./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4213794312 <...> Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. execve("./syz-executor4213794312", ["./syz-executor4213794312"], 0x7ffca27bdd10 /* 10 vars */) = 0 brk(NULL) = 0x55555753d000 brk(0x55555753dc40) = 0x55555753dc40 arch_prctl(ARCH_SET_FS, 0x55555753d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x55555753d5d0) = 5089 set_robust_list(0x55555753d5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fc2da7704e0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc2da770bb0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fc2da770580, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2da770bb0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4213794312", 4096) = 28 brk(0x55555755ec40) = 0x55555755ec40 brk(0x55555755f000) = 0x55555755f000 mprotect(0x7fc2da833000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5089 mkdir("./syzkaller.QgihO0", 0700) = 0 chmod("./syzkaller.QgihO0", 0777) = 0 chdir("./syzkaller.QgihO0") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5090 ./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5090] chdir("./0") = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5090] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5090] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5092], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5092 [pid 5090] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5092 attached [pid 5092] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5092] memfd_create("syzkaller", 0) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 syzkaller login: [ 75.262248][ T5092] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5092 'syz-executor421' [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5092] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5092] close(3) = 0 [pid 5092] mkdir("./file0", 0777) = 0 [ 75.332291][ T5092] loop0: detected capacity change from 0 to 8192 [ 75.346030][ T5092] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.359361][ T5092] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.368986][ T5092] REISERFS (device loop0): using ordered data mode [ 75.375662][ T5092] reiserfs: using flush barriers [ 75.382279][ T5092] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.399433][ T5092] REISERFS (device loop0): checking transaction log (loop0) [pid 5092] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5092] chdir("./file0") = 0 [pid 5092] ioctl(4, LOOP_CLR_FD) = 0 [pid 5092] close(4) = 0 [pid 5092] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5092] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] <... futex resumed>) = 0 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5090] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... open resumed>) = 4 [pid 5092] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5092] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] ftruncate(4, 3608577) = 0 [pid 5092] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5092] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5090] <... futex resumed>) = 1 [pid 5092] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5090] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5092] <... openat resumed>) = 5 [pid 5090] <... mmap resumed>) = 0x7fc2d271e000 [pid 5092] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5092] <... futex resumed>) = 0 [pid 5090] <... mprotect resumed>) = 0 [pid 5092] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5094 attached , parent_tid=[5094], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5094 [pid 5094] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5094] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... futex resumed>) = 0 [ 75.459666][ T5092] REISERFS (device loop0): Using r5 hash to sort names [ 75.468135][ T5092] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5094] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5094] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5090] exit_group(0 [pid 5094] ???( [pid 5090] <... exit_group resumed>) = ? [pid 5094] <... ??? resumed>) = ? [pid 5092] <... futex resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ [pid 5090] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5095 ./strace-static-x86_64: Process 5095 attached [pid 5095] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5095] chdir("./1") = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5095] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5095] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5095] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5096], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5096 [pid 5095] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5096] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5096] close(3) = 0 [pid 5096] mkdir("./file0", 0777) = 0 [ 75.710053][ T5096] loop0: detected capacity change from 0 to 8192 [ 75.721589][ T5096] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.734647][ T5096] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.743910][ T5096] REISERFS (device loop0): using ordered data mode [ 75.750483][ T5096] reiserfs: using flush barriers [ 75.756582][ T5096] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.773178][ T5096] REISERFS (device loop0): checking transaction log (loop0) [pid 5096] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5096] chdir("./file0") = 0 [pid 5096] ioctl(4, LOOP_CLR_FD) = 0 [pid 5096] close(4) = 0 [pid 5096] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] <... futex resumed>) = 0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5095] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... open resumed>) = 4 [pid 5096] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5096] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] ftruncate(4, 3608577 [pid 5095] <... futex resumed>) = 0 [pid 5095] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... ftruncate resumed>) = 0 [pid 5096] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5096] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] <... futex resumed>) = 0 [pid 5095] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 1 [pid 5096] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5095] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] <... openat resumed>) = 5 [pid 5095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5096] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] <... mmap resumed>) = 0x7fc2d271e000 [pid 5096] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5095] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5098], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5098 [pid 5095] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5098] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5098] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5095] exit_group(0 [pid 5096] <... futex resumed>) = ? [pid 5095] <... exit_group resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5098] +++ exited with 0 +++ [pid 5095] +++ exited with 0 +++ [ 75.830987][ T5096] REISERFS (device loop0): Using r5 hash to sort names [ 75.838192][ T5096] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5099] chdir("./2") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5099] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5100 attached , parent_tid=[5100], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5100 [pid 5100] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5100] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5100] memfd_create("syzkaller", 0 [pid 5099] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5100] <... memfd_create resumed>) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5100] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 76.059889][ T5100] loop0: detected capacity change from 0 to 8192 [ 76.071075][ T5100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.084583][ T5100] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.094170][ T5100] REISERFS (device loop0): using ordered data mode [ 76.101104][ T5100] reiserfs: using flush barriers [ 76.107302][ T5100] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.124218][ T5100] REISERFS (device loop0): checking transaction log (loop0) [pid 5100] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5100] chdir("./file0") = 0 [pid 5100] ioctl(4, LOOP_CLR_FD) = 0 [pid 5100] close(4) = 0 [pid 5100] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5100] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5100] ftruncate(4, 3608577) = 0 [pid 5100] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5099] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5100] <... futex resumed>) = 1 [pid 5099] <... clone resumed>, parent_tid=[5102], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5102 [pid 5100] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5099] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 5 [pid 5099] <... futex resumed>) = 0 [pid 5100] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5102] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5102] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5099] exit_group(0 [pid 5100] <... futex resumed>) = ? [pid 5099] <... exit_group resumed>) = ? [pid 5100] +++ exited with 0 +++ [pid 5102] <... futex resumed>) = ? [pid 5102] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 76.180359][ T5100] REISERFS (device loop0): Using r5 hash to sort names [ 76.187669][ T5100] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5103 ./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5103] chdir("./3") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5103] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5104], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5104 [pid 5103] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5104] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [ 76.381736][ T5104] loop0: detected capacity change from 0 to 8192 [ 76.392338][ T5104] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.405413][ T5104] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.414759][ T5104] REISERFS (device loop0): using ordered data mode [ 76.421285][ T5104] reiserfs: using flush barriers [ 76.427583][ T5104] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.444050][ T5104] REISERFS (device loop0): checking transaction log (loop0) [pid 5104] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./file0") = 0 [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 5104] close(4) = 0 [pid 5104] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5104] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5104] ftruncate(4, 3608577) = 0 [pid 5104] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = 0 [pid 5103] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5103] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5106], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5106 [pid 5103] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5104] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 5 [pid 5104] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5106] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5106] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5106] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] exit_group(0 [pid 5106] <... futex resumed>) = ? [pid 5103] <... exit_group resumed>) = ? [pid 5106] +++ exited with 0 +++ [pid 5104] <... futex resumed>) = ? [pid 5104] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 [ 76.505641][ T5104] REISERFS (device loop0): Using r5 hash to sort names [ 76.512833][ T5104] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5107 ./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5107] chdir("./4") = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5107] close(3) = 0 [pid 5107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5107] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5107] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5107] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5108], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5108 [pid 5107] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5108 attached [pid 5108] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5108] memfd_create("syzkaller", 0) = 3 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5108] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5108] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5108] close(3) = 0 [pid 5108] mkdir("./file0", 0777) = 0 [ 76.720768][ T5108] loop0: detected capacity change from 0 to 8192 [ 76.731477][ T5108] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.745259][ T5108] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 76.754615][ T5108] REISERFS (device loop0): using ordered data mode [ 76.761394][ T5108] reiserfs: using flush barriers [ 76.767672][ T5108] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.784261][ T5108] REISERFS (device loop0): checking transaction log (loop0) [pid 5108] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5108] chdir("./file0") = 0 [pid 5108] ioctl(4, LOOP_CLR_FD) = 0 [pid 5108] close(4) = 0 [pid 5108] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] <... futex resumed>) = 0 [pid 5107] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 1 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5107] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] <... open resumed>) = 4 [pid 5108] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5107] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] ftruncate(4, 3608577 [pid 5107] <... futex resumed>) = 0 [pid 5107] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] <... ftruncate resumed>) = 0 [pid 5108] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5107] <... futex resumed>) = 0 [pid 5108] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5107] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... openat resumed>) = 5 [pid 5107] <... futex resumed>) = 0 [pid 5108] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] <... mmap resumed>) = 0x7fc2d271e000 [pid 5107] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5107] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5110], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5110 [pid 5107] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5110] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5110] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5107] exit_group(0) = ? [pid 5110] <... futex resumed>) = ? [pid 5108] <... futex resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5108] +++ exited with 0 +++ [pid 5107] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 76.840969][ T5108] REISERFS (device loop0): Using r5 hash to sort names [ 76.848107][ T5108] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. unlink("./4/binderfs") = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5111 attached [pid 