./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1017171632

<...>
DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb
forked to background, child pid 4656
[   52.990818][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.006441][ T4657] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts.
execve("./syz-executor1017171632", ["./syz-executor1017171632"], 0x7ffced181eb0 /* 10 vars */) = 0
brk(NULL)                               = 0x555555d01000
brk(0x555555d01c40)                     = 0x555555d01c40
arch_prctl(ARCH_SET_FS, 0x555555d01300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
set_tid_address(0x555555d015d0)         = 5088
set_robust_list(0x555555d015e0, 24)     = 0
rt_sigaction(SIGRTMIN, {sa_handler=0x7f054a6da680, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f054a6dad50}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x7f054a6da720, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f054a6dad50}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1017171632", 4096) = 28
brk(0x555555d22c40)                     = 0x555555d22c40
brk(0x555555d23000)                     = 0x555555d23000
mprotect(0x7f054a7a2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 5088
mkdir("./syzkaller.acpKXW", 0700)       = 0
chmod("./syzkaller.acpKXW", 0777)       = 0
chdir("./syzkaller.acpKXW")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached
, child_tidptr=0x555555d015d0) = 5089
[pid  5089] set_robust_list(0x555555d015e0, 24) = 0
[pid  5089] chdir("./0")                = 0
[pid  5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5089] setpgid(0, 0)               = 0
[pid  5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5089] write(3, "1000", 4)         = 4
[pid  5089] close(3)                    = 0
[pid  5089] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5089] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5089] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5089] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5090], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5090
[pid  5089] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5089] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5090 attached
 <unfinished ...>
[pid  5090] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5090] memfd_create("syzkaller", 0) = 3
[pid  5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
syzkaller login: [   80.822627][ T5090] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5090 'syz-executor101'
[pid  5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5090] munmap(0x7f05422a9000, 16777216) = 0
[pid  5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5090] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5090] close(3)                    = 0
[pid  5090] mkdir("./file0", 0777)      = 0
[pid  5090] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5090] chdir("./file0")            = 0
[pid  5090] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5090] close(4)                    = 0
[pid  5090] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5089] <... futex resumed>)        = 0
[pid  5089] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5090] mkdir(".", 0777 <unfinished ...>
[pid  5089] <... futex resumed>)        = 0
[pid  5089] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid  5090] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5090] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5089] <... mmap resumed>)         = 0x7f0543288000
[pid  5089] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5089] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5092], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5092
[pid  5089] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5089] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5092 attached
 <unfinished ...>
[pid  5092] set_robust_list(0x7f05432a89e0, 24) = 0
[   81.090039][ T5090] loop0: detected capacity change from 0 to 32768
[pid  5092] open("./file0", O_RDONLY)   = 4
[pid  5092] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5089] <... futex resumed>)        = 0
[pid  5089] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5089] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5092] getdents(4,  <unfinished ...>
[pid  5090] <... mount resumed>)        = 0
[pid  5090] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 5
[pid  5090] chdir(".")                  = 0
[pid  5092] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[pid  5090] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5092] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5090] <... futex resumed>)        = 0
[pid  5092] <... futex resumed>)        = 1
[pid  5090] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5089] <... futex resumed>)        = 0
[pid  5092] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5089] exit_group(0 <unfinished ...>
[pid  5092] <... futex resumed>)        = ?
[pid  5090] <... futex resumed>)        = ?
[pid  5089] <... exit_group resumed>)   = ?
