) = ? [pid 5626] +++ exited with 0 +++ [pid 5625] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5625, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./183/binderfs") = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./183/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./183/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./183") = 0 mkdir("./184", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5628 ./strace-static-x86_64: Process 5628 attached [pid 5628] set_robust_list(0x5555559356e0, 24) = 0 [pid 5628] chdir("./184") = 0 [pid 5628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5628] setpgid(0, 0) = 0 [pid 5628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5628] write(3, "1000", 4) = 4 [pid 5628] close(3) = 0 [pid 5628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5628] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5628] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5628] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5629 attached , parent_tid=[5629], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5629 [pid 5628] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5629] memfd_create("syzkaller", 0) = 3 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5628] <... futex resumed>) = 0 [pid 5629] <... mmap resumed>) = 0x7f8d07fce000 [ 78.766017][ T5626] overlayfs: upper fs needs to support d_type. [ 78.772459][ T5626] overlayfs: upper fs does not support tmpfile. [ 78.779228][ T5626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.787500][ T5626] overlayfs: failed to resolve './file0': -2 [pid 5628] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5629] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5629] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5629] close(3) = 0 [pid 5629] mkdir("./file0", 0777) = 0 [ 78.870079][ T5629] loop0: detected capacity change from 0 to 8192 [ 78.879052][ T5629] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.892139][ T5629] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.901394][ T5629] REISERFS (device loop0): using ordered data mode [ 78.907939][ T5629] reiserfs: using flush barriers [pid 5629] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5629] chdir("./file0") = 0 [pid 5629] ioctl(4, LOOP_CLR_FD) = 0 [pid 5629] close(4) = 0 [pid 5629] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... futex resumed>) = 0 [pid 5628] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] <... futex resumed>) = 1 [pid 5629] mkdir("./file1", 000) = 0 [pid 5629] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... futex resumed>) = 0 [pid 5628] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] <... futex resumed>) = 1 [ 78.913577][ T5629] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.930033][ T5629] REISERFS (device loop0): checking transaction log (loop0) [ 78.938220][ T5629] REISERFS (device loop0): Using r5 hash to sort names [ 78.945360][ T5629] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 78.958208][ T5629] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5629] mkdir("./bus", 000) = 0 [pid 5629] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... futex resumed>) = 0 [pid 5628] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] <... futex resumed>) = 1 [pid 5629] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5629] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5628] <... futex resumed>) = 0 [pid 5628] exit_group(0) = ? [pid 5629] +++ exited with 0 +++ [pid 5628] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5628, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./184/binderfs") = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./184/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./184/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./184") = 0 mkdir("./185", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5631 ./strace-static-x86_64: Process 5631 attached [pid 5631] set_robust_list(0x5555559356e0, 24) = 0 [pid 5631] chdir("./185") = 0 [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1000", 4) = 4 [pid 5631] close(3) = 0 [pid 5631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5631] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5631] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5631] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5632 attached [pid 5632] set_robust_list(0x7f8d103ee9e0, 24 [pid 5631] <... clone resumed>, parent_tid=[5632], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5632 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 78.971764][ T5629] overlayfs: upper fs needs to support d_type. [ 78.978340][ T5629] overlayfs: upper fs does not support tmpfile. [ 78.985187][ T5629] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.992858][ T5629] overlayfs: failed to resolve './file0': -2 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5632] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5632] close(3) = 0 [pid 5632] mkdir("./file0", 0777) = 0 [ 79.073199][ T5632] loop0: detected capacity change from 0 to 8192 [ 79.081935][ T5632] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.095085][ T5632] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.104367][ T5632] REISERFS (device loop0): using ordered data mode [ 79.110926][ T5632] reiserfs: using flush barriers [pid 5632] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./file0") = 0 [pid 5632] ioctl(4, LOOP_CLR_FD) = 0 [pid 5632] close(4) = 0 [pid 5632] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] <... futex resumed>) = 0 [pid 5632] mkdir("./file1", 000 [pid 5631] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... mkdir resumed>) = 0 [pid 5632] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] <... futex resumed>) = 0 [pid 5632] mkdir("./bus", 000 [pid 5631] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... mkdir resumed>) = 0 [pid 5632] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 79.116396][ T5632] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.132742][ T5632] REISERFS (device loop0): checking transaction log (loop0) [ 79.140737][ T5632] REISERFS (device loop0): Using r5 hash to sort names [ 79.147762][ T5632] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 79.160494][ T5632] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5632] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5632] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] exit_group(0 [pid 5632] <... futex resumed>) = ? [pid 5631] <... exit_group resumed>) = ? [pid 5632] +++ exited with 0 +++ [pid 5631] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./185/binderfs") = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./185/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./185") = 0 mkdir("./186", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5634 ./strace-static-x86_64: Process 5634 attached [pid 5634] set_robust_list(0x5555559356e0, 24) = 0 [pid 5634] chdir("./186") = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5634] write(3, "1000", 4) = 4 [pid 5634] close(3) = 0 [pid 5634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5634] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5634] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5634] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5635 attached [pid 5635] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5635] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... clone resumed>, parent_tid=[5635], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5635 [pid 5634] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] <... futex resumed>) = 0 [pid 5634] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5635] memfd_create("syzkaller", 0) = 3 [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 79.184440][ T5632] overlayfs: upper fs needs to support d_type. [ 79.190664][ T5632] overlayfs: upper fs does not support tmpfile. [ 79.197550][ T5632] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.205358][ T5632] overlayfs: failed to resolve './file0': -2 [pid 5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5635] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5635] close(3) = 0 [pid 5635] mkdir("./file0", 0777) = 0 [ 79.289638][ T5635] loop0: detected capacity change from 0 to 8192 [ 79.298919][ T5635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.312119][ T5635] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.321317][ T5635] REISERFS (device loop0): using ordered data mode [ 79.327846][ T5635] reiserfs: using flush barriers [pid 5635] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5635] chdir("./file0") = 0 [pid 5635] ioctl(4, LOOP_CLR_FD) = 0 [pid 5635] close(4) = 0 [pid 5635] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5635] mkdir("./file1", 000 [pid 5634] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] <... mkdir resumed>) = 0 [pid 5634] <... futex resumed>) = 0 [pid 5635] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5634] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... futex resumed>) = 0 [pid 5634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5635] mkdir("./bus", 000 [pid 5634] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] <... mkdir resumed>) = 0 [pid 5634] <... futex resumed>) = 0 [pid 5635] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5634] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... futex resumed>) = 0 [pid 5634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5635] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5634] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 79.333385][ T5635] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.349911][ T5635] REISERFS (device loop0): checking transaction log (loop0) [ 79.357993][ T5635] REISERFS (device loop0): Using r5 hash to sort names [ 79.365029][ T5635] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 79.377721][ T5635] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5634] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5635] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5635] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] exit_group(0 [pid 5635] <... futex resumed>) = ? [pid 5634] <... exit_group resumed>) = ? [pid 5635] +++ exited with 0 +++ [pid 5634] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5634, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./186/binderfs") = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./186/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./186/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./186") = 0 mkdir("./187", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5637 ./strace-static-x86_64: Process 5637 attached [pid 5637] set_robust_list(0x5555559356e0, 24) = 0 [pid 5637] chdir("./187") = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5637] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5637] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5637] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5638 attached , parent_tid=[5638], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5638 [pid 5638] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5638] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5637] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5638] memfd_create("syzkaller", 0) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 79.396274][ T5635] overlayfs: upper fs needs to support d_type. [ 79.402744][ T5635] overlayfs: upper fs does not support tmpfile. [ 79.409447][ T5635] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.417301][ T5635] overlayfs: failed to resolve './file0': -2 [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5638] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5638] close(3) = 0 [pid 5638] mkdir("./file0", 0777) = 0 [ 79.499539][ T5638] loop0: detected capacity change from 0 to 8192 [ 79.508723][ T5638] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.521982][ T5638] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.531178][ T5638] REISERFS (device loop0): using ordered data mode [ 79.537696][ T5638] reiserfs: using flush barriers [pid 5638] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5638] chdir("./file0") = 0 [pid 5638] ioctl(4, LOOP_CLR_FD) = 0 [pid 5638] close(4) = 0 [pid 5638] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] <... futex resumed>) = 0 [pid 5637] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = 0 [pid 5637] <... futex resumed>) = 1 [pid 5638] mkdir("./file1", 000 [pid 5637] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... mkdir resumed>) = 0 [pid 5638] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5638] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 5638] mkdir("./bus", 000 [pid 5637] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... mkdir resumed>) = 0 [pid 5638] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5638] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 5638] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 79.543167][ T5638] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.559508][ T5638] REISERFS (device loop0): checking transaction log (loop0) [ 79.567558][ T5638] REISERFS (device loop0): Using r5 hash to sort names [ 79.574516][ T5638] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 79.587212][ T5638] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5637] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5638] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... futex resumed>) = 0 [pid 5637] exit_group(0) = ? [pid 5638] <... futex resumed>) = ? [pid 5638] +++ exited with 0 +++ [pid 5637] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./187/binderfs") = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./187/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./187/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./187") = 0 mkdir("./188", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5640 attached , child_tidptr=0x5555559356d0) = 5640 [pid 5640] set_robust_list(0x5555559356e0, 24) = 0 [pid 5640] chdir("./188") = 0 [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5640] setpgid(0, 0) = 0 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5640] write(3, "1000", 4) = 4 [pid 5640] close(3) = 0 [pid 5640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5640] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5640] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5640] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5641], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5641 ./strace-static-x86_64: Process 5641 attached [pid 5641] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5641] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5640] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5641] memfd_create("syzkaller", 0 [pid 5640] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5641] <... memfd_create resumed>) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 79.611945][ T5638] overlayfs: upper fs needs to support d_type. [ 79.618203][ T5638] overlayfs: upper fs does not support tmpfile. [ 79.625048][ T5638] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.632985][ T5638] overlayfs: failed to resolve './file0': -2 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5641] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5641] close(3) = 0 [pid 5641] mkdir("./file0", 0777) = 0 [ 79.709827][ T5641] loop0: detected capacity change from 0 to 8192 [ 79.719507][ T5641] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.732525][ T5641] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.741884][ T5641] REISERFS (device loop0): using ordered data mode [ 79.748420][ T5641] reiserfs: using flush barriers [pid 5641] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5641] chdir("./file0") = 0 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = 0 [pid 5640] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5640] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] <... futex resumed>) = 1 [pid 5641] mkdir("./file1", 000) = 0 [pid 5641] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = 0 [pid 5640] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5640] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] <... futex resumed>) = 1 [pid 5641] mkdir("./bus", 000) = 0 [pid 5641] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = 0 [pid 5640] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5640] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] <... futex resumed>) = 1 [ 79.753963][ T5641] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.770284][ T5641] REISERFS (device loop0): checking transaction log (loop0) [ 79.778288][ T5641] REISERFS (device loop0): Using r5 hash to sort names [ 79.785278][ T5641] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 79.797961][ T5641] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5641] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5641] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = 0 [pid 5640] exit_group(0) = ? [pid 5641] <... futex resumed>) = ? [pid 5641] +++ exited with 0 +++ [pid 5640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5640, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./188/binderfs") = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./188/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./188") = 0 mkdir("./189", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5644 attached , child_tidptr=0x5555559356d0) = 5644 [pid 5644] set_robust_list(0x5555559356e0, 24) = 0 [pid 5644] chdir("./189") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5644] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 79.814908][ T5641] overlayfs: upper fs needs to support d_type. [ 