5111] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5111] chdir("./5") = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5111] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5111] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5111] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5112], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5112 [pid 5111] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5112 attached [pid 5089] <... clone resumed>, child_tidptr=0x55555753d5d0) = 5111 [pid 5112] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5112] memfd_create("syzkaller", 0) = 3 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5112] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5112] close(3) = 0 [pid 5112] mkdir("./file0", 0777) = 0 [ 77.048077][ T5112] loop0: detected capacity change from 0 to 8192 [ 77.060222][ T5112] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.073391][ T5112] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.082979][ T5112] REISERFS (device loop0): using ordered data mode [ 77.089645][ T5112] reiserfs: using flush barriers [ 77.095770][ T5112] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.112397][ T5112] REISERFS (device loop0): checking transaction log (loop0) [pid 5112] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] close(4) = 0 [pid 5112] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5111] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5112] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5111] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] ftruncate(4, 3608577) = 0 [pid 5112] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = 0 [pid 5111] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5111] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5111] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5114], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5114 [pid 5111] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... futex resumed>) = 1 [pid 5112] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x7fc2d273e9e0, 24 [pid 5112] <... openat resumed>) = 5 [pid 5112] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] <... set_robust_list resumed>) = 0 [pid 5114] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5114] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5111] exit_group(0) = ? [pid 5112] <... futex resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5114] +++ exited with 0 +++ [pid 5111] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 77.167820][ T5112] REISERFS (device loop0): Using r5 hash to sort names [ 77.176048][ T5112] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5115 ./strace-static-x86_64: Process 5115 attached [pid 5115] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5115] chdir("./6") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5115] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5115] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5116], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5116 [pid 5115] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5116] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5116] close(3) = 0 [pid 5116] mkdir("./file0", 0777) = 0 [ 77.369737][ T5116] loop0: detected capacity change from 0 to 8192 [ 77.381084][ T5116] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.394405][ T5116] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.403925][ T5116] REISERFS (device loop0): using ordered data mode [ 77.410814][ T5116] reiserfs: using flush barriers [ 77.417124][ T5116] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.433784][ T5116] REISERFS (device loop0): checking transaction log (loop0) [pid 5116] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./file0") = 0 [pid 5116] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] close(4) = 0 [pid 5116] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5115] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... open resumed>) = 4 [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] ftruncate(4, 3608577 [pid 5115] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] <... ftruncate resumed>) = 0 [pid 5115] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5116] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5115] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... openat resumed>) = 5 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5116] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5115] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5118], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5118 [pid 5115] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5118] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5118] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5115] exit_group(0 [pid 5116] <... futex resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5116] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 [ 77.491084][ T5116] REISERFS (device loop0): Using r5 hash to sort names [ 77.498249][ T5116] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./6/binderfs") = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5119 ./strace-static-x86_64: Process 5119 attached [pid 5119] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5119] chdir("./7") = 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5119] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5119] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5120 attached , parent_tid=[5120], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5120 [pid 5119] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5120] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5120] memfd_create("syzkaller", 0) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5120] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5120] close(3) = 0 [pid 5120] mkdir("./file0", 0777) = 0 [ 77.720173][ T5120] loop0: detected capacity change from 0 to 8192 [ 77.741142][ T5120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.754313][ T5120] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.763642][ T5120] REISERFS (device loop0): using ordered data mode [ 77.770239][ T5120] reiserfs: using flush barriers [ 77.776398][ T5120] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.792868][ T5120] REISERFS (device loop0): checking transaction log (loop0) [pid 5120] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5120] chdir("./file0") = 0 [pid 5120] ioctl(4, LOOP_CLR_FD) = 0 [pid 5120] close(4) = 0 [pid 5120] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5120] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5119] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... open resumed>) = 4 [pid 5120] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5120] ftruncate(4, 3608577 [pid 5119] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5120] <... ftruncate resumed>) = 0 [pid 5119] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5120] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5119] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... openat resumed>) = 5 [pid 5119] <... futex resumed>) = 0 [pid 5120] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5119] <... futex resumed>) = 0 [pid 5120] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5119] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5122], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5122 [pid 5119] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5122 attached [pid 5122] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5122] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5122] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5119] exit_group(0 [pid 5120] <... futex resumed>) = ? [pid 5119] <... exit_group resumed>) = ? [pid 5120] +++ exited with 0 +++ [pid 5122] <... futex resumed>) = ? [pid 5122] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./7/binderfs") = 0 [ 77.851096][ T5120] REISERFS (device loop0): Using r5 hash to sort names [ 77.858428][ T5120] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5123 ./strace-static-x86_64: Process 5123 attached [pid 5123] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5123] chdir("./8") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5123] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5124], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5124 [pid 5123] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5124] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [ 78.042474][ T5124] loop0: detected capacity change from 0 to 8192 [ 78.054944][ T5124] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.068075][ T5124] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.077427][ T5124] REISERFS (device loop0): using ordered data mode [ 78.083969][ T5124] reiserfs: using flush barriers [ 78.090259][ T5124] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.106681][ T5124] REISERFS (device loop0): checking transaction log (loop0) [pid 5124] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file0") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [pid 5124] close(4) = 0 [pid 5124] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5123] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... open resumed>) = 4 [pid 5123] <... futex resumed>) = 0 [pid 5124] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] ftruncate(4, 3608577 [pid 5123] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... ftruncate resumed>) = 0 [pid 5124] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5124] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5123] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... openat resumed>) = 5 [pid 5123] <... futex resumed>) = 0 [pid 5124] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5124] <... futex resumed>) = 0 [pid 5123] <... mmap resumed>) = 0x7fc2d271e000 [pid 5124] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5126], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5126 [pid 5123] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5126] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5126] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5126] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] exit_group(0 [pid 5126] <... futex resumed>) = ? [pid 5124] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5124] +++ exited with 0 +++ [pid 5126] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 [ 78.161334][ T5124] REISERFS (device loop0): Using r5 hash to sort names [ 78.168585][ T5124] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./8/binderfs") = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5127 ./strace-static-x86_64: Process 5127 attached [pid 5127] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5127] chdir("./9") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5127] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5127] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5128], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5128 [pid 5127] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5128] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5128] close(3) = 0 [pid 5128] mkdir("./file0", 0777) = 0 [ 78.388474][ T5128] loop0: detected capacity change from 0 to 8192 [ 78.399528][ T5128] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.412666][ T5128] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.421955][ T5128] REISERFS (device loop0): using ordered data mode [ 78.428618][ T5128] reiserfs: using flush barriers [ 78.434659][ T5128] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.451112][ T5128] REISERFS (device loop0): checking transaction log (loop0) [pid 5128] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5128] chdir("./file0") = 0 [pid 5128] ioctl(4, LOOP_CLR_FD) = 0 [pid 5128] close(4) = 0 [pid 5128] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] <... futex resumed>) = 0 [pid 5128] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5127] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... open resumed>) = 4 [pid 5127] <... futex resumed>) = 0 [pid 5128] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = 0 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] ftruncate(4, 3608577 [pid 5127] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] <... ftruncate resumed>) = 0 [pid 5127] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] <... futex resumed>) = 0 [pid 5128] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5127] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... openat resumed>) = 5 [pid 5127] <... futex resumed>) = 0 [pid 5128] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 0 [pid 5127] <... futex resumed>) = 0 [pid 5128] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5127] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5127] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5130], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5130 [pid 5127] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5130 attached [pid 5130] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5130] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5130] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] <... futex resumed>) = 0 [pid 5127] exit_group(0 [pid 5128] <... futex resumed>) = ? [pid 5127] <... exit_group resumed>) = ? [pid 5128] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ [pid 5127] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 78.508050][ T5128] REISERFS (device loop0): Using r5 hash to sort names [ 78.515205][ T5128] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./9/binderfs") = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5131 ./strace-static-x86_64: Process 5131 attached [pid 5131] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5131] chdir("./10") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5131] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5131] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5131] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5132], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5132 [pid 5131] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5132] memfd_create("syzkaller", 0) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5132] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5132] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5132] close(3) = 0 [pid 5132] mkdir("./file0", 0777) = 0 [ 78.710370][ T5132] loop0: detected capacity change from 0 to 8192 [ 78.720656][ T5132] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.733939][ T5132] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 78.743554][ T5132] REISERFS (device loop0): using ordered data mode [ 78.750221][ T5132] reiserfs: using flush barriers [ 78.756301][ T5132] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.772839][ T5132] REISERFS (device loop0): checking transaction log (loop0) [pid 5132] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5132] chdir("./file0") = 0 [pid 5132] ioctl(4, LOOP_CLR_FD) = 0 [pid 5132] close(4) = 0 [pid 