[pid  5092] +++ exited with 0 +++
[pid  5090] +++ exited with 0 +++
[pid  5089] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5093
./strace-static-x86_64: Process 5093 attached
[pid  5093] set_robust_list(0x555555d015e0, 24) = 0
[pid  5093] chdir("./1")                = 0
[pid  5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5093] setpgid(0, 0)               = 0
[pid  5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5093] write(3, "1000", 4)         = 4
[pid  5093] close(3)                    = 0
[pid  5093] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5093] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5093] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5093] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5094 attached
, parent_tid=[5094], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5094
[pid  5093] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5094] set_robust_list(0x7f054a6c99e0, 24 <unfinished ...>
[pid  5093] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5094] <... set_robust_list resumed>) = 0
[pid  5094] memfd_create("syzkaller", 0) = 3
[pid  5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5094] munmap(0x7f05422a9000, 16777216) = 0
[pid  5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5094] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5094] close(3)                    = 0
[pid  5094] mkdir("./file0", 0777)      = 0
[pid  5094] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5094] chdir("./file0")            = 0
[pid  5094] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5094] close(4)                    = 0
[pid  5094] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5093] <... futex resumed>)        = 0
[pid  5093] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5093] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5093] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5093] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5095], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5095
[pid  5093] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5093] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5094] <... futex resumed>)        = 1
[pid  5094] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5094] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "") = 0
[pid  5094] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4
[pid  5094] chdir(".")                  = 0
[pid  5094] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5094] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5095 attached
 <unfinished ...>
[pid  5095] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5095] open("./file0", O_RDONLY)   = 5
[pid  5095] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5093] <... futex resumed>)        = 0
[pid  5095] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5093] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5094] <... futex resumed>)        = 0
[pid  5093] <... futex resumed>)        = 1
[pid  5094] getdents(5,  <unfinished ...>
[pid  5093] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5094] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[   81.598011][ T5094] loop0: detected capacity change from 0 to 32768
[pid  5094] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5093] <... futex resumed>)        = 0
[pid  5094] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5093] exit_group(0)               = ?
[pid  5094] <... futex resumed>)        = ?
[pid  5094] +++ exited with 0 +++
[pid  5095] <... futex resumed>)        = ?
[pid  5095] +++ exited with 0 +++
[pid  5093] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5096
./strace-static-x86_64: Process 5096 attached
[pid  5096] set_robust_list(0x555555d015e0, 24) = 0
[pid  5096] chdir("./2")                = 0
[pid  5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5096] setpgid(0, 0)               = 0
[pid  5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5096] write(3, "1000", 4)         = 4
[pid  5096] close(3)                    = 0
[pid  5096] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5096] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5096] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5096] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5097], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5097
[pid  5096] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5096] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5097 attached
 <unfinished ...>
[pid  5097] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5097] memfd_create("syzkaller", 0) = 3
[pid  5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5097] munmap(0x7f05422a9000, 16777216) = 0
[pid  5097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5097] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5097] close(3)                    = 0
[pid  5097] mkdir("./file0", 0777)      = 0
[pid  5097] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5097] chdir("./file0")            = 0
[pid  5097] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5097] close(4)                    = 0
[pid  5097] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5096] <... futex resumed>)        = 0
[pid  5096] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5096] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5096] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5096] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5098], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5098
[pid  5096] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5096] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5097] <... futex resumed>)        = 1
[pid  5097] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5097] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "") = 0
[pid  5097] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4
[pid  5097] chdir(".")                  = 0
[pid  5097] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5097] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5098 attached
 <unfinished ...>
[pid  5098] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5098] open("./file0", O_RDONLY)   = 5
[pid  5098] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5096] <... futex resumed>)        = 0
[pid  5096] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5096] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5097] <... futex resumed>)        = 0
[pid  5097] getdents(5, 0x20000100 /* 2 entries */, 76) = 48
[pid  5097] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5096] <... futex resumed>)        = 0
[pid  5096] exit_group(0)               = ?
[pid  5097] <... futex resumed>)        = ?
[pid  5097] +++ exited with 0 +++
[pid  5098] <... futex resumed>)        = ?
