./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor539190932 <...> Warning: Permanently added '10.128.1.70' (ECDSA) to the list of known hosts. execve("./syz-executor539190932", ["./syz-executor539190932"], 0x7fff3ff6a790 /* 10 vars */) = 0 brk(NULL) = 0x55555710d000 brk(0x55555710dc40) = 0x55555710dc40 arch_prctl(ARCH_SET_FS, 0x55555710d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x55555710d5d0) = 4997 set_robust_list(0x55555710d5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f7cb8980a90, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f7cb8981160}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f7cb8980b30, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f7cb8981160}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor539190932", 4096) = 27 brk(0x55555712ec40) = 0x55555712ec40 brk(0x55555712f000) = 0x55555712f000 mprotect(0x7f7cb8a43000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] set_robust_list(0x55555710d5e0, 24 [pid 4997] <... clone resumed>, child_tidptr=0x55555710d5d0) = 4999 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... set_robust_list resumed>) = 0 [pid 4998] getpid() = 4998 [pid 4998] mkdir("./syzkaller.DuXWE6", 0700./strace-static-x86_64: Process 5000 attached [pid 4997] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5000 ./strace-static-x86_64: Process 4999 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5001 [pid 5000] set_robust_list(0x55555710d5e0, 24 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] set_robust_list(0x55555710d5e0, 24./strace-static-x86_64: Process 5001 attached [pid 5000] <... set_robust_list resumed>) = 0 [pid 4999] <... set_robust_list resumed>) = 0 [pid 5000] getpid() = 5000 [pid 5000] mkdir("./syzkaller.sflUDg", 0700 [pid 4997] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5002 [pid 4999] getpid( [pid 5001] set_robust_list(0x55555710d5e0, 24 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getpid resumed>) = 4999 [pid 4999] mkdir("./syzkaller.iYGxJb", 0700 [pid 4997] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5003 [pid 5001] <... set_robust_list resumed>) = 0 [pid 5001] getpid() = 5001 [pid 5001] mkdir("./syzkaller.BOTLvn", 0700./strace-static-x86_64: Process 5003 attached ./strace-static-x86_64: Process 5002 attached [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5000] chmod("./syzkaller.sflUDg", 0777 [pid 4999] chmod("./syzkaller.iYGxJb", 0777 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... chmod resumed>) = 0 [pid 4999] <... chmod resumed>) = 0 [pid 5000] chdir("./syzkaller.sflUDg" [pid 4999] chdir("./syzkaller.iYGxJb" [pid 5002] set_robust_list(0x55555710d5e0, 24 [pid 5000] <... chdir resumed>) = 0 [pid 4999] <... chdir resumed>) = 0 [pid 4998] chmod("./syzkaller.DuXWE6", 0777 [pid 5002] <... set_robust_list resumed>) = 0 [pid 5000] mkdir("./0", 0777 [pid 4999] mkdir("./0", 0777 [pid 5002] getpid( [pid 5001] chmod("./syzkaller.BOTLvn", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... chmod resumed>) = 0 [pid 5002] <... getpid resumed>) = 5002 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] mkdir("./syzkaller.KFcvbp", 0700 [pid 5001] <... chmod resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4998] chdir("./syzkaller.DuXWE6" [pid 5002] <... mkdir resumed>) = 0 [pid 5001] chdir("./syzkaller.BOTLvn" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] chmod("./syzkaller.KFcvbp", 0777 [pid 5001] <... chdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... chdir resumed>) = 0 [pid 5002] <... chmod resumed>) = 0 [pid 5000] close(3 [pid 4999] close(3 [pid 5002] chdir("./syzkaller.KFcvbp" [pid 5001] mkdir("./0", 0777 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] mkdir("./0", 0777 [pid 5002] <... chdir resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... mkdir resumed>) = 0 [pid 5003] set_robust_list(0x55555710d5e0, 24 [pid 5002] mkdir("./0", 0777) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5004 [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5005 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... set_robust_list resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] getpid( [pid 5002] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5003] <... getpid resumed>) = 5003 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5003] mkdir("./syzkaller.n7wx3u", 0700 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 4998] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 5003] chmod("./syzkaller.n7wx3u", 0777 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... chmod resumed>) = 0 [pid 5003] chdir("./syzkaller.n7wx3u") = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5007 [pid 5003] mkdir("./0", 0777 [pid 5001] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5007 attached ./strace-static-x86_64: Process 5004 attached ./strace-static-x86_64: Process 5005 attached [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5006 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5006 attached [pid 5004] set_robust_list(0x55555710d5e0, 24 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5005] set_robust_list(0x55555710d5e0, 24 [pid 5001] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 5003] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] <... set_robust_list resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5008 [pid 5006] set_robust_list(0x55555710d5e0, 24 [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5009 [pid 5004] chdir("./0"./strace-static-x86_64: Process 5009 attached ) = 0 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] set_robust_list(0x55555710d5e0, 24 [pid 5004] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5008 attached [pid 5007] <... set_robust_list resumed>) = 0 [pid 5006] <... set_robust_list resumed>) = 0 [pid 5005] <... set_robust_list resumed>) = 0 [pid 5004] setpgid(0, 0 [pid 5007] chdir("./0" [pid 5004] <... setpgid resumed>) = 0 [pid 5006] chdir("./0" [pid 5009] set_robust_list(0x55555710d5e0, 24 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5009] <... set_robust_list resumed>) = 0 [pid 5008] set_robust_list(0x55555710d5e0, 24 [pid 5007] <... chdir resumed>) = 0 [pid 5006] <... chdir resumed>) = 0 [pid 5005] chdir("./0" [pid 5004] <... openat resumed>) = 3 [pid 5009] chdir("./0") = 0 [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5009] setpgid(0, 0 [pid 5008] <... set_robust_list resumed>) = 0 [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... chdir resumed>) = 0 [pid 5004] write(3, "1000", 4 [pid 5009] <... setpgid resumed>) = 0 [pid 5009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5008] chdir("./0" [pid 5007] <... prctl resumed>) = 0 [pid 5006] <... prctl resumed>) = 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5004] <... write