5132] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5131] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... futex resumed>) = 1 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5132] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5131] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... futex resumed>) = 1 [pid 5132] ftruncate(4, 3608577) = 0 [pid 5132] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... futex resumed>) = 0 [pid 5131] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5131] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5131] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5134], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5134 [pid 5131] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... futex resumed>) = 1 [pid 5132] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 5 [pid 5132] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5134] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5134] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5134] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] exit_group(0 [pid 5134] <... futex resumed>) = ? [pid 5132] <... futex resumed>) = ? [pid 5131] <... exit_group resumed>) = ? [pid 5134] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 5131] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./10/binderfs") = 0 [ 78.828364][ T5132] REISERFS (device loop0): Using r5 hash to sort names [ 78.835710][ T5132] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5135 ./strace-static-x86_64: Process 5135 attached [pid 5135] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5135] chdir("./11") = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] setpgid(0, 0) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5135] write(3, "1000", 4) = 4 [pid 5135] close(3) = 0 [pid 5135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5135] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5135] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5136], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5136 [pid 5135] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5136] memfd_create("syzkaller", 0) = 3 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5136] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5136] close(3) = 0 [pid 5136] mkdir("./file0", 0777) = 0 [ 79.023359][ T5136] loop0: detected capacity change from 0 to 8192 [ 79.033074][ T5136] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.046135][ T5136] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.055408][ T5136] REISERFS (device loop0): using ordered data mode [ 79.061936][ T5136] reiserfs: using flush barriers [ 79.068112][ T5136] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.085209][ T5136] REISERFS (device loop0): checking transaction log (loop0) [pid 5136] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5136] chdir("./file0") = 0 [pid 5136] ioctl(4, LOOP_CLR_FD) = 0 [pid 5136] close(4) = 0 [pid 5136] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5136] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5136] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5135] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... open resumed>) = 4 [pid 5136] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5136] ftruncate(4, 3608577 [pid 5135] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] <... ftruncate resumed>) = 0 [pid 5135] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5136] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5135] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... openat resumed>) = 5 [pid 5135] <... futex resumed>) = 0 [pid 5135] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] <... mmap resumed>) = 0x7fc2d271e000 [pid 5135] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x7fc2d273e9e0, 24 [pid 5135] <... clone resumed>, parent_tid=[5138], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5138 [pid 5138] <... set_robust_list resumed>) = 0 [pid 5135] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5135] <... futex resumed>) = 0 [pid 5135] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] <... mknod resumed>) = 0 [pid 5138] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5135] exit_group(0 [pid 5136] <... futex resumed>) = ? [pid 5135] <... exit_group resumed>) = ? [pid 5136] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 5135] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./11/binderfs") = 0 [ 79.140405][ T5136] REISERFS (device loop0): Using r5 hash to sort names [ 79.147693][ T5136] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5139 ./strace-static-x86_64: Process 5139 attached [pid 5139] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5139] chdir("./12") = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5139] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5139] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5139] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5140], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5140 [pid 5139] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5140 attached [pid 5140] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5140] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] close(3) = 0 [pid 5140] mkdir("./file0", 0777) = 0 [ 79.327428][ T5140] loop0: detected capacity change from 0 to 8192 [ 79.338883][ T5140] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.352073][ T5140] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.361667][ T5140] REISERFS (device loop0): using ordered data mode [ 79.368359][ T5140] reiserfs: using flush barriers [ 79.374406][ T5140] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.391013][ T5140] REISERFS (device loop0): checking transaction log (loop0) [pid 5140] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5140] chdir("./file0") = 0 [pid 5140] ioctl(4, LOOP_CLR_FD) = 0 [pid 5140] close(4) = 0 [pid 5140] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5139] <... futex resumed>) = 0 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5139] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... open resumed>) = 4 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5139] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] ftruncate(4, 3608577 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... ftruncate resumed>) = 0 [pid 5140] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5139] <... futex resumed>) = 0 [pid 5140] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5139] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... openat resumed>) = 5 [pid 5139] <... futex resumed>) = 0 [pid 5140] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 0 [pid 5140] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5139] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5139] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5142], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5142 [pid 5139] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5142] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5142] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5142] <... futex resumed>) = 1 [pid 5142] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] exit_group(0 [pid 5140] <... futex resumed>) = ? [pid 5139] <... exit_group resumed>) = ? [pid 5140] +++ exited with 0 +++ [pid 5142] <... futex resumed>) = ? [pid 5142] +++ exited with 0 +++ [pid 5139] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 79.445901][ T5140] REISERFS (device loop0): Using r5 hash to sort names [ 79.453035][ T5140] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./12/binderfs") = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5143 ./strace-static-x86_64: Process 5143 attached [pid 5143] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5143] chdir("./13") = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5143] setpgid(0, 0) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5143] close(3) = 0 [pid 5143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5143] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5143] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5143] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5144], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5144 [pid 5143] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5144 attached [pid 5144] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5144] memfd_create("syzkaller", 0) = 3 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5144] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5144] close(3) = 0 [pid 5144] mkdir("./file0", 0777) = 0 [ 79.671366][ T5144] loop0: detected capacity change from 0 to 8192 [ 79.682451][ T5144] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.695731][ T5144] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.705060][ T5144] REISERFS (device loop0): using ordered data mode [ 79.711592][ T5144] reiserfs: using flush barriers [ 79.717876][ T5144] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.734369][ T5144] REISERFS (device loop0): checking transaction log (loop0) [pid 5144] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5144] chdir("./file0") = 0 [pid 5144] ioctl(4, LOOP_CLR_FD) = 0 [pid 5144] close(4) = 0 [pid 5144] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5144] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] ftruncate(4, 3608577) = 0 [pid 5144] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 79.791133][ T5144] REISERFS (device loop0): Using r5 hash to sort names [ 79.798338][ T5144] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5144] <... openat resumed>) = 5 [pid 5143] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5144] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... mprotect resumed>) = 0 [pid 5143] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5146 attached [pid 5144] <... futex resumed>) = 0 [pid 5144] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... clone resumed>, parent_tid=[5146], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5146 [pid 5143] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5146] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5146] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5143] exit_group(0 [pid 5144] <... futex resumed>) = ? [pid 5143] <... exit_group resumed>) = ? [pid 5144] +++ exited with 0 +++ [pid 5146] +++ exited with 0 +++ [pid 5143] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./13/binderfs") = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5147 ./strace-static-x86_64: Process 5147 attached [pid 5147] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5147] chdir("./14") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5147] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5147] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5148], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5148 [pid 5147] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5148 attached [pid 5148] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5148] memfd_create("syzkaller", 0) = 3 [pid 5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5148] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5148] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5148] close(3) = 0 [pid 5148] mkdir("./file0", 0777) = 0 [ 80.010347][ T5148] loop0: detected capacity change from 0 to 8192 [ 80.021670][ T5148] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.034731][ T5148] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.043938][ T5148] REISERFS (device loop0): using ordered data mode [ 80.050512][ T5148] reiserfs: using flush barriers [ 80.056547][ T5148] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.073156][ T5148] REISERFS (device loop0): checking transaction log (loop0) [pid 5148] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5148] chdir("./file0") = 0 [pid 5148] ioctl(4, LOOP_CLR_FD) = 0 [pid 5148] close(4) = 0 [pid 5148] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5148] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5147] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] <... open resumed>) = 4 [pid 5147] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5148] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5148] ftruncate(4, 3608577 [pid 5147] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] <... ftruncate resumed>) = 0 [pid 5147] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5148] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5148] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5147] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... openat resumed>) = 5 [pid 5147] <... futex resumed>) = 0 [pid 5148] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 0 [pid 5148] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5147] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5147] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5150], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5150 [pid 5147] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5150 attached [pid 5150] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5150] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5150] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = 0 [pid 5150] <... futex resumed>) = 1 [pid 5150] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5147] exit_group(0 [pid 5150] <... futex resumed>) = ? [pid 5148] <... futex resumed>) = ? [pid 5147] <... exit_group resumed>) = ? [pid 5148] +++ exited with 0 +++ [pid 5150] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 80.129075][ T5148] REISERFS (device loop0): Using r5 hash to sort names [ 80.136311][ T5148] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./14/binderfs") = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5151 ./strace-static-x86_64: Process 5151 attached [pid 5151] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5151] chdir("./15") = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5151] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5152], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5152 [pid 5151] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5152] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5152] close(3) = 0 [pid 5152] mkdir("./file0", 0777) = 0 [ 80.334078][ T5152] loop0: detected capacity change from 0 to 8192 [ 80.345867][ T5152] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.359557][ T5152] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.368882][ T5152] REISERFS (device loop0): using ordered data mode [ 80.375616][ T5152] reiserfs: using flush barriers [ 80.382421][ T5152] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.398983][ T5152] REISERFS (device loop0): checking transaction log (loop0) [pid 5152] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./file0") = 0 [pid 5152] ioctl(4, LOOP_CLR_FD) = 0 [pid 5152] close(4) = 0 [pid 