[pid  5098] +++ exited with 0 +++
[pid  5096] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} ---
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
[   82.123454][ T5097] loop0: detected capacity change from 0 to 32768
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs")                  = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5099
./strace-static-x86_64: Process 5099 attached
[pid  5099] set_robust_list(0x555555d015e0, 24) = 0
[pid  5099] chdir("./3")                = 0
[pid  5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5099] setpgid(0, 0)               = 0
[pid  5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5099] write(3, "1000", 4)         = 4
[pid  5099] close(3)                    = 0
[pid  5099] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5099] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5099] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5099] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5100], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5100
[pid  5099] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5099] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached
 <unfinished ...>
[pid  5100] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5100] memfd_create("syzkaller", 0) = 3
[pid  5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5100] munmap(0x7f05422a9000, 16777216) = 0
[pid  5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5100] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5100] close(3)                    = 0
[pid  5100] mkdir("./file0", 0777)      = 0
[pid  5100] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5100] chdir("./file0")            = 0
[pid  5100] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5100] close(4)                    = 0
[pid  5100] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5099] <... futex resumed>)        = 0
[pid  5099] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5099] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5099] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5099] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5101 attached
, parent_tid=[5101], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5101
[pid  5099] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5099] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5100] <... futex resumed>)        = 1
[pid  5100] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5100] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5101] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5101] open("./file0", O_RDONLY)   = 4
[pid  5101] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5100] <... mount resumed>)        = 0
[pid  5100] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 5
[pid  5100] chdir(".")                  = 0
[pid  5100] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5100] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5099] <... futex resumed>)        = 0
[pid  5099] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5101] <... futex resumed>)        = 1
[pid  5099] <... futex resumed>)        = 1
[pid  5100] <... futex resumed>)        = 0
[pid  5099] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5101] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5100] getdents(4, 0x20000100 /* 2 entries */, 76) = 48
[pid  5100] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5099] <... futex resumed>)        = 0
[pid  5100] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5099] exit_group(0)               = ?
[pid  5100] <... futex resumed>)        = ?
[pid  5101] <... futex resumed>)        = ?
[pid  5100] +++ exited with 0 +++
[pid  5101] +++ exited with 0 +++
[pid  5099] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
[   82.574259][ T5100] loop0: detected capacity change from 0 to 32768
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs")                  = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5102
./strace-static-x86_64: Process 5102 attached
[pid  5102] set_robust_list(0x555555d015e0, 24) = 0
[pid  5102] chdir("./4")                = 0
[pid  5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5102] setpgid(0, 0)               = 0
[pid  5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5102] write(3, "1000", 4)         = 4
[pid  5102] close(3)                    = 0
[pid  5102] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5102] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5102] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5102] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5103], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5103
[pid  5102] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5102] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5103 attached
 <unfinished ...>
[pid  5103] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5103] memfd_create("syzkaller", 0) = 3
[pid  5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5103] munmap(0x7f05422a9000, 16777216) = 0
[pid  5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5103] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5103] close(3)                    = 0
[pid  5103] mkdir("./file0", 0777)      = 0
[pid  5103] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5103] chdir("./file0")            = 0
[pid  5103] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5103] close(4)                    = 0
[pid  5103] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5102] <... futex resumed>)        = 0
[pid  5103] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5102] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5103] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5102] <... futex resumed>)        = 0
[pid  5103] mkdir(".", 0777 <unfinished ...>
[pid  5102] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5103] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5102] <... futex resumed>)        = 0
[pid  5103] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5102] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5102] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5104 attached
, parent_tid=[5104], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5104
[pid  5102] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5104] set_robust_list(0x7f05432a89e0, 24 <unfinished ...>
[pid  5102] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5104] <... set_robust_list resumed>) = 0
[pid  5104] open("./file0", O_RDONLY)   = 4
[pid  5103] <... mount resumed>)        = 0
[   82.974928][ T5103] loop0: detected capacity change from 0 to 32768
[pid  5103] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5104] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5103] <... openat resumed>)       = 5
[pid  5102] <... futex resumed>)        = 0
[pid  5104] <... futex resumed>)        = 1
[pid  5103] chdir("." <unfinished ...>
[pid  5104] getdents(4,  <unfinished ...>
[pid  5102] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5104] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[pid  5103] <... chdir resumed>)        = 0
[pid  5102] <... futex resumed>)        = 0
[pid  5104] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5103] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5102] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5104] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5103] <... futex resumed>)        = 0
[pid  5102] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5103] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5102] exit_group(0 <unfinished ...>
[pid  5104] <... futex resumed>)        = ?
[pid  5103] <... futex resumed>)        = ?
[pid  5102] <... exit_group resumed>)   = ?