resumed>) = 4 [pid 5009] <... openat resumed>) = 3 [pid 5008] <... chdir resumed>) = 0 [pid 5007] setpgid(0, 0 [pid 5006] setpgid(0, 0 [pid 5005] <... prctl resumed>) = 0 [pid 5004] close(3 [pid 5009] write(3, "1000", 4 [pid 5008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] <... setpgid resumed>) = 0 [pid 5006] <... setpgid resumed>) = 0 [pid 5005] setpgid(0, 0 [pid 5004] <... close resumed>) = 0 [pid 5009] <... write resumed>) = 4 [pid 5008] <... prctl resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] <... setpgid resumed>) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs" [pid 5009] close(3 [pid 5008] setpgid(0, 0 [pid 5007] <... openat resumed>) = 3 [pid 5006] <... openat resumed>) = 3 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5004] <... symlink resumed>) = 0 [pid 5009] <... close resumed>) = 0 [pid 5008] <... setpgid resumed>) = 0 [pid 5007] write(3, "1000", 4 [pid 5006] write(3, "1000", 4 [pid 5005] <... openat resumed>) = 3 [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] symlink("/dev/binderfs", "./binderfs" [pid 5008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... write resumed>) = 4 [pid 5006] <... write resumed>) = 4 [pid 5005] write(3, "1000", 4 [pid 5004] <... futex resumed>) = 0 [pid 5008] <... openat resumed>) = 3 [pid 5007] close(3 [pid 5006] close(3 [pid 5005] <... write resumed>) = 4 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5009] <... symlink resumed>) = 0 [pid 5008] write(3, "1000", 4 [pid 5007] <... close resumed>) = 0 [pid 5006] <... close resumed>) = 0 [pid 5005] close(3 [pid 5004] <... mmap resumed>) = 0x7f7cb894f000 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... write resumed>) = 4 [pid 5007] symlink("/dev/binderfs", "./binderfs" [pid 5006] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... close resumed>) = 0 [pid 5004] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5009] <... futex resumed>) = 0 [pid 5008] close(3 [pid 5007] <... symlink resumed>) = 0 [pid 5006] <... symlink resumed>) = 0 [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5004] <... mprotect resumed>) = 0 [pid 5009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5008] <... close resumed>) = 0 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... symlink resumed>) = 0 [pid 5004] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5009] <... mmap resumed>) = 0x7f7cb894f000 [pid 5008] symlink("/dev/binderfs", "./binderfs" [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5008] <... symlink resumed>) = 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5005] <... futex resumed>) = 0 [pid 5004] <... clone resumed>, parent_tid=[5011], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5011 [pid 5009] <... mprotect resumed>) = 0 [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... mmap resumed>) = 0x7f7cb894f000 [pid 5006] <... mmap resumed>) = 0x7f7cb894f000 [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5008] <... futex resumed>) = 0 [pid 5007] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5006] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5005] <... mmap resumed>) = 0x7f7cb894f000 [pid 5004] <... futex resumed>) = 0 [pid 5008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5007] <... mprotect resumed>) = 0 [pid 5006] <... mprotect resumed>) = 0 [pid 5005] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... clone resumed>, parent_tid=[5012], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5012 [pid 5008] <... mmap resumed>) = 0x7f7cb894f000 [pid 5007] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5006] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5005] <... mprotect resumed>) = 0 [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5005] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5009] <... futex resumed>) = 0 [pid 5008] <... mprotect resumed>) = 0 [pid 5007] <... clone resumed>, parent_tid=[5013], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5013 [pid 5006] <... clone resumed>, parent_tid=[5014], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5014 ./strace-static-x86_64: Process 5012 attached [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5008] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... clone resumed>, parent_tid=[5015], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5015 [pid 5012] set_robust_list(0x7f7cb896f9e0, 24 [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... clone resumed>, parent_tid=[5016], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5016 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 0 [pid 5012] <... set_robust_list resumed>) = 0 [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5008] <... futex resumed>) = 0 [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5015 attached [pid 5015] set_robust_list(0x7f7cb896f9e0, 24 [pid 5012] getuid(./strace-static-x86_64: Process 5014 attached ./strace-static-x86_64: Process 5011 attached [pid 5014] set_robust_list(0x7f7cb896f9e0, 24 [pid 5012] <... getuid resumed>) = 0 [pid 5011] set_robust_list(0x7f7cb896f9e0, 24 [pid 5015] <... set_robust_list resumed>) = 0 [pid 5015] getuid() = 0 ./strace-static-x86_64: Process 5013 attached [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... set_robust_list resumed>) = 0 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... set_robust_list resumed>) = 0 [pid 5015] <... futex resumed>) = 1 [pid 5013] set_robust_list(0x7f7cb896f9e0, 24 [pid 5012] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5015] memfd_create("syzkaller", 0 [pid 5013] <... set_robust_list resumed>) = 0 [pid 5012] memfd_create("syzkaller", 0 [pid 5011] getuid( [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] getuid( [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... memfd_create resumed>) = 3 [pid 5013] getuid( [pid 5009] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... getuid resumed>) = 0 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5015] <... mmap resumed>) = 0x7f7cb054f000 [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5013] memfd_create("syzkaller", 0 [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... memfd_create resumed>) = 3 [pid 5007] <... futex resumed>) = 0 [pid 5013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5013] <... mmap resumed>) = 0x7f7cb054f000 ./strace-static-x86_64: Process 5016 attached [pid 5014] <... getuid resumed>) = 0 [pid 5012] <... memfd_create resumed>) = 3 [pid 5011] <... getuid resumed>) = 0 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5016] set_robust_list(0x7f7cb896f9e0, 24 [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... set_robust_list resumed>) = 0 [pid 5014] <... futex resumed>) = 1 [pid 