5152] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5152] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5152] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5151] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... open resumed>) = 4 [pid 5152] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5152] ftruncate(4, 3608577 [pid 5151] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5152] <... ftruncate resumed>) = 0 [pid 5151] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5152] <... futex resumed>) = 0 [pid 5151] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5151] <... futex resumed>) = 0 [pid 5152] <... openat resumed>) = 5 [pid 5151] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5152] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] <... mmap resumed>) = 0x7fc2d271e000 [pid 5151] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5154], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5154 [pid 5151] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5154] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5154] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5151] exit_group(0) = ? [pid 5152] <... futex resumed>) = ? [pid 5152] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./15/binderfs") = 0 [ 80.454193][ T5152] REISERFS (device loop0): Using r5 hash to sort names [ 80.461649][ T5152] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5155 ./strace-static-x86_64: Process 5155 attached [pid 5155] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5155] chdir("./16") = 0 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5155] setpgid(0, 0) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5155] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5155] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5155] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5156], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5156 [pid 5155] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5156 attached [pid 5156] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5156] memfd_create("syzkaller", 0) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5156] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5156] close(3) = 0 [pid 5156] mkdir("./file0", 0777) = 0 [ 80.669256][ T5156] loop0: detected capacity change from 0 to 8192 [ 80.680226][ T5156] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.693669][ T5156] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 80.703129][ T5156] REISERFS (device loop0): using ordered data mode [ 80.709730][ T5156] reiserfs: using flush barriers [ 80.715739][ T5156] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.732210][ T5156] REISERFS (device loop0): checking transaction log (loop0) [pid 5156] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5156] chdir("./file0") = 0 [pid 5156] ioctl(4, LOOP_CLR_FD) = 0 [pid 5156] close(4) = 0 [pid 5156] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5156] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... futex resumed>) = 0 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5155] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... open resumed>) = 4 [pid 5156] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5156] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] <... futex resumed>) = 0 [pid 5156] ftruncate(4, 3608577 [pid 5155] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... ftruncate resumed>) = 0 [pid 5156] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5156] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5155] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] <... openat resumed>) = 5 [pid 5155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5155] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5156] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... mprotect resumed>) = 0 [pid 5156] <... futex resumed>) = 0 [pid 5155] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5156] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... clone resumed>, parent_tid=[5158], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5158 [pid 5155] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5158 attached [pid 5158] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5158] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5158] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 0 [pid 5155] exit_group(0 [pid 5156] <... futex resumed>) = ? [pid 5155] <... exit_group resumed>) = ? [pid 5156] +++ exited with 0 +++ [pid 5158] <... futex resumed>) = ? [pid 5158] +++ exited with 0 +++ [pid 5155] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./16/binderfs") = 0 [ 80.787581][ T5156] REISERFS (device loop0): Using r5 hash to sort names [ 80.794820][ T5156] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5159 ./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5159] chdir("./17") = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5159] close(3) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5159] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5159] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5160], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5160 ./strace-static-x86_64: Process 5160 attached [pid 5159] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5160] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5160] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5160] close(3) = 0 [pid 5160] mkdir("./file0", 0777) = 0 [ 80.997538][ T5160] loop0: detected capacity change from 0 to 8192 [ 81.007193][ T5160] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.020265][ T5160] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.029604][ T5160] REISERFS (device loop0): using ordered data mode [ 81.036197][ T5160] reiserfs: using flush barriers [ 81.042122][ T5160] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.058633][ T5160] REISERFS (device loop0): checking transaction log (loop0) [pid 5160] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./file0") = 0 [pid 5160] ioctl(4, LOOP_CLR_FD) = 0 [pid 5160] close(4) = 0 [pid 5160] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5160] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5159] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... open resumed>) = 4 [pid 5160] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5160] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] ftruncate(4, 3608577 [pid 5159] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... ftruncate resumed>) = 0 [pid 5160] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5160] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5159] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... openat resumed>) = 5 [pid 5160] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5160] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... mmap resumed>) = 0x7fc2d271e000 [pid 5159] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5162], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5162 ./strace-static-x86_64: Process 5162 attached [pid 5159] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5162] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5162] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 0 [pid 5159] exit_group(0 [pid 5162] <... futex resumed>) = ? [pid 5160] <... futex resumed>) = ? [pid 5159] <... exit_group resumed>) = ? [pid 5162] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 81.115279][ T5160] REISERFS (device loop0): Using r5 hash to sort names [ 81.122422][ T5160] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. unlink("./17/binderfs") = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5163 ./strace-static-x86_64: Process 5163 attached [pid 5163] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5163] chdir("./18") = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5163] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5163] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5164], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5164 [pid 5163] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5164] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5164] close(3) = 0 [pid 5164] mkdir("./file0", 0777) = 0 [ 81.326313][ T5164] loop0: detected capacity change from 0 to 8192 [ 81.337667][ T5164] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.350779][ T5164] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.360069][ T5164] REISERFS (device loop0): using ordered data mode [ 81.366657][ T5164] reiserfs: using flush barriers [ 81.372750][ T5164] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.389306][ T5164] REISERFS (device loop0): checking transaction log (loop0) [pid 5164] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./file0") = 0 [pid 5164] ioctl(4, LOOP_CLR_FD) = 0 [pid 5164] close(4) = 0 [pid 5164] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5163] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... open resumed>) = 4 [pid 5163] <... futex resumed>) = 0 [pid 5163] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] ftruncate(4, 3608577 [pid 5163] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... ftruncate resumed>) = 0 [pid 5164] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5163] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] <... futex resumed>) = 1 [pid 5163] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5163] <... futex resumed>) = 0 [pid 5164] <... openat resumed>) = 5 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5164] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... mmap resumed>) = 0x7fc2d271e000 [pid 5164] <... futex resumed>) = 0 [pid 5163] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5164] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] <... mprotect resumed>) = 0 [pid 5163] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5166], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5166 [pid 5163] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5166 attached [pid 5166] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5166] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5166] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = 1 [pid 5163] exit_group(0 [pid 5164] <... futex resumed>) = ? [pid 5163] <... exit_group resumed>) = ? [pid 5164] +++ exited with 0 +++ [pid 5166] +++ exited with 0 +++ [pid 5163] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./18/binderfs") = 0 [ 81.444459][ T5164] REISERFS (device loop0): Using r5 hash to sort names [ 81.451645][ T5164] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5167] chdir("./19") = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5167] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5168 attached , parent_tid=[5168], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5168 [pid 5168] set_robust_list(0x7fc2da75f9e0, 24 [pid 5167] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... set_robust_list resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5168] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5168] close(3) = 0 [pid 5168] mkdir("./file0", 0777) = 0 [ 81.656635][ T5168] loop0: detected capacity change from 0 to 8192 [ 81.669034][ T5168] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.682175][ T5168] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.691808][ T5168] REISERFS (device loop0): using ordered data mode [ 81.698700][ T5168] reiserfs: using flush barriers [ 81.705210][ T5168] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.721835][ T5168] REISERFS (device loop0): checking transaction log (loop0) [pid 5168] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5168] chdir("./file0") = 0 [pid 5168] ioctl(4, LOOP_CLR_FD) = 0 [pid 5168] close(4) = 0 [pid 5168] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5168] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5168] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5168] ftruncate(4, 3608577 [pid 5167] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... ftruncate resumed>) = 0 [pid 5168] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5168] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5167] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] <... openat resumed>) = 5 [pid 5167] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5168] <... futex resumed>) = 0 [pid 5168] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] <... mmap resumed>) = 0x7fc2d271e000 [pid 5167] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5170], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5170 ./strace-static-x86_64: Process 5170 attached [pid 5167] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5170] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5170] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5170] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] exit_group(0 [pid 5170] <... futex resumed>) = ? [pid 5167] <... exit_group resumed>) = ? [pid 5170] +++ exited with 0 +++ [pid 5168] <... futex resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 81.777547][ T5168] REISERFS (device loop0): Using r5 hash to sort names [ 81.785537][ T5168] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. unlink("./19/binderfs") = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5171 ./strace-static-x86_64: Process 5171 attached [pid 5171] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5171] chdir("./20") = 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5171] setpgid(0, 0) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5171] write(3, "1000", 4) = 4 [pid 5171] close(3) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5171] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5171] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5171] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5172 attached , parent_tid=[5172], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5172 [pid 5171] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5172] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5172] memfd_create("syzkaller", 0) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5172] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5172] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5172] close(3) = 0 [pid 5172] mkdir("./file0", 0777) = 0 [ 81.993240][ T5172] loop0: detected capacity change from 0 to 8192 [ 82.005291][ T5172] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.018356][ T5172] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.027916][ T5172] REISERFS (device loop0): using ordered data mode [ 82.034461][ T5172] reiserfs: using flush barriers [ 82.040839][ T5172] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.057473][ T5172] REISERFS (device loop0): checking transaction log (loop0) [pid 5172] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5172] chdir("./file0") = 0 [pid 5172] ioctl(4, LOOP_CLR_FD) = 0 [pid 5172] close(4) = 0 [pid 5172] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5171] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5172] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5172] ftruncate(4, 3608577 [pid 