[pid  5104] +++ exited with 0 +++
[pid  5103] +++ exited with 0 +++
[pid  5102] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs")                  = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5105
./strace-static-x86_64: Process 5105 attached
[pid  5105] set_robust_list(0x555555d015e0, 24) = 0
[pid  5105] chdir("./5")                = 0
[pid  5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5105] setpgid(0, 0)               = 0
[pid  5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5105] write(3, "1000", 4)         = 4
[pid  5105] close(3)                    = 0
[pid  5105] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5105] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5105] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5105] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5106 attached
, parent_tid=[5106], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5106
[pid  5106] set_robust_list(0x7f054a6c99e0, 24 <unfinished ...>
[pid  5105] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5106] <... set_robust_list resumed>) = 0
[pid  5105] <... futex resumed>)        = 0
[pid  5105] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5106] memfd_create("syzkaller", 0) = 3
[pid  5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5106] munmap(0x7f05422a9000, 16777216) = 0
[pid  5106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5106] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5106] close(3)                    = 0
[pid  5106] mkdir("./file0", 0777)      = 0
[pid  5106] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5106] chdir("./file0")            = 0
[pid  5106] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5106] close(4)                    = 0
[pid  5106] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5105] <... futex resumed>)        = 0
[pid  5106] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5105] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5106] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5105] <... futex resumed>)        = 0
[pid  5106] mkdir(".", 0777 <unfinished ...>
[pid  5105] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5106] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5105] <... futex resumed>)        = 0
[pid  5106] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5105] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5105] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5107 attached
 <unfinished ...>
[pid  5107] set_robust_list(0x7f05432a89e0, 24 <unfinished ...>
[pid  5106] <... mount resumed>)        = 0
[pid  5105] <... clone resumed>, parent_tid=[5107], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5107
[pid  5107] <... set_robust_list resumed>) = 0
[pid  5106] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5105] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5107] open("./file0", O_RDONLY <unfinished ...>
[pid  5105] <... futex resumed>)        = 0
[pid  5106] <... openat resumed>)       = 4
[pid  5105] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5106] chdir("." <unfinished ...>
[pid  5107] <... open resumed>)         = 5
[pid  5106] <... chdir resumed>)        = 0
[pid  5107] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5106] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5105] <... futex resumed>)        = 0
[pid  5105] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5106] <... futex resumed>)        = 0
[pid  5105] <... futex resumed>)        = 0
[pid  5106] getdents(5,  <unfinished ...>
[pid  5105] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5106] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[pid  5106] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5105] <... futex resumed>)        = 0
[pid  5106] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5105] exit_group(0 <unfinished ...>
[pid  5106] <... futex resumed>)        = ?
[pid  5105] <... exit_group resumed>)   = ?
[pid  5106] +++ exited with 0 +++
[pid  5107] <... futex resumed>)        = ?
[pid  5107] +++ exited with 0 +++
[pid  5105] +++ exited with 0 +++
[   83.413132][ T5106] loop0: detected capacity change from 0 to 32768
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs")                  = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5108
./strace-static-x86_64: Process 5108 attached
[pid  5108] set_robust_list(0x555555d015e0, 24) = 0
[pid  5108] chdir("./6")                = 0
[pid  5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5108] setpgid(0, 0)               = 0
[pid  5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5108] write(3, "1000", 4)         = 4
[pid  5108] close(3)                    = 0
[pid  5108] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5108] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5108] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5108] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5109], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5109
./strace-static-x86_64: Process 5109 attached
[pid  5108] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5108] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5109] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5109] memfd_create("syzkaller", 0) = 3
[pid  5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5109] munmap(0x7f05422a9000, 16777216) = 0
[pid  5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5109] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5109] close(3)                    = 0
[pid  5109] mkdir("./file0", 0777)      = 0
[pid  5109] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5109] chdir("./file0")            = 0
[pid  5109] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5109] close(4)                    = 0
[pid  5109] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5109] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5108] <... futex resumed>)        = 0
[pid  5108] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5109] <... futex resumed>)        = 0
[pid  5108] <... futex resumed>)        = 1
[pid  5109] mkdir(".", 0777 <unfinished ...>
[pid  5108] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5109] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5108] <... futex resumed>)        = 0
[pid  5109] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5109] <... mount resumed>)        = 0
[pid  5108] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid  5109] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5108] <... mprotect resumed>)     = 0
[pid  5109] <... openat resumed>)       = 4
[pid  5108] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID <unfinished ...>
[pid  5109] chdir("."./strace-static-x86_64: Process 5110 attached
)                  = 0
[pid  5108] <... clone resumed>, parent_tid=[5110], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5110
[pid  5109] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5108] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5110] set_robust_list(0x7f05432a89e0, 24 <unfinished ...>
[pid  5109] <... futex resumed>)        = 0
[pid  5108] <... futex resumed>)        = 0
[pid  5110] <... set_robust_list resumed>) = 0
[pid  5109] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5108] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5110] open("./file0", O_RDONLY)   = 5
[pid  5110] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5108] <... futex resumed>)        = 0
[pid  5110] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5108] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5109] <... futex resumed>)        = 0
[pid  5108] <... futex resumed>)        = 1
[pid  5109] getdents(5,  <unfinished ...>
[pid  5108] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5109] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[pid  5109] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[   83.835230][ T5109] loop0: detected capacity change from 0 to 32768
[pid  5108] <... futex resumed>)        = 0
[pid  5109] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5108] exit_group(0 <unfinished ...>
[pid  5110] <... futex resumed>)        = ?