5011] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5016] getuid( [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5016] <... getuid resumed>) = 0 [pid 5014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... mmap resumed>) = 0x7f7cb054f000 [pid 5011] memfd_create("syzkaller", 0 [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] memfd_create("syzkaller", 0 [pid 5016] <... futex resumed>) = 1 [pid 5011] <... memfd_create resumed>) = 3 [pid 5008] <... futex resumed>) = 0 [pid 5016] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] <... memfd_create resumed>) = 3 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5008] <... futex resumed>) = 0 [pid 5011] <... mmap resumed>) = 0x7f7cb054f000 [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5016] memfd_create("syzkaller", 0 [pid 5014] <... mmap resumed>) = 0x7f7cb054f000 [pid 5016] <... memfd_create resumed>) = 3 [pid 5016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [ 41.518464][ T5012] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5012 'syz-executor539' [pid 5015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5015] <... write resumed>) = 4194304 [pid 5013] <... write resumed>) = 4194304 [pid 5013] munmap(0x7f7cb054f000, 4194304 [pid 5015] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5013] <... munmap resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5013] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5015] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 4 [pid 5015] ioctl(4, LOOP_SET_FD, 3 [pid 5013] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5013] close(3) = 0 [pid 5013] mkdir("./file0", 0777 [pid 5015] <... ioctl resumed>) = 0 [pid 5015] close(3) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5015] mkdir("./file0", 0777 [pid 5013] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5015] <... mkdir resumed>) = 0 [ 41.680026][ T5015] loop1: detected capacity change from 0 to 8192 [ 41.687808][ T5013] loop0: detected capacity change from 0 to 8192 [pid 5015] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5016] <... write resumed>) = 4194304 [pid 5014] <... write resumed>) = 4194304 [pid 5012] <... write resumed>) = 4194304 [pid 5011] <... write resumed>) = 4194304 [pid 5016] munmap(0x7f7cb054f000, 4194304 [pid 5014] munmap(0x7f7cb054f000, 4194304 [pid 5011] munmap(0x7f7cb054f000, 4194304 [pid 5016] <... munmap resumed>) = 0 [pid 5014] <... munmap resumed>) = 0 [pid 5011] <... munmap resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5011] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] <... openat resumed>) = 4 [pid 5014] <... openat resumed>) = 4 [pid 5011] <... openat resumed>) = 4 [pid 5016] ioctl(4, LOOP_SET_FD, 3 [pid 5014] ioctl(4, LOOP_SET_FD, 3 [pid 5012] munmap(0x7f7cb054f000, 4194304 [pid 5011] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... ioctl resumed>) = 0 [pid 5016] close(3) = 0 [ 41.723568][ T5013] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.734153][ T5016] loop3: detected capacity change from 0 to 8192 [ 41.736954][ T5013] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 41.743143][ T5015] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.752993][ T5013] REISERFS (device loop0): using ordered data mode [pid 5016] mkdir("./file0", 0777) = 0 [ 41.765229][ T5015] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 41.781243][ T5015] REISERFS (device loop1): using ordered data mode [ 41.781588][ T5011] loop2: detected capacity change from 0 to 8192 [ 41.787775][ T5015] reiserfs: using flush barriers [ 41.789251][ T5015] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.795983][ T5014] loop4: detected capacity change from 0 to 8192 [pid 5016] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5012] <... munmap resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5012] close(3) = 0 [pid 5012] mkdir("./file0", 0777) = 0 [pid 5012] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5011] <... ioctl resumed>) = 0 [pid 5011] close(3) = 0 [pid 5011] mkdir("./file0", 0777) = 0 [ 41.815634][ T5015] REISERFS (device loop1): checking transaction log (loop1) [ 41.825316][ T5012] loop5: detected capacity change from 0 to 8192 [ 41.835967][ T5015] REISERFS (device loop1): Using r5 hash to sort names [ 41.843918][ T5016] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.845620][ T5012] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5011] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5015] <... mount resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5015] chdir("./file0") = 0 [pid 5015] ioctl(4, LOOP_CLR_FD) = 0 [pid 5015] close(4) = 0 [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5015] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5015] <... futex resumed>) = 0 [pid 5015] mkdir(".", 0777 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] <... ioctl resumed>) = 0 [pid 5014] close(3 [pid 5015] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5014] <... close resumed>) = 0 [pid 5014] mkdir("./file0", 0777 [pid 5015] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5014] <... mkdir resumed>) = 0 [ 41.857417][ T5016] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 41.872359][ T5013] reiserfs: using flush barriers [ 41.885854][ T5011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.886721][ T5015] reiserfs: enabling write barrier flush mode [ 41.901084][ T5011] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 41.912277][ T5016] REISERFS (device loop3): using ordered data mode [ 41.914833][ T5013] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.921138][ T5014] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.949870][ T5014] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 41.959221][ T5014] REISERFS (device loop4): using ordered data mode [ 41.959671][ T5012] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5014] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5015] <... mount resumed>) = 0 [pid 5015] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5015] chdir(".") = 0 [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... futex resumed>) = 1 [pid 5015] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 41.965867][ T5014] reiserfs: using flush barriers [ 41.976598][ T5015] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 41.980913][ T5011] REISERFS (device loop2): using ordered data mode [ 41.989708][ T5016] reiserfs: using flush barriers [ 41.995693][ T5014] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.016870][ T5011] reiserfs: using flush barriers [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... futex resumed>) = 1 [pid 5015] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... futex resumed>) = 1 [pid 5015] ftruncate(6, 