5171] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... ftruncate resumed>) = 0 [pid 5172] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5172] <... futex resumed>) = 1 [pid 5171] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5171] <... futex resumed>) = 0 [pid 5171] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... openat resumed>) = 5 [pid 5171] <... futex resumed>) = 0 [pid 5172] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5172] <... futex resumed>) = 0 [pid 5171] <... mmap resumed>) = 0x7fc2d271e000 [pid 5171] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5172] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] <... mprotect resumed>) = 0 [pid 5171] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5174 attached [pid 5174] set_robust_list(0x7fc2d273e9e0, 24 [pid 5171] <... clone resumed>, parent_tid=[5174], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5174 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5171] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5171] <... futex resumed>) = 0 [pid 5171] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... mknod resumed>) = 0 [pid 5174] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5174] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] exit_group(0 [pid 5172] <... futex resumed>) = ? [pid 5171] <... exit_group resumed>) = ? [pid 5174] <... futex resumed>) = ? [pid 5172] +++ exited with 0 +++ [pid 5174] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 82.115492][ T5172] REISERFS (device loop0): Using r5 hash to sort names [ 82.122659][ T5172] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./20/binderfs") = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5175 ./strace-static-x86_64: Process 5175 attached [pid 5175] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5175] chdir("./21") = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5175] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5175] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5175] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5176 attached , parent_tid=[5176], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5176 [pid 5175] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5176] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5176] close(3) = 0 [pid 5176] mkdir("./file0", 0777) = 0 [ 82.324024][ T5176] loop0: detected capacity change from 0 to 8192 [ 82.334320][ T5176] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.347609][ T5176] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.357078][ T5176] REISERFS (device loop0): using ordered data mode [ 82.363610][ T5176] reiserfs: using flush barriers [ 82.370013][ T5176] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.386632][ T5176] REISERFS (device loop0): checking transaction log (loop0) [pid 5176] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file0") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4) = 0 [pid 5176] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5176] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... futex resumed>) = 0 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5175] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... open resumed>) = 4 [pid 5176] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] ftruncate(4, 3608577) = 0 [pid 5176] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5176] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5175] <... mmap resumed>) = 0x7fc2d271e000 [pid 5175] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5175] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5176] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5178 attached [pid 5176] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] set_robust_list(0x7fc2d273e9e0, 24 [pid 5176] <... futex resumed>) = 0 [pid 5175] <... clone resumed>, parent_tid=[5178], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5178 [pid 5176] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... set_robust_list resumed>) = 0 [pid 5178] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5178] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5175] exit_group(0 [pid 5176] <... futex resumed>) = ? [pid 5175] <... exit_group resumed>) = ? [pid 5176] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./21/binderfs") = 0 [ 82.446665][ T5176] REISERFS (device loop0): Using r5 hash to sort names [ 82.453758][ T5176] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5179 ./strace-static-x86_64: Process 5179 attached [pid 5179] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5179] chdir("./22") = 0 [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] setpgid(0, 0) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5179] write(3, "1000", 4) = 4 [pid 5179] close(3) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5179] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5180], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5180 [pid 5179] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5180 attached [pid 5180] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5180] memfd_create("syzkaller", 0) = 3 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5180] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5180] close(3) = 0 [pid 5180] mkdir("./file0", 0777) = 0 [ 82.653029][ T5180] loop0: detected capacity change from 0 to 8192 [ 82.663546][ T5180] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.677545][ T5180] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.687314][ T5180] REISERFS (device loop0): using ordered data mode [ 82.693932][ T5180] reiserfs: using flush barriers [ 82.700311][ T5180] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.717035][ T5180] REISERFS (device loop0): checking transaction log (loop0) [pid 5180] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5180] chdir("./file0") = 0 [pid 5180] ioctl(4, LOOP_CLR_FD) = 0 [pid 5180] close(4) = 0 [pid 5180] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5180] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 1 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5179] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... open resumed>) = 4 [pid 5180] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5180] ftruncate(4, 3608577 [pid 5179] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... ftruncate resumed>) = 0 [pid 5179] <... futex resumed>) = 0 [pid 5180] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5179] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... openat resumed>) = 5 [pid 5179] <... futex resumed>) = 0 [pid 5180] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 0 [pid 5180] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5179] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5182], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5182 [pid 5179] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5182] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5182] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5182] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] exit_group(0 [pid 5182] <... futex resumed>) = ? [pid 5180] <... futex resumed>) = ? [pid 5179] <... exit_group resumed>) = ? [pid 5182] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5179] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./22/binderfs") = 0 [ 82.775889][ T5180] REISERFS (device loop0): Using r5 hash to sort names [ 82.783024][ T5180] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5183 ./strace-static-x86_64: Process 5183 attached [pid 5183] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5183] chdir("./23") = 0 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] setpgid(0, 0) = 0 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5183] write(3, "1000", 4) = 4 [pid 5183] close(3) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5183] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5183] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5184], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5184 [pid 5183] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5184 attached [pid 5184] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5184] memfd_create("syzkaller", 0) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5184] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5184] close(3) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [ 82.952168][ T5184] loop0: detected capacity change from 0 to 8192 [ 82.972875][ T5184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.985934][ T5184] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.995450][ T5184] REISERFS (device loop0): using ordered data mode [ 83.001999][ T5184] reiserfs: using flush barriers [ 83.008134][ T5184] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.025000][ T5184] REISERFS (device loop0): checking transaction log (loop0) [pid 5184] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4) = 0 [pid 5184] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5184] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5183] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] <... open resumed>) = 4 [pid 5184] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5184] ftruncate(4, 3608577 [pid 5183] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] <... ftruncate resumed>) = 0 [pid 5183] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5184] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5183] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... openat resumed>) = 5 [pid 5183] <... futex resumed>) = 0 [pid 5184] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 0 [pid 5184] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5183] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5186], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5186 [pid 5183] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5186 attached [pid 5186] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5186] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5186] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5183] exit_group(0 [pid 5184] <... futex resumed>) = ? [pid 5183] <... exit_group resumed>) = ? [pid 5184] +++ exited with 0 +++ [pid 5186] <... futex resumed>) = ? [ 83.080449][ T5184] REISERFS (device loop0): Using r5 hash to sort names [ 83.087727][ T5184] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5186] +++ exited with 0 +++ [pid 5183] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./23/binderfs") = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5187 ./strace-static-x86_64: Process 5187 attached [pid 5187] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5187] chdir("./24") = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5187] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5187] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5188], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5188 [pid 5187] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5188] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5188] close(3) = 0 [pid 5188] mkdir("./file0", 0777) = 0 [ 83.277227][ T5188] loop0: detected capacity change from 0 to 8192 [ 83.288173][ T5188] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.301472][ T5188] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.311088][ T5188] REISERFS (device loop0): using ordered data mode [ 83.317839][ T5188] reiserfs: using flush barriers [ 83.323831][ T5188] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.340529][ T5188] REISERFS (device loop0): checking transaction log (loop0) [pid 5188] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file0") = 0 [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [pid 5188] close(4) = 0 [pid 5188] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5187] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... open resumed>) = 4 [pid 5188] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5187] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] ftruncate(4, 3608577) = 0 [pid 5188] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5187] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5188] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5187] <... mmap resumed>) = 0x7fc2d271e000 [pid 5187] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5187] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5188] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5190 attached [pid 5188] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... clone resumed>, parent_tid=[5190], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5190 [pid 5190] set_robust_list(0x7fc2d273e9e0, 24 [pid 5188] <... futex resumed>) = 0 [pid 5187] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... set_robust_list resumed>) = 0 [pid 5188] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] <... futex resumed>) = 0 [pid 5187] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5190] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5187] <... futex resumed>) = 0 [pid 5190] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] exit_group(0 [pid 5190] <... futex resumed>) = ? [pid 5188] <... futex resumed>) = ? [pid 5187] <... exit_group resumed>) = ? [pid 5190] +++ exited with 0 +++ [pid 5188] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.406620][ T5188] REISERFS (device loop0): Using r5 hash to sort names [ 83.413779][ T5188] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./24/binderfs") = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5191] chdir("./25") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5191] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5192], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5192 [pid 5191] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5192] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5192] close(3) = 0 [pid 5192] mkdir("./file0", 0777) = 0 [ 83.605920][ T5192] loop0: detected capacity change from 0 to 8192 [ 83.618557][ T5192] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.631611][ T5192] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.641763][ T5192] REISERFS (device loop0): using ordered data mode [ 83.648317][ T5192] reiserfs: using flush barriers [ 83.654311][ T5192] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.670862][ T5192] REISERFS (device loop0): checking transaction log (loop0) [pid 5192] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5192] chdir("./file0") = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [pid 5192] close(4) = 0 [pid 5192] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5192] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5192] ftruncate(4, 3608577) = 0 [pid 5192] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5191] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5194 attached , parent_tid=[5194], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5194 [pid 5194] set_robust_list(0x7fc2d273e9e0, 24 [pid 5191] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... set_robust_list resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5194] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5191] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 5 [pid 5192] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5192] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... mknod resumed>) = 0 [pid 5194] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5194] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] exit_group(0) = ? [pid 5194] <... futex resumed>) = ? [pid 5192] <... futex resumed>) = ? [pid 5192] +++ exited with 0 +++ [pid 5194] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./25/binderfs") = 0 [ 83.729173][ T5192] REISERFS (device loop0): Using r5 hash to sort names [ 83.736314][ T5192] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5195 ./strace-static-x86_64: Process 5195 attached [pid 5195] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5195] chdir("./26") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5195] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5195] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5195] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5196 attached , parent_tid=[5196], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5196 [pid 5195] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5196] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5196] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5196] close(3) = 0 [pid 5196] mkdir("./file0", 0777) = 0 [ 83.931724][ T5196] loop0: detected capacity change from 0 to 8192 [ 83.941454][ T5196] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.954582][ T5196] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.963799][ T5196] REISERFS (device loop0): using ordered data mode [ 83.970449][ T5196] reiserfs: using flush barriers [ 83.976531][ T5196] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.993104][ T5196] REISERFS (device loop0): checking transaction log (loop0) [pid 5196] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file0") = 0 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] close(4) = 0 [pid 5196] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5196] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] <... futex resumed>) = 0 [pid 5195] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5195] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 0 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5196] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5196] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5196] ftruncate(4, 3608577) = 0 [pid 5196] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5195] <... futex resumed>) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5195] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5195] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5198], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5198 [pid 5195] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5198] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5196] <... openat resumed>) = 5 [pid 5198] <... mknod resumed>) = 0 [pid 5198] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5198] <... futex resumed>) = 1 [pid 5198] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] exit_group(0) = ? [pid 5198] <... futex resumed>) = ? [pid 5198] +++ exited with 0 +++ [pid 5196] <... futex resumed>) = ? [pid 5196] +++ exited with 0 +++ [pid 5195] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./26/binderfs") = 0 [ 84.052060][ T5196] REISERFS (device loop0): Using r5 hash to sort names [ 84.059828][ T5196] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5199 ./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5199] chdir("./27") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5199] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5200], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5200 [pid 5199] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5200 attached [pid 5200] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5200] memfd_create("syzkaller", 0) = 3 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5200] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] mkdir("./file0", 0777) = 0 [ 84.245836][ T5200] loop0: detected capacity change from 0 to 8192 [ 84.257620][ T5200] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.270749][ T5200] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.280128][ T5200] REISERFS (device loop0): using ordered data mode [ 84.286766][ T5200] reiserfs: using flush barriers [ 84.292658][ T5200] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.309236][ T5200] REISERFS (device loop0): checking transaction log (loop0) [pid 5200] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./file0") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [pid 5200] close(4) = 0 [pid 5200] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 1 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5200] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 1 [pid 5200] ftruncate(4, 3608577) = 0 [pid 5200] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5199] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5202], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5202 [pid 5199] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = 1 [pid 5200] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 5 [pid 5200] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5200] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5202 attached [pid 5202] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5202] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5202] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5202] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] exit_group(0 [pid 5200] <... futex resumed>) = ? [pid 5199] <... exit_group resumed>) = ? [pid 5200] +++ exited with 0 +++ [pid 5202] <... futex resumed>) = ? [pid 5202] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./27/binderfs") = 0 [ 84.362187][ T5200] REISERFS (device loop0): Using r5 hash to sort names [ 84.369647][ T5200] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5203 ./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5203] chdir("./28") = 0 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5203] close(3) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5203] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5203] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5203] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5204], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5204 [pid 5203] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5204 attached [pid 5204] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5204] memfd_create("syzkaller", 0) = 3 [pid 5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5204] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5204] close(3) = 0 [pid 5204] mkdir("./file0", 0777) = 0 [ 84.557517][ T5204] loop0: detected capacity change from 0 to 8192 [ 84.567196][ T5204] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.580359][ T5204] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.589852][ T5204] REISERFS (device loop0): using ordered data mode [ 84.596475][ T5204] reiserfs: using flush barriers [ 84.602394][ T5204] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.619204][ T5204] REISERFS (device loop0): checking transaction log (loop0) [pid 5204] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5204] chdir("./file0") = 0 [pid 5204] ioctl(4, LOOP_CLR_FD) = 0 [pid 5204] close(4) = 0 [pid 5204] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5204] <... futex resumed>) = 1 [pid 5203] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5203] <... futex resumed>) = 0 [pid 5204] <... open resumed>) = 4 [pid 5203] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... futex resumed>) = 1 [pid 5203] <... futex resumed>) = 0 [pid 5204] ftruncate(4, 3608577 [pid 5203] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... ftruncate resumed>) = 0 [pid 5204] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] <... futex resumed>) = 1 [pid 5203] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5203] <... futex resumed>) = 0 [pid 5204] <... openat resumed>) = 5 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5204] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... mmap resumed>) = 0x7fc2d271e000 [pid 5204] <... futex resumed>) = 0 [pid 5203] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5204] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] <... mprotect resumed>) = 0 [pid 5203] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5206], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5206 [pid 5203] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5206 attached [pid 5206] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5206] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5206] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] exit_group(0 [pid 5204] <... futex resumed>) = ? [pid 5203] <... exit_group resumed>) = ? [pid 5204] +++ exited with 0 +++ [pid 5206] <... futex resumed>) = ? [pid 5206] +++ exited with 0 +++ [pid 5203] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./28/binderfs") = 0 [ 84.678054][ T5204] REISERFS (device loop0): Using r5 hash to sort names [ 84.685284][ T5204] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5207 ./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5207] chdir("./29") = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5207] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5207] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5207] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x7fc2da75f9e0, 24 [pid 5207] <... clone resumed>, parent_tid=[5208], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5208 [pid 5208] <... set_robust_list resumed>) = 0 [pid 5207] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5208] memfd_create("syzkaller", 0) = 3 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5208] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5208] close(3) = 0 [pid 5208] mkdir("./file0", 0777) = 0 [ 84.871433][ T5208] loop0: detected capacity change from 0 to 8192 [ 84.882756][ T5208] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.896105][ T5208] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.905593][ T5208] REISERFS (device loop0): using ordered data mode [ 84.912129][ T5208] reiserfs: using flush barriers [ 84.918474][ T5208] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.935050][ T5208] REISERFS (device loop0): checking transaction log (loop0) [pid 5208] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file0") = 0 [pid 5208] ioctl(4, LOOP_CLR_FD) = 0 [pid 5208] close(4) = 0 [pid 5208] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5207] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... open resumed>) = 4 [pid 5207] <... futex resumed>) = 0 [pid 5207] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] ftruncate(4, 3608577 [pid 5207] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... ftruncate resumed>) = 0 [pid 5208] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5208] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5207] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... openat resumed>) = 5 [pid 5207] <... futex resumed>) = 0 [pid 5208] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5208] <... futex resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x7fc2d271e000 [pid 5208] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5207] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5210], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5210 [pid 5207] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5210 attached [pid 5210] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5210] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5210] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5207] exit_group(0 [pid 5208] <... futex resumed>) = ? [pid 5207] <... exit_group resumed>) = ? [pid 5208] +++ exited with 0 +++ [pid 5210] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 84.991372][ T5208] REISERFS (device loop0): Using r5 hash to sort names [ 84.998527][ T5208] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./29/binderfs") = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5211 ./strace-static-x86_64: Process 5211 attached [pid 5211] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5211] chdir("./30") = 0 [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5211] write(3, "1000", 4) = 4 [pid 5211] close(3) = 0 [pid 5211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5211] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5211] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5211] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5212], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5212 [pid 5211] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5212 attached [pid 5212] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5212] memfd_create("syzkaller", 0) = 3 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5212] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5212] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5212] close(3) = 0 [pid 5212] mkdir("./file0", 0777) = 0 [ 85.187374][ T5212] loop0: detected capacity change from 0 to 8192 [ 85.200556][ T5212] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.213643][ T5212] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.223237][ T5212] REISERFS (device loop0): using ordered data mode [ 85.229899][ T5212] reiserfs: using flush barriers [ 85.236207][ T5212] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.252745][ T5212] REISERFS (device loop0): checking transaction log (loop0) [pid 5212] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5212] chdir("./file0") = 0 [pid 5212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5212] close(4) = 0 [pid 5212] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5211] <... futex resumed>) = 0 [pid 5212] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5211] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... open resumed>) = 4 [pid 5211] <... futex resumed>) = 0 [pid 5212] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... futex resumed>) = 0 [pid 5211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] ftruncate(4, 3608577 [pid 5211] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... ftruncate resumed>) = 0 [pid 5211] <... futex resumed>) = 0 [pid 5212] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... futex resumed>) = 0 [pid 5211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5211] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... openat resumed>) = 5 [pid 5211] <... futex resumed>) = 0 [pid 5211] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5212] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... mmap resumed>) = 0x7fc2d271e000 [pid 5212] <... futex resumed>) = 0 [pid 