[pid  5109] <... futex resumed>)        = ?
[pid  5108] <... exit_group resumed>)   = ?
[pid  5110] +++ exited with 0 +++
[pid  5109] +++ exited with 0 +++
[pid  5108] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs")                  = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5111
./strace-static-x86_64: Process 5111 attached
[pid  5111] set_robust_list(0x555555d015e0, 24) = 0
[pid  5111] chdir("./7")                = 0
[pid  5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5111] setpgid(0, 0)               = 0
[pid  5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5111] write(3, "1000", 4)         = 4
[pid  5111] close(3)                    = 0
[pid  5111] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5111] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5111] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5111] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5112], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5112
./strace-static-x86_64: Process 5112 attached
[pid  5112] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5112] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5111] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5111] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5112] <... futex resumed>)        = 0
[pid  5112] memfd_create("syzkaller", 0) = 3
[pid  5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5112] munmap(0x7f05422a9000, 16777216) = 0
[pid  5112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5112] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5112] close(3)                    = 0
[pid  5112] mkdir("./file0", 0777)      = 0
[pid  5112] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5112] chdir("./file0")            = 0
[pid  5112] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5112] close(4)                    = 0
[pid  5112] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5111] <... futex resumed>)        = 0
[pid  5111] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5111] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5111] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5111] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5113], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5113
[pid  5111] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5111] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5112] <... futex resumed>)        = 1
[pid  5112] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5112] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, ""./strace-static-x86_64: Process 5113 attached
) = 0
[pid  5113] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5113] open("./file0", O_RDONLY <unfinished ...>
[pid  5112] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 5
[pid  5112] chdir(".")                  = 0
[pid  5113] <... open resumed>)         = 4
[pid  5112] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5112] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5113] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5111] <... futex resumed>)        = 0
[pid  5111] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5111] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5112] <... futex resumed>)        = 0
[pid  5112] getdents(4,  <unfinished ...>
[pid  5113] <... futex resumed>)        = 1
[pid  5112] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[pid  5113] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5112] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5111] <... futex resumed>)        = 0
[pid  5112] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5111] exit_group(0 <unfinished ...>
[pid  5113] <... futex resumed>)        = ?
[pid  5112] <... futex resumed>)        = ?
[pid  5111] <... exit_group resumed>)   = ?