33587199) = 0 [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... futex resumed>) = 1 [ 42.019535][ T5012] REISERFS (device loop5): using ordered data mode [ 42.023424][ T5014] REISERFS (device loop4): checking transaction log (loop4) [ 42.036445][ T5011] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.036701][ T5016] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5015] sendfile(5, 6, NULL, 281474978811909 [pid 5005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5005] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5005] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5005] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5005] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5025], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5025 [pid 5005] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5025 attached [pid 5025] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5025] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5025] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5025] <... futex resumed>) = 1 [pid 5025] memfd_create("syzkaller", 0) = 7 [pid 5025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [ 42.053355][ T5011] REISERFS (device loop2): checking transaction log (loop2) [ 42.070450][ T5013] REISERFS (device loop0): checking transaction log (loop0) [ 42.083963][ T5014] REISERFS (device loop4): Using r5 hash to sort names [ 42.090978][ T5012] reiserfs: using flush barriers [ 42.091691][ T5011] REISERFS (device loop2): Using r5 hash to sort names [ 42.097315][ T5012] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5014] <... mount resumed>) = 0 [pid 5011] <... mount resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5014] <... openat resumed>) = 3 [pid 5011] <... openat resumed>) = 3 [pid 5011] chdir("./file0" [pid 5014] chdir("./file0" [pid 5011] <... chdir resumed>) = 0 [pid 5014] <... chdir resumed>) = 0 [pid 5011] ioctl(4, LOOP_CLR_FD [pid 5014] ioctl(4, LOOP_CLR_FD [pid 5011] <... ioctl resumed>) = 0 [pid 5016] <... mount resumed>) = 0 [pid 5014] <... ioctl resumed>) = 0 [pid 5011] close(4 [pid 5014] close(4 [pid 5011] <... close resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 1 [pid 5011] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5011] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5016] chdir("./file0" [pid 5014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5014] mkdir(".", 0777 [pid 5011] mkdir(".", 0777 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5016] <... chdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5011] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5016] ioctl(4, LOOP_CLR_FD [pid 5014] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5011] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5016] <... ioctl resumed>) = 0 [pid 5016] close(4) = 0 [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = 0 [pid 5016] <... futex resumed>) = 1 [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5016] mkdir(".", 0777 [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5016] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5016] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [ 42.103518][ T5016] REISERFS (device loop3): checking transaction log (loop3) [ 42.128733][ T5016] REISERFS (device loop3): Using r5 hash to sort names [ 42.139075][ T5014] reiserfs: enabling write barrier flush mode [ 42.147081][ T5011] reiserfs: enabling write barrier flush mode [ 42.156429][ T5016] reiserfs: enabling write barrier flush mode [ 42.163023][ T5011] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5025] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5013] <... mount resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5011] <... mount resumed>) = 0 [pid 5011] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5011] chdir(".") = 0 [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5011] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] <... futex resumed>) = 0 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 0 [pid 5011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... mount resumed>) = 0 [pid 5013] chdir("./file0" [pid 5016] <... mount resumed>) = 0 [pid 5011] <... open resumed>) = 5 [pid 5013] <... chdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5014] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5013] ioctl(4, LOOP_CLR_FD [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5011] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] <... openat resumed>) = 4 [pid 5013] <... ioctl resumed>) = 0 [pid 5014] chdir("." [pid 5004] <... futex resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5013] close(4 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5013] <... close resumed>) = 0 [pid 5016] chdir("." [pid 5014] <... chdir resumed>) = 0 [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [ 42.173581][ T5013] REISERFS (device loop0): Using r5 hash to sort names [ 42.181879][ T5014] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 42.193047][ T5016] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 42.206853][ T5012] REISERFS (device loop5): checking transaction log (loop5) [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 0 [pid 5016] <... chdir resumed>) = 0 [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5011] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5011] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 1 [pid 5013] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5016] <... futex resumed>) = 1 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] <... futex resumed>) = 0 [pid 5007] <... futex resumed>) = 0 [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5016] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] mkdir(".", 0777 [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 1 [pid 5014] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5011] <... futex resumed>) = 0 [pid 5011] ftruncate(6, 33587199 [pid 5008] <... futex resumed>) = 0 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5016] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5014] <... open resumed>) = 5 [pid 5013] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5011] <... ftruncate resumed>) = 0 [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5016] <... open resumed>) = 5 [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5004] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 1 [pid 5011] sendfile(5, 6, NULL, 281474978811909 [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 5016] <... futex resumed>) = 1 [pid 5008] <... futex resumed>) = 0 [pid 5014] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5012] <... mount resumed>) = 0 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... write