5211] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5212] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5211] <... mprotect resumed>) = 0 [pid 5211] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5214], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5214 [pid 5211] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5214] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5214] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5211] <... futex resumed>) = 0 [pid 5214] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5211] exit_group(0 [pid 5214] <... futex resumed>) = ? [pid 5212] <... futex resumed>) = ? [pid 5211] <... exit_group resumed>) = ? [pid 5214] +++ exited with 0 +++ [pid 5212] +++ exited with 0 +++ [pid 5211] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 85.309215][ T5212] REISERFS (device loop0): Using r5 hash to sort names [ 85.316394][ T5212] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./30/binderfs") = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5215 ./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5215] chdir("./31") = 0 [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5215] setpgid(0, 0) = 0 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5215] write(3, "1000", 4) = 4 [pid 5215] close(3) = 0 [pid 5215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5215] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5215] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5215] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5216 attached , parent_tid=[5216], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5216 [pid 5216] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5216] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5215] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] memfd_create("syzkaller", 0) = 3 [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5216] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5216] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5216] close(3) = 0 [pid 5216] mkdir("./file0", 0777) = 0 [ 85.553174][ T5216] loop0: detected capacity change from 0 to 8192 [ 85.565129][ T5216] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.578197][ T5216] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.587541][ T5216] REISERFS (device loop0): using ordered data mode [ 85.594091][ T5216] reiserfs: using flush barriers [ 85.600328][ T5216] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.616871][ T5216] REISERFS (device loop0): checking transaction log (loop0) [pid 5216] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5216] chdir("./file0") = 0 [pid 5216] ioctl(4, LOOP_CLR_FD) = 0 [pid 5216] close(4) = 0 [pid 5216] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5216] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5215] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] <... open resumed>) = 4 [pid 5215] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5216] ftruncate(4, 3608577 [pid 5215] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... ftruncate resumed>) = 0 [pid 5216] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = 0 [pid 5216] <... futex resumed>) = 1 [pid 5215] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5215] <... futex resumed>) = 0 [pid 5216] <... openat resumed>) = 5 [pid 5215] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] <... mmap resumed>) = 0x7fc2d271e000 [pid 5215] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5215] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x7fc2d273e9e0, 24 [pid 5215] <... clone resumed>, parent_tid=[5218], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5218 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5215] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5215] <... futex resumed>) = 0 [pid 5215] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... mknod resumed>) = 0 [pid 5218] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = 0 [pid 5215] exit_group(0 [pid 5216] <... futex resumed>) = ? [pid 5215] <... exit_group resumed>) = ? [pid 5216] +++ exited with 0 +++ [pid 5218] <... futex resumed>) = ? [pid 5218] +++ exited with 0 +++ [pid 5215] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 85.673775][ T5216] REISERFS (device loop0): Using r5 hash to sort names [ 85.681091][ T5216] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./31/binderfs") = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5219 ./strace-static-x86_64: Process 5219 attached [pid 5219] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5219] chdir("./32") = 0 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5219] setpgid(0, 0) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5219] write(3, "1000", 4) = 4 [pid 5219] close(3) = 0 [pid 5219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5219] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5219] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5220], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5220 [pid 5219] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5220 attached [pid 5220] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5220] memfd_create("syzkaller", 0) = 3 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5220] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5220] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5220] close(3) = 0 [pid 5220] mkdir("./file0", 0777) = 0 [ 85.885403][ T5220] loop0: detected capacity change from 0 to 8192 [ 85.896679][ T5220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.909748][ T5220] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 85.919126][ T5220] REISERFS (device loop0): using ordered data mode [ 85.925788][ T5220] reiserfs: using flush barriers [ 85.931816][ T5220] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.948405][ T5220] REISERFS (device loop0): checking transaction log (loop0) [pid 5220] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5220] chdir("./file0") = 0 [pid 5220] ioctl(4, LOOP_CLR_FD) = 0 [pid 5220] close(4) = 0 [pid 5220] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5220] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] <... futex resumed>) = 0 [pid 5220] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5219] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... open resumed>) = 4 [pid 5220] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5220] ftruncate(4, 3608577 [pid 5219] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... ftruncate resumed>) = 0 [pid 5219] <... futex resumed>) = 0 [pid 5220] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5219] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... openat resumed>) = 5 [pid 5219] <... futex resumed>) = 0 [pid 5220] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 0 [pid 5220] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5219] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5219] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5222], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5222 [pid 5219] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5222 attached [pid 5222] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5222] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5222] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5222] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] exit_group(0 [pid 5222] <... futex resumed>) = ? [pid 5220] <... futex resumed>) = ? [pid 5219] <... exit_group resumed>) = ? [pid 5220] +++ exited with 0 +++ [pid 5222] +++ exited with 0 +++ [pid 5219] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./32/binderfs") = 0 [ 86.008227][ T5220] REISERFS (device loop0): Using r5 hash to sort names [ 86.015392][ T5220] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5223 ./strace-static-x86_64: Process 5223 attached [pid 5223] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5223] chdir("./33") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5223] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5224 attached , parent_tid=[5224], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5224 [pid 5223] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] set_robust_list(0x7fc2da75f9e0, 24 [pid 5223] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5224] <... set_robust_list resumed>) = 0 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5224] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5224] close(3) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [ 86.222117][ T5224] loop0: detected capacity change from 0 to 8192 [ 86.232966][ T5224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.246125][ T5224] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.255412][ T5224] REISERFS (device loop0): using ordered data mode [ 86.261923][ T5224] reiserfs: using flush barriers [ 86.268164][ T5224] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.284771][ T5224] REISERFS (device loop0): checking transaction log (loop0) [pid 5224] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5224] chdir("./file0") = 0 [pid 5224] ioctl(4, LOOP_CLR_FD) = 0 [pid 5224] close(4) = 0 [pid 5224] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 1 [pid 5224] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5224] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 1 [pid 5224] ftruncate(4, 3608577) = 0 [pid 5224] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5223] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5226], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5226 [pid 5223] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5223] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 5 [pid 5224] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5226 attached [pid 5226] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5226] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5226] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5226] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] exit_group(0 [pid 5226] <... futex resumed>) = ? [pid 5224] <... futex resumed>) = ? [pid 5223] <... exit_group resumed>) = ? [pid 5224] +++ exited with 0 +++ [pid 5226] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./33/binderfs") = 0 [ 86.340026][ T5224] REISERFS (device loop0): Using r5 hash to sort names [ 86.347280][ T5224] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5227 ./strace-static-x86_64: Process 5227 attached [pid 5227] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5227] chdir("./34") = 0 [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5227] setpgid(0, 0) = 0 [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5227] write(3, "1000", 4) = 4 [pid 5227] close(3) = 0 [pid 5227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5227] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5227] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5227] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5228 attached , parent_tid=[5228], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5228 [pid 5227] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5228] memfd_create("syzkaller", 0) = 3 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5228] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5228] close(3) = 0 [pid 5228] mkdir("./file0", 0777) = 0 [ 86.551172][ T5228] loop0: detected capacity change from 0 to 8192 [ 86.561537][ T5228] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.575103][ T5228] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.584843][ T5228] REISERFS (device loop0): using ordered data mode [ 86.591774][ T5228] reiserfs: using flush barriers [ 86.598282][ T5228] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.615102][ T5228] REISERFS (device loop0): checking transaction log (loop0) [pid 5228] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5228] chdir("./file0") = 0 [pid 5228] ioctl(4, LOOP_CLR_FD) = 0 [pid 5228] close(4) = 0 [pid 5228] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = 1 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5227] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... open resumed>) = 4 [pid 5228] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 0 [pid 5227] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 1 [pid 5228] ftruncate(4, 3608577) = 0 [pid 5228] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = 1 [pid 5227] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5227] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5227] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5230], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5230 [pid 5227] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 86.699693][ T5228] REISERFS (device loop0): Using r5 hash to sort names [ 86.707668][ T5228] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5228] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 5 [pid 5228] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5230 attached [pid 5230] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5230] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5230] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = 1 [pid 5227] exit_group(0 [pid 5230] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] <... futex resumed>) = ? [pid 5227] <... exit_group resumed>) = ? [pid 5228] +++ exited with 0 +++ [pid 5230] +++ exited with 0 +++ [pid 5227] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./34/binderfs") = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5231 ./strace-static-x86_64: Process 5231 attached [pid 5231] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5231] chdir("./35") = 0 [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5231] setpgid(0, 0) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5231] write(3, "1000", 4) = 4 [pid 5231] close(3) = 0 [pid 5231] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5231] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5231] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5231] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5232], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5232 [pid 5231] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5232] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5232] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5232] close(3) = 0 [pid 5232] mkdir("./file0", 0777) = 0 [ 87.056915][ T5232] loop0: detected capacity change from 0 to 8192 [ 87.075499][ T5232] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.088839][ T5232] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 87.098190][ T5232] REISERFS (device loop0): using ordered data mode [ 87.104784][ T5232] reiserfs: using flush barriers [ 87.111031][ T5232] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.127566][ T5232] REISERFS (device loop0): checking transaction log (loop0) [pid 5232] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5232] chdir("./file0") = 0 [pid 5232] ioctl(4, LOOP_CLR_FD) = 0 [pid 5232] close(4) = 0 [pid 5232] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 