[pid  5113] +++ exited with 0 +++
[pid  5112] +++ exited with 0 +++
[pid  5111] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs")                  = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
[   84.281910][ T5112] loop0: detected capacity change from 0 to 32768
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = 0
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5114
./strace-static-x86_64: Process 5114 attached
[pid  5114] set_robust_list(0x555555d015e0, 24) = 0
[pid  5114] chdir("./8")                = 0
[pid  5114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5114] setpgid(0, 0)               = 0
[pid  5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5114] write(3, "1000", 4)         = 4
[pid  5114] close(3)                    = 0
[pid  5114] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5114] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5114] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5114] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5115], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5115
[pid  5114] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5114] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5115 attached
 <unfinished ...>
[pid  5115] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5115] memfd_create("syzkaller", 0) = 3
[pid  5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5115] munmap(0x7f05422a9000, 16777216) = 0
[pid  5115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5115] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5115] close(3)                    = 0
[pid  5115] mkdir("./file0", 0777)      = 0
[pid  5115] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5115] chdir("./file0")            = 0
[pid  5115] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5115] close(4)                    = 0
[pid  5115] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5114] <... futex resumed>)        = 0
[pid  5114] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5114] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5114] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5114] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5116], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5116
[pid  5114] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5114] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5115] <... futex resumed>)        = 1
[pid  5115] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5115] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "") = 0
[pid  5115] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4
[pid  5115] chdir(".")                  = 0
[pid  5115] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5115] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5116 attached
 <unfinished ...>
[pid  5116] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5116] open("./file0", O_RDONLY)   = 5
[pid  5116] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5114] <... futex resumed>)        = 0
[pid  5114] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5115] <... futex resumed>)        = 0
[pid  5114] <... futex resumed>)        = 1
[pid  5115] getdents(5,  <unfinished ...>
[pid  5114] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5115] <... getdents resumed>0x20000100 /* 2 entries */, 76) = 48
[pid  5115] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5116] <... futex resumed>)        = 1
[pid  5115] <... futex resumed>)        = 1
[pid  5114] <... futex resumed>)        = 0
[pid  5116] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5115] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5114] exit_group(0 <unfinished ...>
[pid  5116] <... futex resumed>)        = ?
[pid  5115] <... futex resumed>)        = ?
[pid  5114] <... exit_group resumed>)   = ?
[pid  5116] +++ exited with 0 +++
[pid  5115] +++ exited with 0 +++
[pid  5114] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} ---
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs")                  = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
[   84.681080][ T5115] loop0: detected capacity change from 0 to 32768
rmdir("./8/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = 0
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5117 attached
, child_tidptr=0x555555d015d0) = 5117
[pid  5117] set_robust_list(0x555555d015e0, 24) = 0
[pid  5117] chdir("./9")                = 0
[pid  5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5117] setpgid(0, 0)               = 0
[pid  5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5117] write(3, "1000", 4)         = 4
[pid  5117] close(3)                    = 0
[pid  5117] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5117] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5117] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5117] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5118], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5118
[pid  5117] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5117] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5118 attached
 <unfinished ...>
[pid  5118] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5118] memfd_create("syzkaller", 0) = 3
[pid  5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5118] munmap(0x7f05422a9000, 16777216) = 0
[pid  5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5118] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5118] close(3)                    = 0
[pid  5118] mkdir("./file0", 0777)      = 0
[pid  5118] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5118] chdir("./file0")            = 0
[pid  5118] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5118] close(4)                    = 0
[pid  5118] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5117] <... futex resumed>)        = 0
[pid  5118] mkdir(".", 0777 <unfinished ...>
[pid  5117] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5118] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5117] <... futex resumed>)        = 0
[pid  5118] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5117] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f0543288000
[pid  5117] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5117] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5119], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5119
[pid  5118] <... mount resumed>)        = 0
[pid  5117] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5117] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5118] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4
[pid  5118] chdir(".")                  = 0
[pid  5118] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5118] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5119 attached
 <unfinished ...>
[pid  5119] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5119] open("./file0", O_RDONLY)   = 5
[pid  5119] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5117] <... futex resumed>)        = 0
[pid  5119] futex(0x7f054a7a87b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5117] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5118] <... futex resumed>)        = 0
[pid  5117] <... futex resumed>)        = 1
[pid  5117] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5118] getdents(5, 0x20000100 /* 2 entries */, 76) = 48
[pid  5118] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5117] <... futex resumed>)        = 0
[pid  5118] futex(0x7f054a7a87a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5117] exit_group(0 <unfinished ...>
[pid  5119] <... futex resumed>)        = ?
[pid  5118] <... futex resumed>)        = ?
[pid  5117] <... exit_group resumed>)   = ?