79.821311][ T5641] overlayfs: upper fs does not support tmpfile. [ 79.828516][ T5641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.836431][ T5641] overlayfs: failed to resolve './file0': -2 [pid 5644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5644] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5644] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5645 attached , parent_tid=[5645], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5645 [pid 5645] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5645] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5644] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5645] <... futex resumed>) = 0 [pid 5644] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5645] memfd_create("syzkaller", 0) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5645] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5645] close(3) = 0 [pid 5645] mkdir("./file0", 0777) = 0 [ 79.925245][ T5645] loop0: detected capacity change from 0 to 8192 [ 79.934095][ T5645] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.947201][ T5645] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.956698][ T5645] REISERFS (device loop0): using ordered data mode [ 79.963192][ T5645] reiserfs: using flush barriers [pid 5645] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5645] chdir("./file0") = 0 [pid 5645] ioctl(4, LOOP_CLR_FD) = 0 [pid 5645] close(4) = 0 [pid 5645] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = 0 [pid 5644] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5644] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] <... futex resumed>) = 1 [pid 5645] mkdir("./file1", 000) = 0 [pid 5645] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = 0 [pid 5644] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5644] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] <... futex resumed>) = 1 [pid 5645] mkdir("./bus", 000) = 0 [pid 5645] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = 0 [pid 5644] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5644] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5645] <... futex resumed>) = 1 [ 79.968883][ T5645] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.985227][ T5645] REISERFS (device loop0): checking transaction log (loop0) [ 79.993210][ T5645] REISERFS (device loop0): Using r5 hash to sort names [ 80.001045][ T5645] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 80.013747][ T5645] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5645] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5645] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5645] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5644] <... futex resumed>) = 0 [pid 5644] exit_group(0) = ? [pid 5645] <... futex resumed>) = ? [pid 5645] +++ exited with 0 +++ [pid 5644] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./189/binderfs") = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./189/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./189") = 0 mkdir("./190", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5647 ./strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x5555559356e0, 24) = 0 [pid 5647] chdir("./190") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5647] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5648 attached , parent_tid=[5648], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5648 [pid 5648] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5648] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5648] <... futex resumed>) = 0 [pid 5647] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5648] memfd_create("syzkaller", 0) = 3 [ 80.027873][ T5645] overlayfs: upper fs needs to support d_type. [ 80.034278][ T5645] overlayfs: upper fs does not support tmpfile. [ 80.040981][ T5645] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.048581][ T5645] overlayfs: failed to resolve './file0': -2 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5648] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5648] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5648] close(3) = 0 [pid 5648] mkdir("./file0", 0777) = 0 [ 80.133155][ T5648] loop0: detected capacity change from 0 to 8192 [ 80.142371][ T5648] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.155477][ T5648] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.164752][ T5648] REISERFS (device loop0): using ordered data mode [ 80.171324][ T5648] reiserfs: using flush barriers [pid 5648] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5648] chdir("./file0") = 0 [pid 5648] ioctl(4, LOOP_CLR_FD) = 0 [pid 5648] close(4) = 0 [pid 5648] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5647] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... futex resumed>) = 1 [pid 5648] mkdir("./file1", 000) = 0 [pid 5648] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5647] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... futex resumed>) = 1 [pid 5648] mkdir("./bus", 000) = 0 [pid 5648] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5647] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... futex resumed>) = 1 [ 80.177845][ T5648] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.194426][ T5648] REISERFS (device loop0): checking transaction log (loop0) [ 80.202528][ T5648] REISERFS (device loop0): Using r5 hash to sort names [ 80.209610][ T5648] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 80.222819][ T5648] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5648] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5648] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5647] exit_group(0 [pid 5648] <... futex resumed>) = ? [pid 5647] <... exit_group resumed>) = ? [pid 5648] +++ exited with 0 +++ [pid 5647] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./190/binderfs") = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./190/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./190") = 0 mkdir("./191", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5650 ./strace-static-x86_64: Process 5650 attached [pid 5650] set_robust_list(0x5555559356e0, 24) = 0 [pid 5650] chdir("./191") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5650] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5650] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5650] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5651 attached , parent_tid=[5651], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5651 [pid 5651] set_robust_list(0x7f8d103ee9e0, 24 [pid 5650] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5651] memfd_create("syzkaller", 0 [pid 5650] <... futex resumed>) = 0 [pid 5651] <... memfd_create resumed>) = 3 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5650] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5651] <... mmap resumed>) = 0x7f8d07fce000 [ 80.238101][ T5648] overlayfs: upper fs needs to support d_type. [ 80.244781][ T5648] overlayfs: upper fs does not support tmpfile. [ 80.251571][ T5648] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.259533][ T5648] overlayfs: failed to resolve './file0': -2 [pid 5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5651] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5651] close(3) = 0 [pid 5651] mkdir("./file0", 0777) = 0 [ 80.344063][ T5651] loop0: detected capacity change from 0 to 8192 [ 80.353964][ T5651] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.367203][ T5651] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.376516][ T5651] REISERFS (device loop0): using ordered data mode [ 80.383046][ T5651] reiserfs: using flush barriers [pid 5651] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5651] chdir("./file0") = 0 [pid 5651] ioctl(4, LOOP_CLR_FD) = 0 [pid 5651] close(4) = 0 [pid 5651] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... futex resumed>) = 1 [pid 5651] mkdir("./file1", 000) = 0 [pid 5651] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... futex resumed>) = 1 [pid 5651] mkdir("./bus", 000) = 0 [pid 5651] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5651] <... futex resumed>) = 1 [ 80.388889][ T5651] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.405370][ T5651] REISERFS (device loop0): checking transaction log (loop0) [ 80.413525][ T5651] REISERFS (device loop0): Using r5 hash to sort names [ 80.420616][ T5651] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 80.433305][ T5651] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5651] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5651] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... futex resumed>) = 0 [pid 5650] exit_group(0) = ? [pid 5651] <... futex resumed>) = ? [pid 5651] +++ exited with 0 +++ [pid 5650] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./191/binderfs") = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./191/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./191") = 0 mkdir("./192", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5653 ./strace-static-x86_64: Process 5653 attached [pid 5653] set_robust_list(0x5555559356e0, 24) = 0 [pid 5653] chdir("./192") = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [ 80.461338][ T5651] overlayfs: upper fs needs to support d_type. [ 80.467591][ T5651] overlayfs: upper fs does not support tmpfile. [ 80.474321][ T5651] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.482364][ T5651] overlayfs: failed to resolve './file0': -2 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5653] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5653] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5653] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5654 attached , parent_tid=[5654], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5654 [pid 5654] set_robust_list(0x7f8d103ee9e0, 24 [pid 5653] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5654] <... set_robust_list resumed>) = 0 [pid 5654] memfd_create("syzkaller", 0) = 3 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5654] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5654] close(3) = 0 [pid 5654] mkdir("./file0", 0777) = 0 [ 80.571366][ T5654] loop0: detected capacity change from 0 to 8192 [ 80.580670][ T5654] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.593675][ T5654] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.602916][ T5654] REISERFS (device loop0): using ordered data mode [ 80.609563][ T5654] reiserfs: using flush barriers [pid 5654] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5654] chdir("./file0") = 0 [pid 5654] ioctl(4, LOOP_CLR_FD) = 0 [pid 5654] close(4) = 0 [pid 5654] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... futex resumed>) = 1 [pid 5654] mkdir("./file1", 000) = 0 [pid 5654] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... futex resumed>) = 1 [pid 5654] mkdir("./bus", 000) = 0 [pid 5654] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... futex resumed>) = 1 [ 80.615328][ T5654] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.631903][ T5654] REISERFS (device loop0): checking transaction log (loop0) [ 80.640235][ T5654] REISERFS (device loop0): Using r5 hash to sort names [ 80.647309][ T5654] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 80.660285][ T5654] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5654] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5654] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = 0 [pid 5653] exit_group(0) = ? [pid 5654] <... futex resumed>) = ? [pid 5654] +++ exited with 0 +++ [pid 5653] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./192/binderfs") = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./192/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./192") = 0 mkdir("./193", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5656 ./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x5555559356e0, 24) = 0 [pid 5656] chdir("./193") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5656] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5657 attached , parent_tid=[5657], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5657 [pid 5657] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5657] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] <... futex resumed>) = 0 [pid 5656] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 80.674722][ T5654] overlayfs: upper fs needs to support d_type. [ 80.680921][ T5654] overlayfs: upper fs does not support tmpfile. [ 80.687614][ T5654] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.695601][ T5654] overlayfs: failed to resolve './file0': -2 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5657] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] mkdir("./file0", 0777) = 0 [ 80.771560][ T5657] loop0: detected capacity change from 0 to 8192 [ 80.780979][ T5657] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.794027][ T5657] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.803188][ T5657] REISERFS (device loop0): using ordered data mode [ 80.809704][ T5657] reiserfs: using flush barriers [pid 5657] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file0") = 0 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [pid 5657] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... futex resumed>) = 1 [pid 5657] mkdir("./file1", 000) = 0 [pid 5657] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... futex resumed>) = 1 [pid 5657] mkdir("./bus", 000) = 0 [pid 5657] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... futex resumed>) = 1 [ 80.815230][ T5657] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.831749][ T5657] REISERFS (device loop0): checking transaction log (loop0) [ 80.839807][ T5657] REISERFS (device loop0): Using r5 hash to sort names [ 80.847034][ T5657] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 80.859759][ T5657] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5657] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5657] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5656] exit_group(0) = ? [pid 5657] <... futex resumed>) = ? [pid 5657] +++ exited with 0 +++ [pid 5656] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5656, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./193/binderfs") = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./193/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./193") = 0 mkdir("./194", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5659 attached , child_tidptr=0x5555559356d0) = 5659 [pid 5659] set_robust_list(0x5555559356e0, 24) = 0 [pid 5659] chdir("./194") = 0 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5659] setpgid(0, 0) = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5659] write(3, "1000", 4) = 4 [pid 5659] close(3) = 0 [pid 5659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5659] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5659] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5659] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5660 attached , parent_tid=[5660], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5660 [pid 5660] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5660] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] <... futex resumed>) = 0 [pid 5659] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5660] memfd_create("syzkaller", 0) = 3 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 80.885412][ T5657] overlayfs: upper fs needs to support d_type. [ 80.891620][ T5657] overlayfs: upper fs does not support tmpfile. [ 80.898449][ T5657] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.906533][ T5657] overlayfs: failed to resolve './file0': -2 [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5660] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5660] close(3) = 0 [pid 5660] mkdir("./file0", 0777) = 0 [ 80.983951][ T5660] loop0: detected capacity change from 0 to 8192 [ 80.992669][ T5660] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.005732][ T5660] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.014924][ T5660] REISERFS (device loop0): using ordered data mode [ 81.021427][ T5660] reiserfs: using flush barriers [pid 5660] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5660] chdir("./file0") = 0 [pid 5660] ioctl(4, LOOP_CLR_FD) = 0 [pid 5660] close(4) = 0 [pid 5660] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] mkdir("./file1", 000 [pid 5659] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... mkdir resumed>) = 0 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5659] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... futex resumed>) = 0 [pid 5659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] mkdir("./bus", 000 [pid 5659] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... mkdir resumed>) = 0 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5659] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... futex resumed>) = 0 [pid 5659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5659] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 81.027086][ T5660] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.043372][ T5660] REISERFS (device loop0): checking transaction log (loop0) [ 81.051610][ T5660] REISERFS (device loop0): Using r5 hash to sort names [ 81.058967][ T5660] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 81.071720][ T5660] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5659] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5660] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5659] <... futex resumed>) = 0 [pid 5659] exit_group(0) = ? [pid 5660] <... futex resumed>) = ? [pid 5660] +++ exited with 0 +++ [pid 