resumed>) = 4194304 [pid 5016] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5014] <... open resumed>) = 6 [pid 5012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] munmap(0x7f7ca852e000, 4194304 [pid 5016] <... open resumed>) = 6 [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 5008] <... futex resumed>) = 0 [pid 5025] <... munmap resumed>) = 0 [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 1 [pid 5012] chdir("./file0" [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 0 [pid 5025] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... futex resumed>) = 0 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5013] <... mount resumed>) = 0 [pid 5012] <... chdir resumed>) = 0 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... openat resumed>) = 8 [pid 5016] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5012] ioctl(4, LOOP_CLR_FD [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5025] ioctl(8, LOOP_SET_FD, 7 [pid 5016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5014] ftruncate(6, 33587199 [pid 5013] <... openat resumed>) = 4 [pid 5012] <... ioctl resumed>) = 0 [pid 5008] <... futex resumed>) = 0 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5016] ftruncate(6, 33587199 [pid 5013] chdir("." [pid 5025] ioctl(8, LOOP_CLR_FD [pid 5014] <... ftruncate resumed>) = 0 [pid 5013] <... chdir resumed>) = 0 [pid 5012] close(4 [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... ioctl resumed>) = 0 [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5013] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] <... futex resumed>) = 0 [pid 5013] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5016] <... ftruncate resumed>) = 0 [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... open resumed>) = 5 [pid 5012] <... close resumed>) = 0 [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 1 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5025] ioctl(8, LOOP_SET_FD, 7 [pid 5016] <... futex resumed>) = 1 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5008] <... futex resumed>) = 0 [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5025] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5016] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] <... futex resumed>) = 1 [pid 5012] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5004] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] close(8 [pid 5016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 42.220501][ T5012] REISERFS (device loop5): Using r5 hash to sort names [ 42.242892][ T5013] reiserfs: enabling write barrier flush mode [ 42.253085][ T5013] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5014] sendfile(5, 6, NULL, 281474978811909 [pid 5013] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = 0 [pid 5008] <... futex resumed>) = 0 [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = 0 [pid 5025] <... close resumed>) = 0 [pid 5016] sendfile(5, 6, NULL, 281474978811909 [pid 5013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] mkdir(".", 0777 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5008] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5007] <... futex resumed>) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5025] close(7 [pid 5013] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5012] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... mmap resumed>) = 0x7f7cb092e000 [pid 5013] <... open resumed>) = 6 [pid 5012] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5004] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... mprotect resumed>) = 0 [pid 5013] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5004] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5013] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] <... futex resumed>) = 0 [pid 5004] <... clone resumed>, parent_tid=[5026], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5026 [pid 5013] ftruncate(6, 33587199 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5026 attached [pid 5026] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5026] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5026] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... ftruncate resumed>) = 0 [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5013] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] <... futex resumed>) = 0 [pid 5013] sendfile(5, 6, NULL, 281474978811909 [pid 5007] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5004] <... futex resumed>) = 0 [pid 5004] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5006] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5026] <... futex resumed>) = 1 [pid 5026] memfd_create("syzkaller", 0) = 7 [pid 5026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5008] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5008] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5008] <... futex resumed>) = 0 [pid 5006] <... mmap resumed>) = 0x7f7cb092e000 [pid 5008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5006] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5008] <... mmap resumed>) = 0x7f7cb092e000 [pid 5008] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5006] <... mprotect resumed>) = 0 [pid 5008] <... mprotect resumed>) = 0 [pid 5006] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5008] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5006] <... clone resumed>, parent_tid=[5027], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5027 [pid 5008] <... clone resumed>, parent_tid=[5028], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5028 [pid 5006] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] <... futex resumed>) = 0 [pid 5008] <... futex resumed>) = 0 [pid 5006] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5008] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5027 attached ./strace-static-x86_64: Process 5028 attached [pid 5028] set_robust_list(0x7f7cb094e9e0, 24 [pid 5027] set_robust_list(0x7f7cb094e9e0, 24 [pid 5025] <... close resumed>) = 0 [pid 5025] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... set_robust_list resumed>) = 0 [pid 5027] <... set_robust_list resumed>) = 0 [pid 5025] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 0 [pid 5028] ftruncate(-1, 18446744073709551609 [pid 5027] ftruncate(-1, 18446744073709551609 [pid 5025] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] <... mount resumed>) = 0 [pid 5005] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5027] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5005] <... futex resumed>) = 0 [pid 5028] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 1 [pid 5027] <... futex resumed>) = 1 [pid 