[pid  5119] +++ exited with 0 +++
[pid  5118] +++ exited with 0 +++
[pid  5117] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[   85.079098][ T5118] loop0: detected capacity change from 0 to 32768
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555d02620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555d0a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555d0a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x555555d02620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555d015d0) = 5120
./strace-static-x86_64: Process 5120 attached
[pid  5120] set_robust_list(0x555555d015e0, 24) = 0
[pid  5120] chdir("./10")               = 0
[pid  5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5120] setpgid(0, 0)               = 0
[pid  5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5120] write(3, "1000", 4)         = 4
[pid  5120] close(3)                    = 0
[pid  5120] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5120] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f054a6a9000
[pid  5120] mprotect(0x7f054a6aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5120] clone(child_stack=0x7f054a6c93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5121], tls=0x7f054a6c9700, child_tidptr=0x7f054a6c99d0) = 5121
[pid  5120] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5120] futex(0x7f054a7a87ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5121 attached
 <unfinished ...>
[pid  5121] set_robust_list(0x7f054a6c99e0, 24) = 0
[pid  5121] memfd_create("syzkaller", 0) = 3
[pid  5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f05422a9000
[pid  5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5121] munmap(0x7f05422a9000, 16777216) = 0
[pid  5121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5121] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5121] close(3)                    = 0
[pid  5121] mkdir("./file0", 0777)      = 0
[pid  5121] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "nodiscard,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=cp866,") = 0
[pid  5121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5121] chdir("./file0")            = 0
[pid  5121] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5121] close(4)                    = 0
[pid  5121] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5120] <... futex resumed>)        = 0
[pid  5120] futex(0x7f054a7a87a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5120] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid  5121] mkdir(".", 0777 <unfinished ...>
[pid  5120] <... mmap resumed>)         = 0x7f0543288000
[pid  5120] mprotect(0x7f0543289000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid  5121] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5120] <... mprotect resumed>)     = 0
[pid  5120] clone(child_stack=0x7f05432a83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID <unfinished ...>
[pid  5121] mount(NULL, ".", 0x200000c0, MS_RDONLY|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "" <unfinished ...>
[pid  5120] <... clone resumed>, parent_tid=[5122], tls=0x7f05432a8700, child_tidptr=0x7f05432a89d0) = 5122
[pid  5120] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5120] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5122 attached
 <unfinished ...>
[pid  5122] set_robust_list(0x7f05432a89e0, 24) = 0
[pid  5122] open("./file0", O_RDONLY)   = 4
[pid  5122] futex(0x7f054a7a87bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5120] <... futex resumed>)        = 0
[pid  5120] futex(0x7f054a7a87b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5120] futex(0x7f054a7a87bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5122] <... futex resumed>)        = 1
[   85.526668][ T5121] loop0: detected capacity change from 0 to 32768
[pid  5122] getdents(4,  <unfinished ...>
[pid  5121] <... mount resumed>)        = 0
[   85.571194][ T5122] read_mapping_page failed!
[   85.577022][ T5122] ERROR: (device loop0): txAbort: 
[   85.577022][ T5122] 
[   85.585865][ T5122] general protection fault, probably for non-canonical address 0xdffffc0000000029: 0000 [#1] PREEMPT SMP KASAN
[   85.597624][ T5122] KASAN: null-ptr-deref in range [0x0000000000000148-0x000000000000014f]
[   85.606047][ T5122] CPU: 0 PID: 5122 Comm: syz-executor101 Not tainted 6.2.0-rc8-next-20230217-syzkaller #0
[   85.615952][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[   85.626019][ T5122] RIP: 0010:txEnd+0x219/0x5a0