5659] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5659, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./194/binderfs") = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./194/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./194/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./194") = 0 mkdir("./195", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5662 attached , child_tidptr=0x5555559356d0) = 5662 [pid 5662] set_robust_list(0x5555559356e0, 24) = 0 [pid 5662] chdir("./195") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5662] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5662] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5663 attached [ 81.087153][ T5660] overlayfs: upper fs needs to support d_type. [ 81.093753][ T5660] overlayfs: upper fs does not support tmpfile. [ 81.100710][ T5660] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.108890][ T5660] overlayfs: failed to resolve './file0': -2 , parent_tid=[5663], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5663 [pid 5663] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5663] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5663] <... futex resumed>) = 0 [pid 5662] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5663] memfd_create("syzkaller", 0) = 3 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5663] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5663] close(3) = 0 [pid 5663] mkdir("./file0", 0777) = 0 [ 81.198850][ T5663] loop0: detected capacity change from 0 to 8192 [ 81.207561][ T5663] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.220533][ T5663] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.229726][ T5663] REISERFS (device loop0): using ordered data mode [ 81.236244][ T5663] reiserfs: using flush barriers [pid 5663] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5663] chdir("./file0") = 0 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [ 81.241824][ T5663] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.258189][ T5663] REISERFS (device loop0): checking transaction log (loop0) [ 81.266195][ T5663] REISERFS (device loop0): Using r5 hash to sort names [ 81.273154][ T5663] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 81.285864][ T5663] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5663] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] <... futex resumed>) = 0 [pid 5663] mkdir("./file1", 000 [pid 5662] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... mkdir resumed>) = 0 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 0 [pid 5662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5663] mkdir("./bus", 000 [pid 5662] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... mkdir resumed>) = 0 [pid 5662] <... futex resumed>) = 0 [pid 5663] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 0 [pid 5662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5663] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5662] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5663] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5662] exit_group(0) = ? [pid 5663] <... futex resumed>) = ? [pid 5663] +++ exited with 0 +++ [pid 5662] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5662, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./195/binderfs") = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./195/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./195") = 0 mkdir("./196", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5665 ./strace-static-x86_64: Process 5665 attached [pid 5665] set_robust_list(0x5555559356e0, 24) = 0 [pid 5665] chdir("./196") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5665] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5665] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5666 attached , parent_tid=[5666], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5666 [pid 5666] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5666] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5666] memfd_create("syzkaller", 0 [pid 5665] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5666] <... memfd_create resumed>) = 3 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 81.299267][ T5663] overlayfs: upper fs needs to support d_type. [ 81.306151][ T5663] overlayfs: upper fs does not support tmpfile. [ 81.312832][ T5663] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.320517][ T5663] overlayfs: failed to resolve './file0': -2 [pid 5666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5666] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5666] close(3) = 0 [pid 5666] mkdir("./file0", 0777) = 0 [ 81.401200][ T5666] loop0: detected capacity change from 0 to 8192 [ 81.410182][ T5666] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.423294][ T5666] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.432807][ T5666] REISERFS (device loop0): using ordered data mode [ 81.439663][ T5666] reiserfs: using flush barriers [pid 5666] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5666] chdir("./file0") = 0 [pid 5666] ioctl(4, LOOP_CLR_FD) = 0 [pid 5666] close(4) = 0 [pid 5666] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... futex resumed>) = 1 [ 81.445416][ T5666] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.461744][ T5666] REISERFS (device loop0): checking transaction log (loop0) [ 81.470088][ T5666] REISERFS (device loop0): Using r5 hash to sort names [ 81.477403][ T5666] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 81.490177][ T5666] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5666] mkdir("./file1", 000) = 0 [pid 5666] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... futex resumed>) = 1 [pid 5666] mkdir("./bus", 000) = 0 [pid 5666] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... futex resumed>) = 1 [pid 5666] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5666] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = 0 [pid 5665] exit_group(0) = ? [pid 5666] <... futex resumed>) = ? [pid 5666] +++ exited with 0 +++ [pid 5665] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./196/binderfs") = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./196/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./196") = 0 mkdir("./197", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5668 ./strace-static-x86_64: Process 5668 attached [pid 5668] set_robust_list(0x5555559356e0, 24) = 0 [pid 5668] chdir("./197") = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] setpgid(0, 0) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5668] write(3, "1000", 4) = 4 [pid 5668] close(3) = 0 [pid 5668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5668] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5668] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5668] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5669 attached [pid 5669] set_robust_list(0x7f8d103ee9e0, 24 [pid 5668] <... clone resumed>, parent_tid=[5669], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5669 [pid 5669] <... set_robust_list resumed>) = 0 [pid 5669] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5668] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5669] memfd_create("syzkaller", 0) = 3 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 81.504489][ T5666] overlayfs: upper fs needs to support d_type. [ 81.510850][ T5666] overlayfs: upper fs does not support tmpfile. [ 81.517879][ T5666] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.525577][ T5666] overlayfs: failed to resolve './file0': -2 [pid 5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5669] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5669] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5669] close(3) = 0 [pid 5669] mkdir("./file0", 0777) = 0 [ 81.604038][ T5669] loop0: detected capacity change from 0 to 8192 [ 81.612693][ T5669] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.625737][ T5669] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.634947][ T5669] REISERFS (device loop0): using ordered data mode [ 81.641448][ T5669] reiserfs: using flush barriers [pid 5669] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5669] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5669] chdir("./file0") = 0 [pid 5669] ioctl(4, LOOP_CLR_FD) = 0 [ 81.647180][ T5669] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.663466][ T5669] REISERFS (device loop0): checking transaction log (loop0) [ 81.671520][ T5669] REISERFS (device loop0): Using r5 hash to sort names [ 81.678476][ T5669] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 81.691152][ T5669] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5669] close(4) = 0 [pid 5669] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5669] mkdir("./file1", 000 [pid 5668] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... mkdir resumed>) = 0 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] <... futex resumed>) = 0 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] mkdir("./bus", 000 [pid 5668] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... mkdir resumed>) = 0 [pid 5668] <... futex resumed>) = 0 [pid 5669] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] <... futex resumed>) = 0 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5668] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5669] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5669] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5668] exit_group(0 [pid 5669] <... futex resumed>) = 1 [pid 5668] <... exit_group resumed>) = ? [pid 5669] +++ exited with 0 +++ [pid 5668] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5668, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./197/binderfs") = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./197/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./197") = 0 mkdir("./198", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5671 ./strace-static-x86_64: Process 5671 attached [pid 5671] set_robust_list(0x5555559356e0, 24) = 0 [pid 5671] chdir("./198") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5671] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5671] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5672], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5672 ./strace-static-x86_64: Process 5672 attached [pid 5672] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5672] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5672] <... futex resumed>) = 0 [pid 5671] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 81.704924][ T5669] overlayfs: upper fs needs to support d_type. [ 81.712492][ T5669] overlayfs: upper fs does not support tmpfile. [ 81.720109][ T5669] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.727908][ T5669] overlayfs: failed to resolve './file0': -2 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5672] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5672] close(3) = 0 [pid 5672] mkdir("./file0", 0777) = 0 [ 81.806829][ T5672] loop0: detected capacity change from 0 to 8192 [ 81.815708][ T5672] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.828663][ T5672] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.837858][ T5672] REISERFS (device loop0): using ordered data mode [ 81.844365][ T5672] reiserfs: using flush barriers [pid 5672] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file0") = 0 [pid 5672] ioctl(4, LOOP_CLR_FD) = 0 [pid 5672] close(4) = 0 [pid 5672] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... futex resumed>) = 1 [pid 5672] mkdir("./file1", 000) = 0 [pid 5672] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... futex resumed>) = 1 [pid 5672] mkdir("./bus", 000) = 0 [pid 5672] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 81.849932][ T5672] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.866131][ T5672] REISERFS (device loop0): checking transaction log (loop0) [ 81.874088][ T5672] REISERFS (device loop0): Using r5 hash to sort names [ 81.881377][ T5672] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 81.894042][ T5672] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5671] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... futex resumed>) = 1 [pid 5672] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5672] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5671] exit_group(0) = ? [pid 5672] <... futex resumed>) = ? [pid 5672] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./198/binderfs") = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./198/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./198/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./198") = 0 mkdir("./199", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5674 ./strace-static-x86_64: Process 5674 attached [pid 5674] set_robust_list(0x5555559356e0, 24) = 0 [pid 5674] chdir("./199") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5674] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5675], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5675 [pid 5674] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5675 attached [pid 5675] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5675] memfd_create("syzkaller", 0) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 81.910346][ T5672] overlayfs: upper fs needs to support d_type. [ 81.916646][ T5672] overlayfs: upper fs does not support tmpfile. [ 81.923173][ T5672] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.930917][ T5672] overlayfs: failed to resolve './file0': -2 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5675] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5675] close(3) = 0 [pid 5675] mkdir("./file0", 0777) = 0 [ 81.996088][ T5675] loop0: detected capacity change from 0 to 8192 [ 82.005700][ T5675] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.018786][ T5675] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.028279][ T5675] REISERFS (device loop0): using ordered data mode [ 82.034974][ T5675] reiserfs: using flush barriers [pid 5675] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file0") = 0 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5674] <... futex resumed>) = 0 [pid 5674] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5674] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 0 [pid 5675] mkdir("./file1", 000) = 0 [pid 5675] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... futex resumed>) = 0 [pid 5674] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [pid 5675] mkdir("./bus", 000) = 0 [pid 5675] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... futex resumed>) = 0 [pid 5674] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [ 82.040606][ T5675] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.057358][ T5675] REISERFS (device loop0): checking transaction log (loop0) [ 82.065559][ T5675] REISERFS (device loop0): Using r5 hash to sort names [ 82.072710][ T5675] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 82.085434][ T5675] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5675] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5675] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... futex resumed>) = 0 [pid 5674] exit_group(0) = ? [pid 5675] <... futex resumed>) = ? [pid 5675] +++ exited with 0 +++ [pid 5674] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5674, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./199/binderfs") = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./199/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./199/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./199") = 0 mkdir("./200", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5677 ./strace-static-x86_64: Process 5677 attached [pid 5677] set_robust_list(0x5555559356e0, 24) = 0 [pid 5677] chdir("./200") = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5677] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5677] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5679], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5679 [pid 5677] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.109301][ T5675] overlayfs: upper fs needs to support d_type. [ 82.116536][ T5675] overlayfs: upper fs does not support tmpfile. [ 82.123325][ T5675] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.131210][ T5675] overlayfs: failed to resolve './file0': -2 [pid 5677] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5679 attached [pid 5679] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5679] memfd_create("syzkaller", 0) = 3 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5679] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5679] close(3) = 0 [pid 5679] mkdir("./file0", 0777) = 0 [ 82.217581][ T5679] loop0: detected capacity change from 0 to 8192 [ 82.226475][ T5679] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.239503][ T5679] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.248963][ T5679] REISERFS (device loop0): using ordered data mode [ 82.255616][ T5679] reiserfs: using flush barriers [pid 5679] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5679] chdir("./file0") = 0 [pid 5679] ioctl(4, LOOP_CLR_FD) = 0 [pid 5679] close(4) = 0 [pid 5679] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5679] mkdir("./file1", 000 [pid 5677] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] <... mkdir resumed>) = 0 [pid 5677] <... futex resumed>) = 0 [pid 5679] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... futex resumed>) = 0 [pid 5677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] mkdir("./bus", 000 [pid 5677] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] <... mkdir resumed>) = 0 [pid 5677] <... futex resumed>) = 0 [pid 5679] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... futex resumed>) = 0 [pid 5677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5677] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.261251][ T5679] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.277626][ T5679] REISERFS (device loop0): checking transaction log (loop0) [ 82.285646][ T5679] REISERFS (device loop0): Using r5 hash to sort names [ 82.292799][ T5679] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 82.305516][ T5679] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5677] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5679] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... futex resumed>) = 0 [pid 5677] exit_group(0) = ? [pid 5679] <... futex resumed>) = ? [pid 5679] +++ exited with 0 +++ [pid 5677] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./200/binderfs") = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./200/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./200") = 0 mkdir("./201", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5681 ./strace-static-x86_64: Process 5681 attached [pid 5681] set_robust_list(0x5555559356e0, 24) = 0 [pid 5681] chdir("./201") = 0 [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5681] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5681] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5681] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5682], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5682 [pid 5681] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5682 attached [pid 5681] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5682] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5682] memfd_create("syzkaller", 0) = 3 [pid 5682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 82.319387][ T5679] overlayfs: upper fs needs to support d_type. [ 82.325865][ T5679] overlayfs: upper fs does not support tmpfile. [ 82.332646][ T5679] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.340528][ T5679] overlayfs: failed to resolve './file0': -2 [pid 5682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5682] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5682] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5682] close(3) = 0 [pid 5682] mkdir("./file0", 0777) = 0 [ 82.410724][ T5682] loop0: detected capacity change from 0 to 8192 [ 82.419685][ T5682] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.432921][ T5682] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.442160][ T5682] REISERFS (device loop0): using ordered data mode [ 82.448681][ T5682] reiserfs: using flush barriers [pid 5682] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5682] chdir("./file0") = 0 [pid 5682] ioctl(4, LOOP_CLR_FD) = 0 [ 82.454290][ T5682] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.470641][ T5682] REISERFS (device loop0): checking transaction log (loop0) [ 82.478956][ T5682] REISERFS (device loop0): Using r5 hash to sort names [ 82.485986][ T5682] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 82.498820][ T5682] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5682] close(4) = 0 [pid 5682] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5682] mkdir("./file1", 000 [pid 5681] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... mkdir resumed>) = 0 [pid 5681] <... futex resumed>) = 0 [pid 5682] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... futex resumed>) = 0 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] mkdir("./bus", 000 [pid 5681] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... mkdir resumed>) = 0 [pid 5681] <... futex resumed>) = 0 [pid 5682] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... futex resumed>) = 0 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5682] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5681] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5682] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5682] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 0 [pid 5681] exit_group(0) = ? [pid 5682] <... futex resumed>) = ? [pid 5682] +++ exited with 0 +++ [pid 5681] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5681, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./201/binderfs") = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./201/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./201") = 0 mkdir("./202", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5684 attached , child_tidptr=0x5555559356d0) = 5684 [pid 5684] set_robust_list(0x5555559356e0, 24) = 0 [pid 5684] chdir("./202") = 0 [pid 5684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5684] setpgid(0, 0) = 0 [pid 5684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5684] write(3, "1000", 4) = 4 [pid 5684] close(3) = 0 [pid 5684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5684] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5684] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5684] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5685 attached , parent_tid=[5685], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5685 [pid 5685] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5685] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5685] <... futex resumed>) = 0 [pid 5684] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5685] memfd_create("syzkaller", 0) = 3 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 82.512362][ T5682] overlayfs: upper fs needs to support d_type. [ 82.519114][ T5682] overlayfs: upper fs does not support tmpfile. [ 82.526031][ T5682] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.533525][ T5682] overlayfs: failed to resolve './file0': -2 [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5685] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5685] close(3) = 0 [pid 5685] mkdir("./file0", 0777) = 0 [ 82.612115][ T5685] loop0: detected capacity change from 0 to 8192 [ 82.621920][ T5685] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.634993][ T5685] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.644191][ T5685] REISERFS (device loop0): using ordered data mode [ 82.650777][ T5685] reiserfs: using flush barriers [pid 5685] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5685] chdir("./file0") = 0 [pid 5685] ioctl(4, LOOP_CLR_FD) = 0 [pid 5685] close(4) = 0 [pid 5685] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = 0 [pid 5684] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... futex resumed>) = 1 [pid 5685] mkdir("./file1", 000) = 0 [pid 5685] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = 0 [pid 5684] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... futex resumed>) = 1 [pid 5685] mkdir("./bus", 000) = 0 [pid 5685] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = 0 [pid 5684] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5684] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... futex resumed>) = 1 [ 82.656824][ T5685] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.673296][ T5685] REISERFS (device loop0): checking transaction log (loop0) [ 82.681483][ T5685] REISERFS (device loop0): Using r5 hash to sort names [ 82.688482][ T5685] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 82.701191][ T5685] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5685] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5685] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5684] <... futex resumed>) = 0 [pid 5684] exit_group(0) = ? [pid 5685] +++ exited with 0 +++ [pid 5684] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5684, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./202/binderfs") = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./202/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./202") = 0 mkdir("./203", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5687 attached , child_tidptr=0x5555559356d0) = 5687 [pid 5687] set_robust_list(0x5555559356e0, 24) = 0 [pid 5687] chdir("./203") = 0 [pid 5687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5687] setpgid(0, 0) = 0 [pid 5687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5687] write(3, "1000", 4) = 4 [pid 5687] close(3) = 0 [pid 5687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5687] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5687] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [ 82.721643][ T5685] overlayfs: upper fs needs to support d_type. [ 82.728366][ T5685] overlayfs: upper fs does not support tmpfile. [ 82.735787][ T5685] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.743757][ T5685] overlayfs: failed to resolve './file0': -2 [pid 5687] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5688 attached , parent_tid=[5688], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5688 [pid 5688] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5688] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] <... futex resumed>) = 0 [pid 5687] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5688] memfd_create("syzkaller", 0) = 3 [pid 5688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5688] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5688] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5688] close(3) = 0 [pid 5688] mkdir("./file0", 0777) = 0 [ 82.835062][ T5688] loop0: detected capacity change from 0 to 8192 [ 82.843733][ T5688] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.856800][ T5688] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.866027][ T5688] REISERFS (device loop0): using ordered data mode [ 82.872516][ T5688] reiserfs: using flush barriers [pid 5688] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5688] chdir("./file0") = 0 [pid 5688] ioctl(4, LOOP_CLR_FD) = 0 [pid 5688] close(4) = 0 [pid 5688] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5687] <... futex resumed>) = 0 [pid 5688] mkdir("./file1", 000 [ 82.878395][ T5688] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.894832][ T5688] REISERFS (device loop0): checking transaction log (loop0) [ 82.902913][ T5688] REISERFS (device loop0): Using r5 hash to sort names [ 82.909973][ T5688] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 82.922675][ T5688] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5687] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... mkdir resumed>) = 0 [pid 5687] <... futex resumed>) = 0 [pid 5688] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] <... futex resumed>) = 0 [pid 5687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5688] mkdir("./bus", 000 [pid 5687] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... mkdir resumed>) = 0 [pid 5687] <... futex resumed>) = 0 [pid 5688] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] <... futex resumed>) = 0 [pid 5687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5688] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5687] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5687] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5688] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5688] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5687] <... futex resumed>) = 0 [pid 5687] exit_group(0) = ? [pid 5688] <... futex resumed>) = ? [pid 5688] +++ exited with 0 +++ [pid 5687] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5687, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./203/binderfs") = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./203/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./203") = 0 mkdir("./204", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5690 ./strace-static-x86_64: Process 5690 attached [pid 5690] set_robust_list(0x5555559356e0, 24) = 0 [pid 5690] chdir("./204") = 0 [pid 5690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5690] setpgid(0, 0) = 0 [pid 5690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5690] write(3, "1000", 4) = 4 [pid 5690] close(3) = 0 [pid 5690] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5690] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5690] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5690] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5691 attached , parent_tid=[5691], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5691 [pid 5690] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] set_robust_list(0x7f8d103ee9e0, 24 [pid 5690] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5691] <... set_robust_list resumed>) = 0 [pid 5691] memfd_create("syzkaller", 0) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 82.936805][ T5688] overlayfs: upper fs needs to support d_type. [ 82.943406][ T5688] overlayfs: upper fs does not support tmpfile. [ 82.950862][ T5688] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.958762][ T5688] overlayfs: failed to resolve './file0': -2 [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5691] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5691] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5691] close(3) = 0 [pid 5691] mkdir("./file0", 0777) = 0 [ 83.031925][ T5691] loop0: detected capacity change from 0 to 8192 [ 83.041762][ T5691] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.054988][ T5691] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.064199][ T5691] REISERFS (device loop0): using ordered data mode [ 83.070934][ T5691] reiserfs: using flush barriers [pid 5691] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5691] chdir("./file0") = 0 [pid 5691] ioctl(4, LOOP_CLR_FD) = 0 [pid 5691] close(4) = 0 [pid 5691] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5691] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = 0 [pid 5690] <... futex resumed>) = 1 [pid 5690] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] mkdir("./file1", 000) = 0 [pid 5691] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5691] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5690] <... futex resumed>) = 0 [pid 5691] mkdir("./bus", 000 [pid 5690] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] <... mkdir resumed>) = 0 [pid 5691] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5691] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5690] <... futex resumed>) = 0 [pid 5691] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 83.076599][ T5691] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.092909][ T5691] REISERFS (device loop0): checking transaction log (loop0) [ 83.100930][ T5691] REISERFS (device loop0): Using r5 hash to sort names [ 83.107952][ T5691] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 83.120592][ T5691] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5690] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5691] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] <... futex resumed>) = 0 [pid 5690] exit_group(0) = ? [pid 5691] <... futex resumed>) = ? [pid 5691] +++ exited with 0 +++ [pid 5690] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5690, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./204/binderfs") = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./204/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./204") = 0 mkdir("./205", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5694 ./strace-static-x86_64: Process 5694 attached [pid 5694] set_robust_list(0x5555559356e0, 24) = 0 [pid 5694] chdir("./205") = 0 [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5694] setpgid(0, 0) = 0 [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5694] write(3, "1000", 4) = 4 [pid 5694] close(3) = 0 [pid 5694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5694] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5694] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5694] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5695 attached , parent_tid=[5695], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5695 [pid 5695] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5695] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] <... futex resumed>) = 0 [pid 5695] memfd_create("syzkaller", 0 [pid 5694] <... futex resumed>) = 1 [pid 5695] <... memfd_create resumed>) = 3 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 83.146455][ T5691] overlayfs: upper fs needs to support d_type. [ 83.152700][ T5691] overlayfs: upper fs does not support tmpfile. [ 83.159377][ T5691] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.167201][ T5691] overlayfs: failed to resolve './file0': -2 [pid 5694] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5695] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5695] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5695] close(3) = 0 [pid 5695] mkdir("./file0", 0777) = 0 [ 83.251085][ T5695] loop0: detected capacity change from 0 to 8192 [ 83.260409][ T5695] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.273394][ T5695] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.282695][ T5695] REISERFS (device loop0): using ordered data mode [ 83.289208][ T5695] reiserfs: using flush barriers [pid 5695] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5695] chdir("./file0") = 0 [pid 5695] ioctl(4, LOOP_CLR_FD) = 0 [pid 5695] close(4) = 0 [pid 5695] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = 0 [pid 5694] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] <... futex resumed>) = 1 [pid 5695] mkdir("./file1", 000) = 0 [pid 5695] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = 0 [pid 5694] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] <... futex resumed>) = 1 [pid 5695] mkdir("./bus", 000) = 0 [pid 5695] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = 0 [pid 5694] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5695] <... futex resumed>) = 1 [ 83.295199][ T5695] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.311654][ T5695] REISERFS (device loop0): checking transaction log (loop0) [ 83.319856][ T5695] REISERFS (device loop0): Using r5 hash to sort names [ 83.326834][ T5695] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 