0 [pid 5232] <... futex resumed>) = 1 [pid 5231] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5231] <... futex resumed>) = 0 [pid 5231] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... open resumed>) = 4 [pid 5232] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5232] ftruncate(4, 3608577 [pid 5231] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... ftruncate resumed>) = 0 [pid 5232] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5232] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] <... futex resumed>) = 0 [pid 5231] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5231] <... futex resumed>) = 0 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5232] <... openat resumed>) = 5 [pid 5231] <... mmap resumed>) = 0x7fc2d271e000 [pid 5232] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE [pid 5232] <... futex resumed>) = 0 [pid 5231] <... mprotect resumed>) = 0 [pid 5231] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5232] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... clone resumed>, parent_tid=[5234], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5234 [pid 5231] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5234 attached [ 87.186892][ T5232] REISERFS (device loop0): Using r5 hash to sort names [ 87.194151][ T5232] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5234] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5234] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5234] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 0 [pid 5231] exit_group(0) = ? [pid 5232] <... futex resumed>) = ? [pid 5234] <... futex resumed>) = ? [pid 5232] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 5231] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./35/binderfs") = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555753d5d0) = 5235 ./strace-static-x86_64: Process 5235 attached [pid 5235] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5235] chdir("./36") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5235] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5236], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5236 ./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5235] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] memfd_create("syzkaller", 0) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5235] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5236] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [ 87.446467][ T5236] loop0: detected capacity change from 0 to 8192 [ 87.456781][ T5236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.469851][ T5236] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 87.479477][ T5236] REISERFS (device loop0): using ordered data mode [ 87.486539][ T5236] reiserfs: using flush barriers [ 87.492675][ T5236] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.509572][ T5236] REISERFS (device loop0): checking transaction log (loop0) [pid 5236] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file0") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5235] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... open resumed>) = 4 [pid 5235] <... futex resumed>) = 0 [pid 5236] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] ftruncate(4, 3608577 [pid 5235] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... ftruncate resumed>) = 0 [pid 5236] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5235] <... futex resumed>) = 0 [pid 5236] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5235] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... openat resumed>) = 5 [pid 5235] <... futex resumed>) = 0 [pid 5236] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... mmap resumed>) = 0x7fc2d271e000 [pid 5236] futex(0x7fc2da8397a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5238], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5238 [pid 5235] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5238 attached [pid 5238] set_robust_list(0x7fc2d273e9e0, 24) = 0 [pid 5238] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5238] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] exit_group(0 [pid 5236] <... futex resumed>) = ? [pid 5235] <... exit_group resumed>) = ? [pid 5238] <... futex resumed>) = ? [pid 5236] +++ exited with 0 +++ [pid 5238] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555753e620 /* 4 entries */, 32768) = 112 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./36/binderfs") = 0 [ 87.563405][ T5236] REISERFS (device loop0): Using r5 hash to sort names [ 87.570549][ T5236] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557546660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557546660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 getdents64(3, 0x55555753e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5239 attached [pid 5239] set_robust_list(0x55555753d5e0, 24) = 0 [pid 5089] <... clone resumed>, child_tidptr=0x55555753d5d0) = 5239 [pid 5239] chdir("./37") = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5239] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2da73f000 [pid 5239] mprotect(0x7fc2da740000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] clone(child_stack=0x7fc2da75f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5240 attached , parent_tid=[5240], tls=0x7fc2da75f700, child_tidptr=0x7fc2da75f9d0) = 5240 [pid 5239] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] set_robust_list(0x7fc2da75f9e0, 24) = 0 [pid 5240] memfd_create("syzkaller", 0) = 3 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2d233f000 [pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5240] munmap(0x7fc2d233f000, 4194304) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5240] close(3) = 0 [pid 5240] mkdir("./file0", 0777) = 0 [ 87.762575][ T5240] loop0: detected capacity change from 0 to 8192 [ 87.774446][ T5240] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.787928][ T5240] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 87.797461][ T5240] REISERFS (device loop0): using ordered data mode [ 87.803989][ T5240] reiserfs: using flush barriers [ 87.810444][ T5240] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.827130][ T5240] REISERFS (device loop0): checking transaction log (loop0) [pid 5240] mount("/dev/loop0", "./file0", "reiserfs", MS_NOEXEC|MS_I_VERSION, "") = 0 [pid 5240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] chdir("./file0") = 0 [pid 5240] ioctl(4, LOOP_CLR_FD) = 0 [pid 5240] close(4) = 0 [pid 5240] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_LARGEFILE|O_NOATIME, 000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... open resumed>) = 4 [pid 5240] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5240] ftruncate(4, 3608577 [pid 5239] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fc2da8397ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... ftruncate resumed>) = 0 [pid 5240] futex(0x7fc2da8397ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fc2da8397a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2d271e000 [pid 5239] mprotect(0x7fc2d271f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] clone(child_stack=0x7fc2d273e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5242 attached , parent_tid=[5242], tls=0x7fc2d273e700, child_tidptr=0x7fc2d273e9d0) = 5242 [pid 5242] set_robust_list(0x7fc2d273e9e0, 24 [pid 5239] futex(0x7fc2da8397b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... set_robust_list resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5242] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5239] futex(0x7fc2da8397bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 87.881865][ T5240] REISERFS (device loop0): Using r5 hash to sort names [ 87.889065][ T5240] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5240] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5242] <... mknod resumed>) = 0 [pid 5242] futex(0x7fc2da8397bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5242] futex(0x7fc2da8397b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] <... futex resumed>) = 0 [ 87.937719][ T5240] REISERFS panic (device loop0): vs-12195 balance_leaf: CFR not initialized [ 87.947173][ T5240] ------------[ cut here ]------------ [ 87.952661][ T5240] kernel BUG at fs/reiserfs/prints.c:390! [ 87.959058][ T5240] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 87.965178][ T5240] CPU: 1 PID: 5240 Comm: syz-executor421 Not tainted 6.3.0-rc3-next-20230324-syzkaller #0 [ 87.975077][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 87.985144][ T5240] RIP: 0010:__reiserfs_panic+0xf7/0x150 [ 87.990739][ T5240] Code: 65 ff 4d 89 e8 4c 89 f1 4c 89 e2 48 8d b3 a8 06 00 00 49 c7 c1 20 29 ed 91 48 c7 c7 c0 bd 61 8a e8 de 5a 49 ff e8 79 45 65 ff <0f> 0b 49 c7 c6 20 bc 61 8a 4d 89 f4 eb c5 e8 66 45 65 ff 4d 85 e4 [ 88.010362][ T5240] RSP: 0018:ffffc90004f66d48 EFLAGS: 00010293 [ 88.016460][ T5240] RAX: 0000000000000000 RBX: ffff888075b76000 RCX: 0000000000000000 [ 88.024439][ T5240] RDX: ffff88807afc1d40 RSI: ffffffff821d90e7 RDI: 0000000000000005 [ 88.032423][ T5240] RBP: ffffc90004f66e18 R08: 0000000000000005 R09: 0000000000000000 [ 88.040407][ T5240] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff8a612fa0 [ 88.048392][ T5240] R13: ffffffff8a613980 R14: ffffffff8a61bc60 R15: 0000000000000000 [ 88.056377][ T5240] FS: 00007fc2da75f700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 88.065324][ T5240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.071921][ T5240] CR2: 000055555753e5e8 CR3: 00000000267c6000 CR4: 00000000003506e0 [ 88.079910][ T5240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.087897][ T5240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.095887][ T5240] Call Trace: [ 88.099177][ T5240] [ 88.102122][ T5240] ? reiserfs_debug+0x10/0x10 [ 88.106913][ T5240] ? leaf_insert_into_buf+0x86f/0xa20 [ 88.112316][ T5240] balance_leaf+0xd35f/0xddc0 [ 88.117033][ T5240] ? reiserfs_prepare_for_journal+0x162/0x2b0 [ 88.123135][ T5240] ? fix_nodes+0x14cf/0x8660 [ 88.127766][ T5240] ? replace_key+0x170/0x170 [ 88.132390][ T5240] do_balance+0x319/0x810 [ 88.136750][ T5240] ? get_right_neighbor_position+0x170/0x170 [ 88.142760][ T5240] ? wait_for_completion_io_timeout+0x20/0x20 [ 88.148869][ T5240] reiserfs_insert_item+0xd84/0x11a0 [ 88.158912][ T5240] ? reiserfs_paste_into_item+0x8d0/0x8d0 [ 88.164695][ T5240] ? spin_bug+0x1c0/0x1c0 [ 88.169049][ T5240] ? lock_acquire+0x32/0xc0 [ 88.173579][ T5240] ? inode_get_bytes+0x21/0xa0 [ 88.178374][ T5240] ? do_raw_spin_unlock+0x175/0x230 [ 88.183601][ T5240] ? _raw_spin_unlock+0x28/0x40 [ 88.188471][ T5240] ? real_space_diff+0x135/0x170 [ 88.193444][ T5240] reiserfs_new_inode+0xe55/0x2110 [ 88.198604][ T5240] ? reiserfs_fh_to_parent+0x1b0/0x1b0 [ 88.204094][ T5240] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 88.209776][ T5240] ? wait_for_completion_io_timeout+0x20/0x20 [ 88.215916][ T5240] ? dquot_get_next_dqblk+0x180/0x180 [ 88.221310][ T5240] ? make_vfsgid+0x170/0x170 [ 88.225933][ T5240] reiserfs_create+0x351/0x730 [ 88.230727][ T5240] ? reiserfs_link+0x520/0x520 [ 88.235523][ T5240] ? apparmor_path_mknod+0x16f/0x730 [ 88.240843][ T5240] ? security_inode_permission+0xc9/0xf0 [ 88.246502][ T5240] ? bpf_lsm_inode_create+0x9/0x10 [ 88.251637][ T5240] ? reiserfs_link+0x520/0x520 [ 88.256429][ T5240] lookup_open.isra.0+0x105a/0x1400 [ 88.261642][ T5240] ? link_path_walk.part.0+0xd60/0xd60 [ 88.267116][ T5240] ? path_openat+0x90f/0x2750 [ 88.271810][ T5240] ? lock_acquire+0x32/0xc0 [ 88.276338][ T5240] ? path_openat+0x90f/0x2750 [ 88.281036][ T5240] ? down_write_killable+0x250/0x250 [ 88.286351][ T5240] ? __mnt_want_write+0x1fe/0x2e0 [ 88.291408][ T5240] path_openat+0x975/0x2750 [ 88.296016][ T5240] ? path_lookupat+0x840/0x840 [ 88.300794][ T5240] do_filp_open+0x1ba/0x410 [ 88.305314][ T5240] ? may_open_dev+0xf0/0xf0 [ 88.309834][ T5240] ? find_held_lock+0x2d/0x110 [ 88.314621][ T5240] ? do_raw_spin_lock+0x124/0x2b0 [ 88.319668][ T5240] ? spin_bug+0x1c0/0x1c0 [ 88.324021][ T5240] ? _raw_spin_unlock+0x28/0x40 [ 88.328902][ T5240] ? alloc_fd+0x2e4/0x750 [ 88.333260][ T5240] do_sys_openat2+0x16d/0x4c0 [ 88.337964][ T5240] ? ptrace_stop.part.0+0x60f/0x8e0 [ 88.343187][ T5240] ? build_open_flags+0x720/0x720 [ 88.348243][ T5240] ? ptrace_notify+0xfe/0x140 [ 88.352944][ T5240] ? lock_downgrade+0x690/0x690 [ 88.357825][ T5240] __x64_sys_openat+0x143/0x1f0 [ 88.362728][ T5240] ? __ia32_sys_open+0x1c0/0x1c0 [ 88.367693][ T5240] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.372913][ T5240] ? lockdep_hardirqs_on+0x7d/0x100 [ 88.378149][ T5240] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.383366][ T5240] ? ptrace_notify+0xfe/0x140 [ 88.388069][ T5240] do_syscall_64+0x39/0xb0 [ 88.392512][ T5240] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 88.398445][ T5240] RIP: 0033:0x7fc2da7b3589 [ 88.402879][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.422502][ T5240] RSP: 002b:00007fc2da75f2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.430936][ T5240] RAX: ffffffffffffffda RBX: 00007fc2da8397a0 RCX: 00007fc2da7b3589 [ 88.438922][ T5240] RDX: 0000000000000241 RSI: 0000000020000000 RDI: 00000000ffffff9c [ 88.446912][ T5240] RBP: 00007fc2da8062b0 R08: 0000000000000000 R09: 0000000000000000 [ 88.454901][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2da8061b8 [ 88.462888][ T5240] R13: 0030656c69662f2e R14: 7366726573696572 R15: 00007fc2da8397a8 [ 88.470886][ T5240] [ 88.473930][ T5240] Modules linked in: [ 88.478084][ T5240] ---[ end trace 0000000000000000 ]--- [ 88.483770][ T5240] RIP: 0010:__reiserfs_panic+0xf7/0x150 [ 88.489556][ T5240] Code: 65 ff 4d 89 e8 4c 89 f1 4c 89 e2 48 8d b3 a8 06 00 00 49 c7 c1 20 29 ed 91 48 c7 c7 c0 bd 61 8a e8 de 5a 49 ff e8 79 45 65 ff <0f> 0b 49 c7 c6 20 bc 61 8a 4d 89 f4 eb c5 e8 66 45 65 ff 4d 85 e4 [ 88.509295][ T5240] RSP: 0018:ffffc90004f66d48 EFLAGS: 00010293 [ 88.515528][ T5240] RAX: 0000000000000000 RBX: ffff888075b76000 RCX: 0000000000000000 [ 88.523518][ T5240] RDX: ffff88807afc1d40 RSI: ffffffff821d90e7 RDI: 0000000000000005 [ 88.531543][ T5240] RBP: ffffc90004f66e18 R08: 0000000000000005 R09: 0000000000000000 [ 88.539577][ T5240] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff8a612fa0 [ 88.547615][ T5240] R13: ffffffff8a613980 R14: ffffffff8a61bc60 R15: 0000000000000000 [ 88.555639][ T5240] FS: 00007fc2da75f700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 88.564662][ T5240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.571272][ T5240] CR2: 00007fc2da7f4c60 CR3: 00000000267c6000 CR4: 00000000003506f0 [ 88.579305][ T5240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 5239] exit_group(0 [pid 5242] <... futex resumed>) = ? [pid 5239] <... exit_group resumed>) = ? [pid 5242] +++ exited with 0 +++ [ 88.587332][ T5240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.595374][ T5240] Kernel panic - not syncing: Fatal exception [ 88.601709][ T5240] Kernel Offset: disabled [ 88.606046][ T5240] Rebooting in 86400 seconds..