5008] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5028] memfd_create("syzkaller", 0 [pid 5027] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5012] <... openat resumed>) = 4 [pid 5008] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [ 42.340517][ T5012] reiserfs: enabling write barrier flush mode [ 42.359969][ T5012] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5006] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5028] <... memfd_create resumed>) = 7 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] chdir("." [pid 5008] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 0 [pid 5026] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5025] <... open resumed>) = 7 [pid 5012] <... chdir resumed>) = 0 [pid 5008] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5006] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5027] memfd_create("syzkaller", 0 [pid 5025] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... mmap resumed>) = 0x7f7ca852e000 [pid 5027] <... memfd_create resumed>) = 7 [pid 5025] <... futex resumed>) = 1 [pid 5012] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5007] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5025] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5025] creat("./file0", 000 [pid 5012] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... creat resumed>) = 8 [pid 5012] <... open resumed>) = 5 [pid 5025] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 1 [pid 5012] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5005] <... futex resumed>) = 0 [pid 5025] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = 0 [pid 5012] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... open resumed>) = 6 [pid 5007] <... futex resumed>) = 0 [pid 5027] <... mmap resumed>) = 0x7f7ca852e000 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5012] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5012] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = 0 [pid 5012] ftruncate(6, 33587199 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... ftruncate resumed>) = 0 [pid 5007] <... mmap resumed>) = 0x7f7cb092e000 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5012] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5007] <... mprotect resumed>) = 0 [pid 5012] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5009] <... futex resumed>) = 0 [pid 5012] sendfile(5, 6, NULL, 281474978811909 [pid 5009] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5007] <... clone resumed>, parent_tid=[5029], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5029 [pid 5007] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5029 attached [pid 5015] <... sendfile resumed>) = 786432 [pid 5029] set_robust_list(0x7f7cb094e9e0, 24 [pid 5027] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5015] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... set_robust_list resumed>) = 0 [pid 5015] <... futex resumed>) = 0 [pid 5005] exit_group(0 [pid 5029] ftruncate(-1, 18446744073709551609 [pid 5025] <... futex resumed>) = ? [pid 5005] <... exit_group resumed>) = ? [pid 5025] +++ exited with 0 +++ [pid 5029] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5015] +++ exited with 0 +++ [pid 5005] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 4999] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5029] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5029] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 4999] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] memfd_create("syzkaller", 0 [pid 5007] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5007] <... futex resumed>) = 0 [pid 4999] lstat("./0/binderfs", [pid 5029] <... memfd_create resumed>) = 7 [pid 5007] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./0/binderfs") = 0 [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... mmap resumed>) = 0x7f7ca852e000 [pid 5028] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5009] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5009] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5009] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5030], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5030 [pid 5009] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5009] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] <... write resumed>) = 4194304 [pid 5026] munmap(0x7f7ca852e000, 4194304./strace-static-x86_64: Process 5030 attached [pid 5030] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5030] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5030] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5026] <... munmap resumed>) = 0 [pid 5009] <... futex resumed>) = 0 [pid 5030] memfd_create("syzkaller", 0 [pid 5026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5009] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... memfd_create resumed>) = 7 [pid 5026] <... openat resumed>) = 8 [pid 5009] <... futex resumed>) = 0 [pid 5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5026] ioctl(8, LOOP_SET_FD, 7 [pid 5009] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] <... mmap resumed>) = 0x7f7ca852e000 [pid 5026] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5029] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5026] ioctl(8, LOOP_CLR_FD) = 0 [pid 5026] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5026] close(8) = 0 [pid 5026] close(7 [pid 5027] <... write resumed>) = 4194304 [pid 5028] <... write resumed>) = 4194304 [pid 5030] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5027] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5026] <... close resumed>) = 0 [pid 5027] <... openat resumed>) = 8 [pid 5027] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5027] ioctl(8, LOOP_CLR_FD) = 0 [pid 5029] <... write resumed>) = 4194304 [pid 5028] munmap(0x7f7ca852e000, 4194304 [pid 5029] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5028] <... munmap resumed>) = 0 [pid 5026] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5027] ioctl(8, LOOP_SET_FD, 7 [pid 5026] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5029] <... openat resumed>) = 8 [pid 5028] <... openat resumed>) = 8 [pid 5027] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5026] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] ioctl(8, LOOP_SET_FD, 7 [pid 5028] ioctl(8, LOOP_SET_FD, 7 [pid 5027] close(8 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5029] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5028] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5027] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5029] ioctl(8, LOOP_CLR_FD [pid 5028] ioctl(8, LOOP_CLR_FD [pid 5027] close(7 [pid 5026] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5004] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... write