83.339566][ T5695] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5695] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5695] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] <... futex resumed>) = 0 [pid 5694] exit_group(0) = ? [pid 5695] +++ exited with 0 +++ [pid 5694] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5694, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./205/binderfs") = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./205/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./205/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./205") = 0 mkdir("./206", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5697 attached , child_tidptr=0x5555559356d0) = 5697 [pid 5697] set_robust_list(0x5555559356e0, 24) = 0 [pid 5697] chdir("./206") = 0 [pid 5697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5697] setpgid(0, 0) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5697] write(3, "1000", 4) = 4 [pid 5697] close(3) = 0 [pid 5697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5697] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5697] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5697] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5698 attached , parent_tid=[5698], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5698 [pid 5698] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5698] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5698] <... futex resumed>) = 0 [pid 5697] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5698] memfd_create("syzkaller", 0) = 3 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 83.361220][ T5695] overlayfs: upper fs needs to support d_type. [ 83.367966][ T5695] overlayfs: upper fs does not support tmpfile. [ 83.374595][ T5695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.382984][ T5695] overlayfs: failed to resolve './file0': -2 [pid 5698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5698] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5698] close(3) = 0 [pid 5698] mkdir("./file0", 0777) = 0 [ 83.463557][ T5698] loop0: detected capacity change from 0 to 8192 [ 83.472631][ T5698] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.485721][ T5698] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.495011][ T5698] REISERFS (device loop0): using ordered data mode [ 83.501559][ T5698] reiserfs: using flush barriers [pid 5698] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5698] chdir("./file0") = 0 [pid 5698] ioctl(4, LOOP_CLR_FD) = 0 [pid 5698] close(4) = 0 [pid 5698] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5698] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] <... futex resumed>) = 0 [pid 5697] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5697] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5698] <... futex resumed>) = 0 [pid 5698] mkdir("./file1", 000) = 0 [pid 5698] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 0 [pid 5697] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5698] <... futex resumed>) = 1 [pid 5698] mkdir("./bus", 000) = 0 [pid 5698] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 0 [pid 5697] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5698] <... futex resumed>) = 1 [ 83.507495][ T5698] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.523758][ T5698] REISERFS (device loop0): checking transaction log (loop0) [ 83.531893][ T5698] REISERFS (device loop0): Using r5 hash to sort names [ 83.539064][ T5698] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 83.551895][ T5698] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5698] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5698] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 0 [pid 5697] exit_group(0) = ? [pid 5698] <... futex resumed>) = ? [pid 5698] +++ exited with 0 +++ [pid 5697] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5697, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./206/binderfs") = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./206/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./206") = 0 mkdir("./207", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5701 ./strace-static-x86_64: Process 5701 attached [pid 5701] set_robust_list(0x5555559356e0, 24) = 0 [pid 5701] chdir("./207") = 0 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5701] setpgid(0, 0) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5701] write(3, "1000", 4) = 4 [pid 5701] close(3) = 0 [pid 5701] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5701] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5701] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5701] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5702 attached [pid 5702] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5702] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5701] <... clone resumed>, parent_tid=[5702], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5702 [ 83.570175][ T5698] overlayfs: upper fs needs to support d_type. [ 83.576496][ T5698] overlayfs: upper fs does not support tmpfile. [ 83.583101][ T5698] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.592175][ T5698] overlayfs: failed to resolve './file0': -2 [pid 5701] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] <... futex resumed>) = 0 [pid 5702] memfd_create("syzkaller", 0 [pid 5701] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5702] <... memfd_create resumed>) = 3 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5702] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5702] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5702] close(3) = 0 [pid 5702] mkdir("./file0", 0777) = 0 [ 83.679201][ T5702] loop0: detected capacity change from 0 to 8192 [ 83.688122][ T5702] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.701168][ T5702] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.710338][ T5702] REISERFS (device loop0): using ordered data mode [ 83.716891][ T5702] reiserfs: using flush barriers [pid 5702] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5702] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5702] chdir("./file0") = 0 [pid 5702] ioctl(4, LOOP_CLR_FD) = 0 [ 83.722425][ T5702] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.739349][ T5702] REISERFS (device loop0): checking transaction log (loop0) [ 83.747655][ T5702] REISERFS (device loop0): Using r5 hash to sort names [ 83.754839][ T5702] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 83.767616][ T5702] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5702] close(4) = 0 [pid 5702] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... futex resumed>) = 0 [pid 5701] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5701] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5702] <... futex resumed>) = 1 [pid 5702] mkdir("./file1", 000) = 0 [pid 5702] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... futex resumed>) = 0 [pid 5701] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5701] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5702] <... futex resumed>) = 1 [pid 5702] mkdir("./bus", 000) = 0 [pid 5702] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... futex resumed>) = 0 [pid 5701] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5701] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5702] <... futex resumed>) = 1 [pid 5702] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5702] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5702] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5701] <... futex resumed>) = 0 [pid 5701] exit_group(0) = ? [pid 5702] <... futex resumed>) = ? [pid 5702] +++ exited with 0 +++ [pid 5701] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5701, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./207/binderfs") = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./207/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./207") = 0 mkdir("./208", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5704 ./strace-static-x86_64: Process 5704 attached [pid 5704] set_robust_list(0x5555559356e0, 24) = 0 [pid 5704] chdir("./208") = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] setpgid(0, 0) = 0 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] write(3, "1000", 4) = 4 [pid 5704] close(3) = 0 [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5704] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5704] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5704] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5705 attached , parent_tid=[5705], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5705 [pid 5705] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5705] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5704] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5705] <... futex resumed>) = 0 [pid 5705] memfd_create("syzkaller", 0) = 3 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 83.782276][ T5702] overlayfs: upper fs needs to support d_type. [ 83.788848][ T5702] overlayfs: upper fs does not support tmpfile. [ 83.795583][ T5702] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.803495][ T5702] overlayfs: failed to resolve './file0': -2 [pid 5704] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5705] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5705] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5705] close(3) = 0 [pid 5705] mkdir("./file0", 0777) = 0 [ 83.886925][ T5705] loop0: detected capacity change from 0 to 8192 [ 83.896075][ T5705] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.909078][ T5705] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.918336][ T5705] REISERFS (device loop0): using ordered data mode [ 83.924858][ T5705] reiserfs: using flush barriers [pid 5705] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5705] chdir("./file0") = 0 [pid 5705] ioctl(4, LOOP_CLR_FD) = 0 [pid 5705] close(4) = 0 [pid 5705] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5704] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] mkdir("./file1", 000) = 0 [pid 5705] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... futex resumed>) = 0 [pid 5704] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] <... futex resumed>) = 1 [pid 5705] mkdir("./bus", 000) = 0 [pid 5705] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... futex resumed>) = 0 [pid 5704] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] <... futex resumed>) = 1 [ 83.930369][ T5705] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.946815][ T5705] REISERFS (device loop0): checking transaction log (loop0) [ 83.955056][ T5705] REISERFS (device loop0): Using r5 hash to sort names [ 83.962229][ T5705] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 83.975036][ T5705] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5705] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5705] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5705] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5704] <... futex resumed>) = 0 [pid 5704] exit_group(0) = ? [pid 5705] <... futex resumed>) = ? [pid 5705] +++ exited with 0 +++ [pid 5704] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5704, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./208/binderfs") = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./208/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./208") = 0 mkdir("./209", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5707 ./strace-static-x86_64: Process 5707 attached [pid 5707] set_robust_list(0x5555559356e0, 24) = 0 [pid 5707] chdir("./209") = 0 [pid 5707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5707] setpgid(0, 0) = 0 [pid 5707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5707] write(3, "1000", 4) = 4 [pid 5707] close(3) = 0 [pid 5707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5707] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5707] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5707] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5708], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5708 [pid 5707] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5707] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5708 attached [pid 5708] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5708] memfd_create("syzkaller", 0) = 3 [ 84.003202][ T5705] overlayfs: upper fs needs to support d_type. [ 84.009746][ T5705] overlayfs: upper fs does not support tmpfile. [ 84.016617][ T5705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.024600][ T5705] overlayfs: failed to resolve './file0': -2 [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5708] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5708] close(3) = 0 [pid 5708] mkdir("./file0", 0777) = 0 [ 84.108787][ T5708] loop0: detected capacity change from 0 to 8192 [ 84.117480][ T5708] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.130469][ T5708] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.139675][ T5708] REISERFS (device loop0): using ordered data mode [ 84.146296][ T5708] reiserfs: using flush barriers [pid 5708] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5708] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5708] chdir("./file0") = 0 [pid 5708] ioctl(4, LOOP_CLR_FD) = 0 [pid 5708] close(4) = 0 [pid 5708] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] <... futex resumed>) = 0 [pid 5708] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5707] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] <... futex resumed>) = 0 [pid 5708] mkdir("./file1", 000 [pid 5707] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5708] <... mkdir resumed>) = 0 [pid 5708] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] <... futex resumed>) = 0 [pid 5708] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5707] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] <... futex resumed>) = 0 [pid 5707] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5708] mkdir("./bus", 000) = 0 [pid 5708] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5707] <... futex resumed>) = 0 [pid 5708] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5707] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] <... futex resumed>) = 0 [pid 5708] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 84.151772][ T5708] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.168151][ T5708] REISERFS (device loop0): checking transaction log (loop0) [ 84.176860][ T5708] REISERFS (device loop0): Using r5 hash to sort names [ 84.183898][ T5708] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 84.196645][ T5708] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5707] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5708] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5708] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = 0 [pid 5707] exit_group(0) = ? [pid 5708] <... futex resumed>) = ? [pid 5708] +++ exited with 0 +++ [pid 5707] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5707, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./209/binderfs") = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./209/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./209") = 0 mkdir("./210", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 84.220408][ T5708] overlayfs: upper fs needs to support d_type. [ 84.227735][ T5708] overlayfs: upper fs does not support tmpfile. [ 84.236391][ T5708] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.245486][ T5708] overlayfs: failed to resolve './file0': -2 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5711 ./strace-static-x86_64: Process 5711 attached [pid 5711] set_robust_list(0x5555559356e0, 24) = 0 [pid 5711] chdir("./210") = 0 [pid 5711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5711] setpgid(0, 0) = 0 [pid 5711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5711] write(3, "1000", 4) = 4 [pid 5711] close(3) = 0 [pid 5711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5711] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5711] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5711] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5712 attached , parent_tid=[5712], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5712 [pid 5712] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5712] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5711] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5711] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5712] memfd_create("syzkaller", 0) = 3 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [pid 5712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5712] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5712] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5712] close(3) = 0 [pid 5712] mkdir("./file0", 0777) = 0 [ 84.336930][ T5712] loop0: detected capacity change from 0 to 8192 [ 84.345851][ T5712] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.358913][ T5712] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.368344][ T5712] REISERFS (device loop0): using ordered data mode [ 84.374900][ T5712] reiserfs: using flush barriers [pid 5712] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5712] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5712] chdir("./file0") = 0 [pid 5712] ioctl(4, LOOP_CLR_FD) = 0 [pid 5712] close(4) = 0 [pid 5712] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] <... futex resumed>) = 0 [pid 5711] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5711] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5712] <... futex resumed>) = 1 [pid 5712] mkdir("./file1", 000) = 0 [pid 5712] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] <... futex resumed>) = 0 [pid 