[   85.630729][ T5122] Code: dd 57 fc 0e 49 8d bc 24 4c 01 00 00 0f b7 ed 48 89 fa 89 2d c9 57 fc 0e 48 c1 ea 03 66 89 43 28 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 cb
[   85.650355][ T5122] RSP: 0018:ffffc90003c9fb18 EFLAGS: 00010203
[   85.656443][ T5122] RAX: dffffc0000000000 RBX: ffffc90002661110 RCX: 0000000000000000
[   85.664437][ T5122] RDX: 0000000000000029 RSI: ffffffff82f1f59d RDI: 000000000000014c
[   85.672432][ T5122] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000
[   85.680430][ T5122] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000000
[   85.688417][ T5122] R13: 0000000000000000 R14: ffffffff8ccebb40 R15: ffffc90002661112
[   85.696401][ T5122] FS:  00007f05432a8700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   85.705360][ T5122] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.711973][ T5122] CR2: 00007f05432a8718 CR3: 00000000747f7000 CR4: 00000000003506f0
[   85.719961][ T5122] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   85.727956][ T5122] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   85.735938][ T5122] Call Trace:
[   85.739223][ T5122]  <TASK>
[   85.742187][ T5122]  jfs_readdir+0x2a87/0x4290
[   85.746818][ T5122]  ? dtDelete+0x2fe0/0x2fe0
[   85.751358][ T5122]  ? lock_sync+0x190/0x190
[   85.755807][ T5122]  ? rcu_read_lock_sched_held+0x3e/0x70
[   85.761377][ T5122]  ? trace_lock_acquire+0x1f1/0x2b0
[   85.766598][ T5122]  ? iterate_dir+0x504/0x6f0
[   85.771209][ T5122]  ? lock_acquire+0x32/0xc0
[   85.775734][ T5122]  ? iterate_dir+0x504/0x6f0
[   85.780346][ T5122]  ? down_write_killable+0x15b/0x250
[   85.785663][ T5122]  ? rwsem_down_write_slowpath+0x1220/0x1220
[   85.791672][ T5122]  ? fsnotify_perm.part.0+0x221/0x610
[   85.797092][ T5122]  iterate_dir+0x1fd/0x6f0
[   85.801530][ T5122]  __x64_sys_getdents+0x13e/0x350
[   85.806593][ T5122]  ? __ia32_sys_old_readdir+0x260/0x260
[   85.812162][ T5122]  ? filldir64+0x690/0x690
[   85.816602][ T5122]  ? lockdep_hardirqs_on+0x7d/0x100
[   85.821833][ T5122]  ? _raw_spin_unlock_irq+0x2e/0x50
[   85.827062][ T5122]  ? ptrace_notify+0xfe/0x140
[   85.831762][ T5122]  do_syscall_64+0x39/0xb0
[   85.836205][ T5122]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   85.842166][ T5122] RIP: 0033:0x7f054a71d729
[   85.846599][ T5122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   85.866234][ T5122] RSP: 002b:00007f05432a82f8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[   85.874664][ T5122] RAX: ffffffffffffffda RBX: 00007f054a7a87b0 RCX: 00007f054a71d729
[   85.882670][ T5122] RDX: 000000000000004c RSI: 0000000020000100 RDI: 0000000000000004
[   85.890652][ T5122] RBP: 0030656c69662f2e R08: 0000000000000000 R09: 0000000000000000
[   85.898649][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 61746f7571727375
[   85.906632][ T5122] R13: 726765746e696f6e R14: 7261637369646f6e R15: 00007f054a7a87b8
[   85.914627][ T5122]  </TASK>
[   85.917655][ T5122] Modules linked in:
[pid  5121] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 5
[pid  5120] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5121] chdir(".")                  = 0
[pid  5121] futex(0x7f054a7a87ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   85.921717][ T5122] ---[ end trace 0000000000000000 ]---
[   85.927193][ T5122] RIP: 0010:txEnd+0x219/0x5a0
[   85.931937][ T5122] Code: dd 57 fc 0e 49 8d bc 24 4c 01 00 00 0f b7 ed 48 89 fa 89 2d c9 57 fc 0e 48 c1 ea 03 66 89 43 28 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 cb
[   85.951612][ T5122] RSP: 0018:ffffc90003c9fb18 EFLAGS: 00010203
[   85.957708][ T5122] RAX: dffffc0000000000 RBX: ffffc90002661110 RCX: 0000000000000000
[   85.965764][ T5122] RDX: 0000000000000029 RSI: ffffffff82f1f59d RDI: 000000000000014c
[   85.973790][ T5122] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000
[   85.981832][ T5122] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000000
[   85.989885][ T5122] R13: 0000000000000000 R14: ffffffff8ccebb40 R15: ffffc90002661112
[   85.997977][ T5122] FS:  00007f05432a8700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   86.006968][ T5122] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.013602][ T5122] CR2: 00007f05432a8718 CR3: 00000000747f7000 CR4: 00000000003506f0
[   86.021632][ T5122] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   86.029627][ T5122] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   86.037627][ T5122] Kernel panic - not syncing: Fatal exception
[   86.043955][ T5122] Kernel Offset: disabled
[   86.048287][ T5122] Rebooting in 86400 seconds..