resumed>) = 4194304 [pid 5029] <... ioctl resumed>) = 0 [pid 5028] <... ioctl resumed>) = 0 [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] munmap(0x7f7ca852e000, 4194304 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./0/file0", [pid 5030] <... munmap resumed>) = 0 [pid 5029] ioctl(8, LOOP_SET_FD, 7 [pid 5027] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5029] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5027] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... openat resumed>) = 8 [pid 5029] close(8 [pid 5027] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5030] ioctl(8, LOOP_SET_FD, 7 [pid 5029] <... close resumed>) = 0 [pid 5028] ioctl(8, LOOP_SET_FD, 7 [pid 5027] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5029] close(7 [pid 5028] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] ioctl(8, LOOP_CLR_FD [pid 5027] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5006] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... ioctl resumed>) = 0 [pid 5028] close(8 [pid 4999] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5028] <... close resumed>) = 0 [pid 5030] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5028] close(7 [pid 4999] <... openat resumed>) = 4 [pid 5030] close(8 [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5030] <... close resumed>) = 0 [pid 5004] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 5030] close(7 [pid 5004] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] getdents64(4, [pid 5004] <... mmap resumed>) = 0x7f7ca890d000 [pid 5004] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5004] <... mprotect resumed>) = 0 [pid 4999] getdents64(4, [pid 5004] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5014] <... sendfile resumed>) = 917504 [pid 5004] <... clone resumed>, parent_tid=[5031], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5031 [pid 4999] <... close resumed>) = 0 [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... open resumed>) = 7 [pid 4999] rmdir("./0/file0" [pid 5027] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 0 [pid 5004] <... futex resumed>) = 0 [pid 5027] <... futex resumed>) = 1 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] <... futex resumed>) = 0 [pid 5004] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5031 attached [pid 5027] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(3, [pid 5031] set_robust_list(0x7f7ca892d9e0, 24 [pid 5026] <... open resumed>) = 7 [pid 5014] <... futex resumed>) = 0 [pid 5006] <... futex resumed>) = 1 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5031] <... set_robust_list resumed>) = 0 [pid 5014] creat("./file0", 000 [pid 5006] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 5031] creat("./file0", 000 [pid 5026] <... futex resumed>) = 0 [pid 5014] <... creat resumed>) = 8 [pid 4999] <... close resumed>) = 0 [pid 5031] <... creat resumed>) = 8 [pid 5026] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./0" [pid 5031] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 0 [pid 5031] <... futex resumed>) = 1 [pid 5014] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] exit_group(0 [pid 5004] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5031] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] <... close resumed>) = 0 [pid 5027] <... futex resumed>) = ? [pid 5014] <... futex resumed>) = ? [pid 5006] <... exit_group resumed>) = ? [pid 4999] mkdir("./1", 0777 [pid 5027] +++ exited with 0 +++ [pid 5014] +++ exited with 0 +++ [pid 5006] +++ exited with 0 +++ [pid 4999] <... mkdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5028] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... close resumed>) = 0 [pid 5030] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 1 [pid 5008] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] <... futex resumed>) = 1 [pid 5029] <... close resumed>) = 0 [pid 5028] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5009] <... futex resumed>) = 0 [pid 5008] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(3, [pid 5030] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5029] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5029] <... futex resumed>) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5008] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5007] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 5029] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5007] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5007] <... futex resumed>) = 0 [pid 5002] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5032 [pid 5029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5007] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... sendfile resumed>) = 983040 [pid 5002] unlink("./0/binderfs") = 0 [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5032 attached [pid 5028] <... open resumed>) = 7 [pid 5011] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] set_robust_list(0x55555710d5e0, 24 [pid 5028] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = 0 [pid 5032] <... set_robust_list resumed>) = 0 [pid 5028] <... futex resumed>) = 1 [pid 5011] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = 0 [pid 5032] chdir("./1" [pid 5028] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... chdir resumed>) = 0 [pid 5028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] <... futex resumed>) = 0 [pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5028] creat("./file0", 000 [pid 5008] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... prctl resumed>) = 0 [pid 5028] <... creat resumed>) = 8 [pid 5032] setpgid(0, 0 [pid 5028] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] exit_group(0 [pid 5032] <... setpgid resumed>) = 0 [pid 5028] <... futex resumed>) = 1 [pid 5031] <... futex resumed>) = ? [pid 5026] <... futex resumed>) = ? [pid 5011] <... futex resumed>) = ? [pid 5008] <... futex resumed>) = 0 [pid 5004] <... exit_group resumed>) = ? [pid 5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5031] +++ exited with 0 +++ [pid 5028] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5026] +++ exited with 0 +++ [pid 5011] +++ exited with 0 +++ [pid 5032] <... openat resumed>) = 3 [pid 5032] write(3, "1000", 4) = 4 [pid 5032] close(3) = 0 [pid 5032] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5004] +++ exited with 0 +++ [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5032] <... futex resumed>) = 0 [pid 5032] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5032] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5032] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5033], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5033 