5711] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5711] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5712] <... futex resumed>) = 1 [pid 5712] mkdir("./bus", 000) = 0 [pid 5712] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] <... futex resumed>) = 0 [pid 5711] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5711] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5712] <... futex resumed>) = 1 [ 84.380465][ T5712] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.396726][ T5712] REISERFS (device loop0): checking transaction log (loop0) [ 84.404746][ T5712] REISERFS (device loop0): Using r5 hash to sort names [ 84.412065][ T5712] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 84.425015][ T5712] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5712] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5712] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] <... futex resumed>) = 0 [pid 5711] exit_group(0) = ? [pid 5712] <... futex resumed>) = ? [pid 5712] +++ exited with 0 +++ [pid 5711] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5711, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./210/binderfs") = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./210/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./210/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./210") = 0 mkdir("./211", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5714 ./strace-static-x86_64: Process 5714 attached [pid 5714] set_robust_list(0x5555559356e0, 24) = 0 [pid 5714] chdir("./211") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5714] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5714] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5714] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5715], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5715 [pid 5714] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5714] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5715 attached [pid 5715] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5715] memfd_create("syzkaller", 0) = 3 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 84.443982][ T5712] overlayfs: upper fs needs to support d_type. [ 84.450335][ T5712] overlayfs: upper fs does not support tmpfile. [ 84.456945][ T5712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.465319][ T5712] overlayfs: failed to resolve './file0': -2 [pid 5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5715] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5715] close(3) = 0 [pid 5715] mkdir("./file0", 0777) = 0 [ 84.543093][ T5715] loop0: detected capacity change from 0 to 8192 [ 84.552190][ T5715] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.565349][ T5715] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.574512][ T5715] REISERFS (device loop0): using ordered data mode [ 84.581050][ T5715] reiserfs: using flush barriers [pid 5715] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5715] chdir("./file0") = 0 [pid 5715] ioctl(4, LOOP_CLR_FD) = 0 [pid 5715] close(4) = 0 [pid 5715] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5714] <... futex resumed>) = 0 [pid 5715] mkdir("./file1", 000 [ 84.586688][ T5715] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.603091][ T5715] REISERFS (device loop0): checking transaction log (loop0) [ 84.611230][ T5715] REISERFS (device loop0): Using r5 hash to sort names [ 84.618278][ T5715] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 84.630938][ T5715] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5714] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5715] <... mkdir resumed>) = 0 [pid 5714] <... futex resumed>) = 0 [pid 5715] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5715] <... futex resumed>) = 0 [pid 5714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5715] mkdir("./bus", 000 [pid 5714] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5715] <... mkdir resumed>) = 0 [pid 5714] <... futex resumed>) = 0 [pid 5715] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5715] <... futex resumed>) = 0 [pid 5714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5715] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5714] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5714] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5715] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5715] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] <... futex resumed>) = 0 [pid 5714] exit_group(0) = ? [pid 5715] <... futex resumed>) = ? [pid 5715] +++ exited with 0 +++ [pid 5714] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5714, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./211/binderfs") = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./211/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./211") = 0 mkdir("./212", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5717 attached , child_tidptr=0x5555559356d0) = 5717 [pid 5717] set_robust_list(0x5555559356e0, 24) = 0 [pid 5717] chdir("./212") = 0 [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5717] setpgid(0, 0) = 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5717] write(3, "1000", 4) = 4 [pid 5717] close(3) = 0 [pid 5717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5717] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5717] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5717] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5718], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5718 [pid 5717] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5718 attached [pid 5718] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5718] memfd_create("syzkaller", 0) = 3 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 84.643978][ T5715] overlayfs: upper fs needs to support d_type. [ 84.650779][ T5715] overlayfs: upper fs does not support tmpfile. [ 84.657655][ T5715] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.665590][ T5715] overlayfs: failed to resolve './file0': -2 [pid 5718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5718] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5718] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5718] close(3) = 0 [pid 5718] mkdir("./file0", 0777) = 0 [ 84.742282][ T5718] loop0: detected capacity change from 0 to 8192 [ 84.751030][ T5718] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.764122][ T5718] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.773436][ T5718] REISERFS (device loop0): using ordered data mode [ 84.779982][ T5718] reiserfs: using flush barriers [pid 5718] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5718] chdir("./file0") = 0 [pid 5718] ioctl(4, LOOP_CLR_FD) = 0 [pid 5718] close(4) = 0 [pid 5718] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = 0 [pid 5717] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... futex resumed>) = 1 [pid 5718] mkdir("./file1", 000) = 0 [pid 5718] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = 0 [pid 5717] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... futex resumed>) = 1 [pid 5718] mkdir("./bus", 000) = 0 [pid 5718] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = 0 [pid 5717] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... futex resumed>) = 1 [ 84.785735][ T5718] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.801932][ T5718] REISERFS (device loop0): checking transaction log (loop0) [ 84.810421][ T5718] REISERFS (device loop0): Using r5 hash to sort names [ 84.817761][ T5718] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 84.830667][ T5718] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5718] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5718] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5717] exit_group(0) = ? [pid 5718] +++ exited with 0 +++ [pid 5717] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5717, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./212/binderfs") = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./212/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./212") = 0 mkdir("./213", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5720 ./strace-static-x86_64: Process 5720 attached [pid 5720] set_robust_list(0x5555559356e0, 24) = 0 [pid 5720] chdir("./213") = 0 [pid 5720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5720] setpgid(0, 0) = 0 [pid 5720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5720] write(3, "1000", 4) = 4 [pid 5720] close(3) = 0 [pid 5720] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5720] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5720] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5720] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5721 attached [pid 5721] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5721] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5720] <... clone resumed>, parent_tid=[5721], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5721 [pid 5720] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] <... futex resumed>) = 0 [pid 5720] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5721] memfd_create("syzkaller", 0) = 3 [pid 5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 84.848283][ T5718] overlayfs: upper fs needs to support d_type. [ 84.854529][ T5718] overlayfs: upper fs does not support tmpfile. [ 84.861397][ T5718] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.868959][ T5718] overlayfs: failed to resolve './file0': -2 [pid 5721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5721] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5721] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5721] close(3) = 0 [pid 5721] mkdir("./file0", 0777) = 0 [ 84.952464][ T5721] loop0: detected capacity change from 0 to 8192 [ 84.961388][ T5721] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.974502][ T5721] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.983663][ T5721] REISERFS (device loop0): using ordered data mode [ 84.990206][ T5721] reiserfs: using flush barriers [pid 5721] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5721] chdir("./file0") = 0 [pid 5721] ioctl(4, LOOP_CLR_FD) = 0 [pid 5721] close(4) = 0 [pid 5721] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5721] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5720] <... futex resumed>) = 0 [pid 5720] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5721] <... futex resumed>) = 0 [pid 5720] <... futex resumed>) = 1 [pid 5721] mkdir("./file1", 000 [pid 5720] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5721] <... mkdir resumed>) = 0 [pid 5721] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5720] <... futex resumed>) = 0 [pid 5721] mkdir("./bus", 000 [pid 5720] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5721] <... mkdir resumed>) = 0 [pid 5720] <... futex resumed>) = 0 [pid 5721] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5720] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5721] <... futex resumed>) = 0 [pid 5720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5721] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5720] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 84.995677][ T5721] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.012102][ T5721] REISERFS (device loop0): checking transaction log (loop0) [ 85.020753][ T5721] REISERFS (device loop0): Using r5 hash to sort names [ 85.027829][ T5721] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 85.040498][ T5721] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5720] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5721] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5721] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5720] <... futex resumed>) = 0 [pid 5721] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5720] exit_group(0 [pid 5721] <... futex resumed>) = ? [pid 5720] <... exit_group resumed>) = ? [pid 5721] +++ exited with 0 +++ [pid 5720] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5720, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./213/binderfs") = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./213/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./213") = 0 mkdir("./214", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5723 ./strace-static-x86_64: Process 5723 attached [pid 5723] set_robust_list(0x5555559356e0, 24) = 0 [pid 5723] chdir("./214") = 0 [pid 5723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5723] setpgid(0, 0) = 0 [pid 5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5723] write(3, "1000", 4) = 4 [pid 5723] close(3) = 0 [pid 5723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5723] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5723] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5723] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5724 attached [pid 5724] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5724] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] <... clone resumed>, parent_tid=[5724], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5724 [pid 5723] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] <... futex resumed>) = 0 [pid 5723] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5724] memfd_create("syzkaller", 0) = 3 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 85.067072][ T5721] overlayfs: upper fs needs to support d_type. [ 85.073275][ T5721] overlayfs: upper fs does not support tmpfile. [ 85.080398][ T5721] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.088267][ T5721] overlayfs: failed to resolve './file0': -2 [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5724] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5724] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5724] close(3) = 0 [pid 5724] mkdir("./file0", 0777) = 0 [ 85.168269][ T5724] loop0: detected capacity change from 0 to 8192 [ 85.176802][ T5724] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.189899][ T5724] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.199147][ T5724] REISERFS (device loop0): using ordered data mode [ 85.205695][ T5724] reiserfs: using flush barriers [pid 5724] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5724] chdir("./file0") = 0 [pid 5724] ioctl(4, LOOP_CLR_FD) = 0 [pid 5724] close(4) = 0 [pid 5724] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] <... futex resumed>) = 0 [pid 5723] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... futex resumed>) = 0 [pid 5723] <... futex resumed>) = 1 [pid 5724] mkdir("./file1", 000 [pid 5723] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5724] <... mkdir resumed>) = 0 [pid 5724] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5723] <... futex resumed>) = 0 [pid 5724] mkdir("./bus", 000 [pid 5723] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5724] <... mkdir resumed>) = 0 [pid 5723] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5724] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5723] <... futex resumed>) = 0 [pid 5723] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5723] <... futex resumed>) = 0 [ 85.211243][ T5724] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.227925][ T5724] REISERFS (device loop0): checking transaction log (loop0) [ 85.236212][ T5724] REISERFS (device loop0): Using r5 hash to sort names [ 85.243203][ T5724] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 85.255953][ T5724] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5723] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5724] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5724] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] <... futex resumed>) = 0 [pid 5723] exit_group(0) = ? [pid 5724] <... futex resumed>) = ? [pid 5724] +++ exited with 0 +++ [pid 5723] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5723, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./214/binderfs") = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./214/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./214") = 0 mkdir("./215", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5727 attached , child_tidptr=0x5555559356d0) = 5727 [pid 5727] set_robust_list(0x5555559356e0, 24) = 0 [pid 5727] chdir("./215") = 0 [pid 5727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5727] setpgid(0, 0) = 0 [pid 5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5727] write(3, "1000", 4) = 4 [pid 5727] close(3) = 0 [pid 5727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5727] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5727] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5727] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5728 attached , parent_tid=[5728], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5728 [pid 5727] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5727] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5728] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5728] memfd_create("syzkaller", 0) = 3 [pid 5728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 85.279268][ T5724] overlayfs: upper fs needs to support d_type. [ 85.286258][ T5724] overlayfs: upper fs does not support tmpfile. [ 85.292903][ T5724] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.302156][ T5724] overlayfs: failed to resolve './file0': -2 [pid 5728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5728] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5728] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5728] close(3) = 0 [pid 5728] mkdir("./file0", 0777) = 0 [ 85.382141][ T5728] loop0: detected capacity change from 0 to 8192 [ 85.392031][ T5728] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.405075][ T5728] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.414237][ T5728] REISERFS (device loop0): using ordered data mode [ 85.420810][ T5728] reiserfs: using flush barriers [pid 5728] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5728] chdir("./file0") = 0 [pid 5728] ioctl(4, LOOP_CLR_FD) = 0 [pid 5728] close(4) = 0 [pid 5728] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5727] <... futex resumed>) = 0 [pid 5727] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5728] <... futex resumed>) = 0 [pid 5727] <... futex resumed>) = 1 [pid 5728] mkdir("./file1", 000 [pid 5727] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5728] <... mkdir resumed>) = 0 [pid 5728] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5727] <... futex resumed>) = 0 [pid 5728] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5727] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5727] <... futex resumed>) = 0 [pid 5728] mkdir("./bus", 000 [pid 5727] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5728] <... mkdir resumed>) = 0 [pid 5728] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5727] <... futex resumed>) = 0 [pid 5728] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5727] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5727] <... futex resumed>) = 0 [pid 5728] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 85.426356][ T5728] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.442734][ T5728] REISERFS (device loop0): checking transaction log (loop0) [ 85.450721][ T5728] REISERFS (device loop0): Using r5 hash to sort names [ 85.457774][ T5728] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 85.470463][ T5728] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5727] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5728] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5728] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5727] <... futex resumed>) = 0 [pid 5727] exit_group(0) = ? [pid 5728] <... futex resumed>) = ? [pid 5728] +++ exited with 0 +++ [pid 5727] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5727, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./215/binderfs") = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./215/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./215") = 0 mkdir("./216", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5730 attached , child_tidptr=0x5555559356d0) = 5730 [pid 5730] set_robust_list(0x5555559356e0, 24) = 0 [pid 5730] chdir("./216") = 0 [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5730] setpgid(0, 0) = 0 [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5730] write(3, "1000", 4) = 4 [pid 5730] close(3) = 0 [pid 5730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5730] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5730] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5730] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5731 attached , parent_tid=[5731], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5731 [pid 5731] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5731] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5730] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5731] memfd_create("syzkaller", 0) = 3 [pid 5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 85.495922][ T5728] overlayfs: upper fs needs to support d_type. [ 85.502133][ T5728] overlayfs: upper fs does not support tmpfile. [ 85.508911][ T5728] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.516951][ T5728] overlayfs: failed to resolve './file0': -2 [pid 5731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5731] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5731] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5731] close(3) = 0 [pid 5731] mkdir("./file0", 0777) = 0 [ 85.601324][ T5731] loop0: detected capacity change from 0 to 8192 [ 85.610290][ T5731] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.623375][ T5731] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.632667][ T5731] REISERFS (device loop0): using ordered data mode [ 85.639193][ T5731] reiserfs: using flush barriers [pid 5731] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5731] chdir("./file0") = 0 [pid 5731] ioctl(4, LOOP_CLR_FD) = 0 [pid 5731] close(4) = 0 [pid 5731] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] <... futex resumed>) = 0 [pid 5730] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] <... futex resumed>) = 0 [pid 5730] <... futex resumed>) = 1 [pid 5731] mkdir("./file1", 000 [pid 5730] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5731] <... mkdir resumed>) = 0 [pid 5731] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] <... futex resumed>) = 0 [pid 5731] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5730] <... futex resumed>) = 0 [pid 5731] mkdir("./bus", 000 [pid 5730] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5731] <... mkdir resumed>) = 0 [pid 5731] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] <... futex resumed>) = 0 [pid 5731] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5730] <... futex resumed>) = 0 [ 85.644750][ T5731] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.661011][ T5731] REISERFS (device loop0): checking transaction log (loop0) [ 85.669134][ T5731] REISERFS (device loop0): Using r5 hash to sort names [ 85.676161][ T5731] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 85.688878][ T5731] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5731] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5730] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5731] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5731] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] <... futex resumed>) = 0 [pid 5731] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] exit_group(0 [pid 5731] <... futex resumed>) = ? [pid 5730] <... exit_group resumed>) = ? [pid 5731] +++ exited with 0 +++ [pid 5730] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5730, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./216/binderfs") = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./216/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./216") = 0 mkdir("./217", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5733 ./strace-static-x86_64: Process 5733 attached [pid 5733] set_robust_list(0x5555559356e0, 24) = 0 [pid 5733] chdir("./217") = 0 [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5733] setpgid(0, 0) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5733] write(3, "1000", 4) = 4 [pid 5733] close(3) = 0 [pid 5733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5733] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5733] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5733] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5734 attached , parent_tid=[5734], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5734 [pid 5734] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5734] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5734] <... futex resumed>) = 0 [pid 5733] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5734] memfd_create("syzkaller", 0) = 3 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 85.713271][ T5731] overlayfs: upper fs needs to support d_type. [ 85.720329][ T5731] overlayfs: upper fs does not support tmpfile. [ 85.727183][ T5731] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.735240][ T5731] overlayfs: failed to resolve './file0': -2 [pid 5734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5734] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5734] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5734] close(3) = 0 [pid 5734] mkdir("./file0", 0777) = 0 [ 85.815379][ T5734] loop0: detected capacity change from 0 to 8192 [ 85.824171][ T5734] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.837473][ T5734] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.846873][ T5734] REISERFS (device loop0): using ordered data mode [ 85.853376][ T5734] reiserfs: using flush barriers [pid 5734] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5734] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5734] chdir("./file0") = 0 [pid 5734] ioctl(4, LOOP_CLR_FD) = 0 [pid 5734] close(4) = 0 [pid 5734] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 1 [pid 5734] mkdir("./file1", 000) = 0 [pid 5734] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 1 [pid 5734] mkdir("./bus", 000) = 0 [pid 5734] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 1 [ 85.859111][ T5734] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.875351][ T5734] REISERFS (device loop0): checking transaction log (loop0) [ 85.883371][ T5734] REISERFS (device loop0): Using r5 hash to sort names [ 85.890444][ T5734] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 85.903118][ T5734] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5734] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5734] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5733] exit_group(0) = ? [pid 5734] <... futex resumed>) = ? [pid 5734] +++ exited with 0 +++ [pid 5733] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5733, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./217/binderfs") = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./217/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./217") = 0 mkdir("./218", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5736 attached , child_tidptr=0x5555559356d0) = 5736 [pid 5736] set_robust_list(0x5555559356e0, 24) = 0 [pid 5736] chdir("./218") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5736] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5736] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5737 attached [pid 5737] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5737] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] <... clone resumed>, parent_tid=[5737], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5737 [pid 5736] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5737] <... futex resumed>) = 0 [pid 5737] memfd_create("syzkaller", 0 [pid 5736] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5737] <... memfd_create resumed>) = 3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 85.922742][ T5734] overlayfs: upper fs needs to support d_type. [ 85.929211][ T5734] overlayfs: upper fs does not support tmpfile. [ 85.936020][ T5734] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.943828][ T5734] overlayfs: failed to resolve './file0': -2 [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5737] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5737] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5737] close(3) = 0 [pid 5737] mkdir("./file0", 0777) = 0 [ 86.024587][ T5737] loop0: detected capacity change from 0 to 8192 [ 86.033270][ T5737] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.046293][ T5737] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.055575][ T5737] REISERFS (device loop0): using ordered data mode [ 86.062076][ T5737] reiserfs: using flush barriers [pid 5737] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5737] chdir("./file0") = 0 [pid 5737] ioctl(4, LOOP_CLR_FD) = 0 [pid 5737] close(4) = 0 [pid 5737] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5737] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] <... futex resumed>) = 0 [pid 5736] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = 0 [pid 5736] <... futex resumed>) = 1 [pid 5737] mkdir("./file1", 000 [pid 5736] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... mkdir resumed>) = 0 [pid 5737] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5737] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] <... futex resumed>) = 0 [pid 5737] mkdir("./bus", 000 [pid 5736] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... mkdir resumed>) = 0 [pid 5737] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5737] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] <... futex resumed>) = 0 [pid 5737] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [ 86.067849][ T5737] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.084287][ T5737] REISERFS (device loop0): checking transaction log (loop0) [ 86.092461][ T5737] REISERFS (device loop0): Using r5 hash to sort names [ 86.099414][ T5737] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 86.112106][ T5737] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5736] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5737] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5737] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] exit_group(0 [pid 5737] <... futex resumed>) = ? [pid 5736] <... exit_group resumed>) = ? [pid 5737] +++ exited with 0 +++ [pid 5736] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5736, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./218/binderfs") = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./218/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./218") = 0 mkdir("./219", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5739 attached , child_tidptr=0x5555559356d0) = 5739 [pid 5739] set_robust_list(0x5555559356e0, 24) = 0 [pid 5739] chdir("./219") = 0 [pid 5739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5739] setpgid(0, 0) = 0 [pid 5739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5739] write(3, "1000", 4) = 4 [pid 5739] close(3) = 0 [pid 5739] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5739] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5739] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5739] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5740 attached , parent_tid=[5740], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5740 [pid 5739] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5739] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5740] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5740] memfd_create("syzkaller", 0) = 3 [pid 5740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 86.137506][ T5737] overlayfs: upper fs needs to support d_type. [ 86.143687][ T5737] overlayfs: upper fs does not support tmpfile. [ 86.150608][ T5737] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.158445][ T5737] overlayfs: failed to resolve './file0': -2 [pid 5740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5740] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5740] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5740] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5740] close(3) = 0 [pid 5740] mkdir("./file0", 0777) = 0 [ 86.229177][ T5740] loop0: detected capacity change from 0 to 8192 [ 86.237765][ T5740] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.250811][ T5740] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.260093][ T5740] REISERFS (device loop0): using ordered data mode [ 86.266646][ T5740] reiserfs: using flush barriers [pid 5740] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5740] chdir("./file0") = 0 [pid 5740] ioctl(4, LOOP_CLR_FD) = 0 [pid 5740] close(4) = 0 [pid 5740] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... futex resumed>) = 0 [pid 5739] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5739] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5740] <... futex resumed>) = 1 [ 86.273219][ T5740] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.289567][ T5740] REISERFS (device loop0): checking transaction log (loop0) [ 86.298046][ T5740] REISERFS (device loop0): Using r5 hash to sort names [ 86.305218][ T5740] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 86.317931][ T5740] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5740] mkdir("./file1", 000) = 0 [pid 5740] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... futex resumed>) = 0 [pid 5739] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5739] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5740] <... futex resumed>) = 1 [pid 5740] mkdir("./bus", 000) = 0 [pid 5740] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... futex resumed>) = 0 [pid 5739] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5739] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5740] <... futex resumed>) = 1 [pid 5740] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5740] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... futex resumed>) = 0 [pid 5739] exit_group(0) = ? [pid 5740] <... futex resumed>) = ? [pid 5740] +++ exited with 0 +++ [pid 5739] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5739, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./219/binderfs") = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./219/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./219") = 0 mkdir("./220", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5742 ./strace-static-x86_64: Process 5742 attached [pid 5742] set_robust_list(0x5555559356e0, 24) = 0 [pid 5742] chdir("./220") = 0 [pid 5742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5742] setpgid(0, 0) = 0 [pid 5742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5742] write(3, "1000", 4) = 4 [pid 5742] close(3) = 0 [pid 5742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5742] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5742] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5742] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5743 attached [pid 5743] set_robust_list(0x7f8d103ee9e0, 24 [pid 5742] <... clone resumed>, parent_tid=[5743], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5743 [pid 5743] <... set_robust_list resumed>) = 0 [pid 5742] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5743] memfd_create("syzkaller", 0) = 3 [pid 5743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 86.332521][ T5740] overlayfs: upper fs needs to support d_type. [ 86.338829][ T5740] overlayfs: upper fs does not support tmpfile. [ 86.345515][ T5740] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.352979][ T5740] overlayfs: failed to resolve './file0': -2 [pid 5743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5743] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5743] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5743] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5743] close(3) = 0 [pid 5743] mkdir("./file0", 0777) = 0 [ 86.435827][ T5743] loop0: detected capacity change from 0 to 8192 [ 86.444577][ T5743] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.457673][ T5743] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.466892][ T5743] REISERFS (device loop0): using ordered data mode [ 86.473379][ T5743] reiserfs: using flush barriers [pid 5743] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5743] chdir("./file0") = 0 [pid 5743] ioctl(4, LOOP_CLR_FD) = 0 [pid 5743] close(4) = 0 [pid 5743] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = 0 [pid 5742] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5743] <... futex resumed>) = 1 [pid 5743] mkdir("./file1", 000) = 0 [pid 5743] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = 0 [pid 5742] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5743] <... futex resumed>) = 1 [pid 5743] mkdir("./bus", 000) = 0 [pid 5743] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = 0 [pid 5742] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5743] <... futex resumed>) = 1 [ 86.479101][ T5743] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.496297][ T5743] REISERFS (device loop0): checking transaction log (loop0) [ 86.504717][ T5743] REISERFS (device loop0): Using r5 hash to sort names [ 86.511796][ T5743] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 86.524563][ T5743] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5743] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5743] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5742] <... futex resumed>) = 0 [pid 5743] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5742] exit_group(0 [pid 5743] <... futex resumed>) = ? [pid 5742] <... exit_group resumed>) = ? [pid 5743] +++ exited with 0 +++ [pid 5742] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5742, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./220/binderfs") = 0 umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./220/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./220") = 0 mkdir("./221", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5745 attached , child_tidptr=0x5555559356d0) = 5745 [pid 5745] set_robust_list(0x5555559356e0, 24) = 0 [pid 5745] chdir("./221") = 0 [pid 5745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5745] setpgid(0, 0) = 0 [pid 5745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5745] write(3, "1000", 4) = 4 [pid 5745] close(3) = 0 [pid 5745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5745] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5745] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5745] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5746 attached , parent_tid=[5746], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5746 [pid 5746] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5746] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5745] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5745] <... futex resumed>) = 0 [pid 5746] memfd_create("syzkaller", 0) = 3 [pid 5746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 86.539976][ T5743] overlayfs: upper fs needs to support d_type. [ 86.546517][ T5743] overlayfs: upper fs does not support tmpfile. [ 86.553189][ T5743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.561031][ T5743] overlayfs: failed to resolve './file0': -2 [pid 5745] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5746] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5746] close(3) = 0 [pid 5746] mkdir("./file0", 0777) = 0 [ 86.640079][ T5746] loop0: detected capacity change from 0 to 8192 [ 86.648763][ T5746] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.661788][ T5746] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.670984][ T5746] REISERFS (device loop0): using ordered data mode [ 86.677511][ T5746] reiserfs: using flush barriers [pid 5746] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5746] chdir("./file0") = 0 [pid 5746] ioctl(4, LOOP_CLR_FD) = 0 [pid 5746] close(4) = 0 [pid 5746] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5746] <... futex resumed>) = 1 [pid 5746] mkdir("./file1", 000) = 0 [pid 5746] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5746] <... futex resumed>) = 1 [pid 5746] mkdir("./bus", 000) = 0 [pid 5746] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5746] <... futex resumed>) = 1 [ 86.683088][ T5746] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.699440][ T5746] REISERFS (device loop0): checking transaction log (loop0) [ 86.707422][ T5746] REISERFS (device loop0): Using r5 hash to sort names [ 86.714416][ T5746] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 86.727110][ T5746] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5746] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 ENOENT (No such file or directory) [pid 5746] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] exit_group(0) = ? [pid 5746] <... futex resumed>) = ? [pid 5746] +++ exited with 0 +++ [pid 5745] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5745, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555936720 /* 4 entries */, 32768) = 112 umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./221/binderfs") = 0 umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./221/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55555593e760 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555593e760 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./221/file0") = 0 getdents64(3, 0x555555936720 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./221") = 0 mkdir("./222", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559356d0) = 5748 ./strace-static-x86_64: Process 5748 attached [pid 5748] set_robust_list(0x5555559356e0, 24) = 0 [pid 5748] chdir("./222") = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5748] setpgid(0, 0) = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8d103ce000 [pid 5748] mprotect(0x7f8d103cf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5748] clone(child_stack=0x7f8d103ee2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5749 attached [pid 5749] set_robust_list(0x7f8d103ee9e0, 24) = 0 [pid 5749] futex(0x7f8d104c8788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5748] <... clone resumed>, parent_tid=[5749], tls=0x7f8d103ee700, child_tidptr=0x7f8d103ee9d0) = 5749 [pid 5748] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5749] <... futex resumed>) = 0 [pid 5748] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5749] memfd_create("syzkaller", 0) = 3 [pid 5749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d07fce000 [ 86.755879][ T5746] overlayfs: upper fs needs to support d_type. [ 86.762117][ T5746] overlayfs: upper fs does not support tmpfile. [ 86.769021][ T5746] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.776678][ T5746] overlayfs: failed to resolve './file0': -2 [pid 5749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5749] munmap(0x7f8d07fce000, 4194304) = 0 [pid 5749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5749] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5749] close(3) = 0 [pid 5749] mkdir("./file0", 0777) = 0 [ 86.856531][ T5749] loop0: detected capacity change from 0 to 8192 [ 86.865634][ T5749] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.878671][ T5749] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.887880][ T5749] REISERFS (device loop0): using ordered data mode [ 86.894376][ T5749] reiserfs: using flush barriers [pid 5749] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC|MS_POSIXACL, "") = 0 [pid 5749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5749] chdir("./file0") = 0 [pid 5749] ioctl(4, LOOP_CLR_FD) = 0 [pid 5749] close(4) = 0 [pid 5749] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] <... futex resumed>) = 0 [pid 5748] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] <... futex resumed>) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5749] mkdir("./file1", 000 [pid 5748] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... mkdir resumed>) = 0 [pid 5749] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5749] mkdir("./bus", 000 [pid 5748] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] <... mkdir resumed>) = 0 [pid 5748] <... futex resumed>) = 0 [pid 5749] futex(0x7f8d104c878c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... futex resumed>) = 0 [pid 5748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5749] mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 5748] futex(0x7f8d104c8788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.900119][ T5749] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.916309][ T5749] REISERFS (device loop0): checking transaction log (loop0) [ 86.924535][ T5749] REISERFS (device loop0): Using r5 hash to sort names [ 86.931615][ T5749] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 86.944312][ T5749] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 86.963322][ T5749] overlayfs: upper fs needs to support d_type. [ 86.969565][ T5749] overlayfs: upper fs does not support tmpfile. [ 86.976213][ T5749] ------------[ cut here ]------------ [ 86.981669][ T5749] DEBUG_LOCKS_WARN_ON(1) [ 86.981708][ T5749] WARNING: CPU: 0 PID: 5749 at kernel/locking/lockdep.c:232 __lock_acquire+0x1615/0x5d40 [ 86.995732][ T5749] Modules linked in: [ 86.999604][ T5749] CPU: 0 PID: 5749 Comm: syz-executor179 Not tainted 6.3.0-rc3-syzkaller-00322-g4bdec23f971b #0 [pid 5748] futex(0x7f8d104c878c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 87.009990][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 87.020025][ T5749] RIP: 0010:__lock_acquire+0x1615/0x5d40 [ 87.025647][ T5749] Code: 08 84 d2 0f 85 b4 3d 00 00 8b 15 32 93 13 0d 85 d2 0f 85 31 fb ff ff 48 c7 c6 60 64 4c 8a 48 c7 c7 a0 58 4c 8a e8 db fe e6 ff <0f> 0b 31 ed e9 e9 ed ff ff e8 cd 49 a8 02 85 c0 0f 84 c1 fa ff ff [ 87.045243][ T5749] RSP: 0018:ffffc900032c77f0 EFLAGS: 00010086 [ 87.051304][ T5749] RAX: 0000000000000000 RBX: ffffffff9200079f RCX: 0000000000000000 [ 87.059271][ T5749] RDX: ffff8880267fba80 RSI: ffffffff814b6037 RDI: 0000000000000001 [ 87.067241][ T5749] RBP: 000000000000172b R08: 0000000000000001 R09: 0000000000000000 [ 87.075197][ T5749] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff8880267fc530 [ 87.083150][ T5749] R13: ffff8880267fba80 R14: 0000000000040000 R15: 000000000004172b [ 87.091111][ T5749] FS: 00007f8d103ee700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 87.100037][ T5749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.106610][ T5749] CR2: 00007ffe2c7cb960 CR3: 0000000073294000 CR4: 0000000000350ef0 [ 87.114566][ T5749] Call Trace: [ 87.117837][ T5749] [ 87.120759][ T5749] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 87.126732][ T5749] ? d_lookup+0x105/0x170 [ 87.131054][ T5749] lock_acquire+0x1af/0x520 [ 87.135551][ T5749] ? take_dentry_name_snapshot+0x2b/0x170 [ 87.141260][ T5749] ? lock_release+0x670/0x670 [ 87.145924][ T5749] ? _raw_spin_unlock+0x28/0x40 [ 87.150790][ T5749] ? dput+0x390/0xe10 [ 87.154847][ T5749] ? ovl_lookup_temp+0x1e0/0x270 [ 87.159791][ T5749] ? ovl_cleanup+0x200/0x200 [ 87.164460][ T5749] _raw_spin_lock+0x2e/0x40 [ 87.169049][ T5749] ? take_dentry_name_snapshot+0x2b/0x170 [ 87.174754][ T5749] take_dentry_name_snapshot+0x2b/0x170 [ 87.180292][ T5749] ovl_fill_super+0x2090/0x7270 [ 87.185137][ T5749] ? ovl_show_options+0x780/0x780 [ 87.190196][ T5749] ? sget+0x47b/0x580 [ 87.194167][ T5749] ? lock_downgrade+0x690/0x690 [ 87.199005][ T5749] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 87.204982][ T5749] ? sget+0x128/0x580 [ 87.208956][ T5749] ? set_anon_super_fc+0xb0/0xb0 [ 87.213918][ T5749] ? ovl_show_options+0x780/0x780 [ 87.218949][ T5749] mount_nodev+0x64/0x120 [ 87.223268][ T5749] ? ovl_own_xattr_set+0x10/0x10 [ 87.228191][ T5749] legacy_get_tree+0x109/0x220 [ 87.232946][ T5749] vfs_get_tree+0x8d/0x350 [ 87.237369][ T5749] path_mount+0x1342/0x1e40 [ 87.241868][ T5749] ? kmem_cache_free+0xe9/0x480 [ 87.246715][ T5749] ? finish_automount+0x9b0/0x9b0 [ 87.251731][ T5749] ? putname+0x102/0x140 [ 87.255961][ T5749] __x64_sys_mount+0x283/0x300 [ 87.260722][ T5749] ? copy_mnt_ns+0xb30/0xb30 [ 87.265299][ T5749] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.270487][ T5749] ? _raw_spin_unlock_irq+0x2e/0x50 [ 87.275678][ T5749] ? ptrace_notify+0xfe/0x140 [ 87.280346][ T5749] do_syscall_64+0x39/0xb0 [ 87.284760][ T5749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.290662][ T5749] RIP: 0033:0x7f8d10442bc9 [ 87.295063][ T5749] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.314661][ T5749] RSP: 002b:00007f8d103ee208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.323088][ T5749] RAX: ffffffffffffffda RBX: 00007f8d104c8788 RCX: 00007f8d10442bc9 [ 87.331052][ T5749] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 87.339047][ T5749] RBP: 00007f8d104c8780 R08: 0000000020000480 R09: 0000000000000000 [ 87.347012][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d104c878c [ 87.355581][ T5749] R13: 00007ffe2c78605f R14: 00007f8d103ee300 R15: 0000000000022000 [ 87.363568][ T5749] [ 87.366599][ T5749] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.373861][ T5749] CPU: 0 PID: 5749 Comm: syz-executor179 Not tainted 6.3.0-rc3-syzkaller-00322-g4bdec23f971b #0 [ 87.384255][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 87.394298][ T5749] Call Trace: [ 87.397567][ T5749] [ 87.400485][ T5749] dump_stack_lvl+0xd9/0x150 [ 87.405070][ T5749] panic+0x688/0x730 [ 87.408957][ T5749] ? panic_smp_self_stop+0x90/0x90 [ 87.414491][ T5749] ? show_trace_log_lvl+0x285/0x390 [ 87.419694][ T5749] ? __lock_acquire+0x1615/0x5d40 [ 87.424707][ T5749] check_panic_on_warn+0xb1/0xc0 [ 87.429635][ T5749] __warn+0xf2/0x390 [ 87.433516][ T5749] ? __lock_acquire+0x1615/0x5d40 [ 87.438528][ T5749] report_bug+0x2da/0x500 [ 87.442850][ T5749] handle_bug+0x3c/0x70 [ 87.447018][ T5749] exc_invalid_op+0x18/0x50 [ 87.451511][ T5749] asm_exc_invalid_op+0x1a/0x20 [ 87.456356][ T5749] RIP: 0010:__lock_acquire+0x1615/0x5d40 [ 87.461979][ T5749] Code: 08 84 d2 0f 85 b4 3d 00 00 8b 15 32 93 13 0d 85 d2 0f 85 31 fb ff ff 48 c7 c6 60 64 4c 8a 48 c7 c7 a0 58 4c 8a e8 db fe e6 ff <0f> 0b 31 ed e9 e9 ed ff ff e8 cd 49 a8 02 85 c0 0f 84 c1 fa ff ff [ 87.481578][ T5749] RSP: 0018:ffffc900032c77f0 EFLAGS: 00010086 [ 87.487637][ T5749] RAX: 0000000000000000 RBX: ffffffff9200079f RCX: 0000000000000000 [ 87.495594][ T5749] RDX: ffff8880267fba80 RSI: ffffffff814b6037 RDI: 0000000000000001 [ 87.503562][ T5749] RBP: 000000000000172b R08: 0000000000000001 R09: 0000000000000000 [ 87.511524][ T5749] R10: 0000000000000000 R11: 000000002d2d2d2d R12: ffff8880267fc530 [ 87.519500][ T5749] R13: ffff8880267fba80 R14: 0000000000040000 R15: 000000000004172b [ 87.527459][ T5749] ? __warn_printk+0x187/0x310 [ 87.532348][ T5749] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 87.538322][ T5749] ? d_lookup+0x105/0x170 [ 87.542730][ T5749] lock_acquire+0x1af/0x520 [ 87.547220][ T5749] ? take_dentry_name_snapshot+0x2b/0x170 [ 87.552927][ T5749] ? lock_release+0x670/0x670 [ 87.557593][ T5749] ? _raw_spin_unlock+0x28/0x40 [ 87.562437][ T5749] ? dput+0x390/0xe10 [ 87.566411][ T5749] ? ovl_lookup_temp+0x1e0/0x270 [ 87.571356][ T5749] ? ovl_cleanup+0x200/0x200 [ 87.575938][ T5749] _raw_spin_lock+0x2e/0x40 [ 87.580455][ T5749] ? take_dentry_name_snapshot+0x2b/0x170 [ 87.586168][ T5749] take_dentry_name_snapshot+0x2b/0x170 [ 87.591700][ T5749] ovl_fill_super+0x2090/0x7270 [ 87.596546][ T5749] ? ovl_show_options+0x780/0x780 [ 87.601556][ T5749] ? sget+0x47b/0x580 [ 87.605529][ T5749] ? lock_downgrade+0x690/0x690 [ 87.610370][ T5749] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 87.616363][ T5749] ? sget+0x128/0x580 [ 87.620608][ T5749] ? set_anon_super_fc+0xb0/0xb0 [ 87.625561][ T5749] ? ovl_show_options+0x780/0x780 [ 87.630588][ T5749] mount_nodev+0x64/0x120 [ 87.635001][ T5749] ? ovl_own_xattr_set+0x10/0x10 [ 87.639928][ T5749] legacy_get_tree+0x109/0x220 [ 87.644710][ T5749] vfs_get_tree+0x8d/0x350 [ 87.649121][ T5749] path_mount+0x1342/0x1e40 [ 87.653620][ T5749] ? kmem_cache_free+0xe9/0x480 [ 87.658474][ T5749] ? finish_automount+0x9b0/0x9b0 [ 87.663488][ T5749] ? putname+0x102/0x140 [ 87.667724][ T5749] __x64_sys_mount+0x283/0x300 [ 87.672480][ T5749] ? copy_mnt_ns+0xb30/0xb30 [ 87.677057][ T5749] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.682247][ T5749] ? _raw_spin_unlock_irq+0x2e/0x50 [ 87.687439][ T5749] ? ptrace_notify+0xfe/0x140 [ 87.692107][ T5749] do_syscall_64+0x39/0xb0 [ 87.696518][ T5749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.702834][ T5749] RIP: 0033:0x7f8d10442bc9 [ 87.707232][ T5749] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.726833][ T5749] RSP: 002b:00007f8d103ee208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.735404][ T5749] RAX: ffffffffffffffda RBX: 00007f8d104c8788 RCX: 00007f8d10442bc9 [ 87.743369][ T5749] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 87.751331][ T5749] RBP: 00007f8d104c8780 R08: 0000000020000480 R09: 0000000000000000 [ 87.759301][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d104c878c [ 87.767262][ T5749] R13: 00007ffe2c78605f R14: 00007f8d103ee300 R15: 0000000000022000 [ 87.775224][ T5749] [ 87.778937][ T5749] Kernel Offset: disabled [ 87.783249][ T5749] Rebooting in 86400 seconds..