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5029] <... open resumed>) = 7 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5029] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... futex resumed>) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5007] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] lstat("./0/binderfs", [pid 5007] <... futex resumed>) = 0 [pid 5007] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./0/binderfs" [pid 5029] creat("./file0", 000) = 8 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5029] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5033] getuid() = 0 [pid 5030] <... open resumed>) = 7 [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5033] memfd_create("syzkaller", 0 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... memfd_create resumed>) = 3 [pid 5032] <... futex resumed>) = 0 [pid 5033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5033] <... mmap resumed>) = 0x7f7cb054f000 [pid 5009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5009] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7ca890d000 [pid 5009] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5009] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5034], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5034 [pid 5009] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5030] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5030] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5034 attached [pid 5016] <... sendfile resumed>) = 1179648 [pid 5012] <... sendfile resumed>) = 786432 [pid 5002] <... umount2 resumed>) = 0 [pid 5034] set_robust_list(0x7f7ca892d9e0, 24 [pid 5016] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... sendfile resumed>) = 917504 [pid 5012] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] exit_group(0 [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... set_robust_list resumed>) = 0 [pid 5028] <... futex resumed>) = ? [pid 5016] <... futex resumed>) = ? [pid 5013] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... futex resumed>) = 0 [pid 5008] <... exit_group resumed>) = ? [pid 5007] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] creat("./file0", 000 [pid 5029] <... futex resumed>) = ? [pid 5028] +++ exited with 0 +++ [pid 5016] +++ exited with 0 +++ [pid 5013] <... futex resumed>) = ? [pid 5012] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] +++ exited with 0 +++ [pid 5007] <... exit_group resumed>) = ? [pid 5002] lstat("./0/file0", [pid 5034] <... creat resumed>) = 8 [pid 5029] +++ exited with 0 +++ [pid 5013] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = 0 [pid 5007] +++ exited with 0 +++ [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5008, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5034] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5009] <... futex resumed>) = 0 [pid 5034] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5009] exit_group(0 [pid 5002] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] <... futex resumed>) = ? [pid 5030] <... futex resumed>) = ? [pid 5012] <... futex resumed>) = ? [pid 5009] <... exit_group resumed>) = ? [pid 5002] <... openat resumed>) = 4 [pid 5034] +++ exited with 0 +++ [pid 5030] +++ exited with 0 +++ [pid 5012] +++ exited with 0 +++ [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5009] +++ exited with 0 +++ [pid 5002] fstat(4, [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5009, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5001] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5002] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5001] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5002] close(4 [pid 5001] fstat(3, [pid 4998] getdents64(3, [pid 5003] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./0/file0" [pid 5001] getdents64(3, [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5001] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 5002] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./0/file0", [pid 4998] lstat("./0/binderfs", [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3 [pid 5001] lstat("./0/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] rmdir("./0" [pid 5001] unlink("./0/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./0/binderfs" [pid 5003] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./0/binderfs", [pid 5002] mkdir("./1", 0777 [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5003] unlink("./0/binderfs") = 0 [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5035 ./strace-static-x86_64: Process 5035 attached [pid 5035] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5035] chdir("./1") = 0 [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5035] setpgid(0, 0) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5035] <... openat resumed>) = 3 [pid 5000] rmdir("./0/file0" [pid 5035] write(3, "1000", 4) = 4 [pid 5035] close(3) = 0 [pid 5035] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 5035] <... symlink resumed>) = 0 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5035] <... futex resumed>) = 0 [pid 5035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5000] close(3) = 0 [pid 5000] rmdir("./0" [pid 5035] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./1", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5035] <... mprotect resumed>) = 0 [pid 5035] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5035] <... clone resumed>, parent_tid=[5036], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5036 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5037 [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5036 attached [pid 5036] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5036] getuid(./strace-static-x86_64: Process 5037 attached ) = 0 [pid 5037] set_robust_list(0x55555710d5e0, 24 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5037] <... set_robust_list resumed>) = 0 [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] chdir("./1") = 0 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] <... futex resumed>) = 1 [pid 5036] memfd_create("syzkaller", 0 [pid 5037] setpgid(0, 0) = 0 [pid 5037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5036] <... memfd_create resumed>) = 3 [pid 5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5037] <... openat resumed>) = 3 [pid 5037] write(3, "1000", 4 [pid 5033] <... write resumed>) = 4194304 [pid 5037] <... write resumed>) = 4 [pid 5033] munmap(0x7f7cb054f000, 4194304 [pid 5037] close(3) = 0 [pid 5037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] <... munmap resumed>) = 0 [pid 5037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5033] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5037] <... mmap resumed>) = 0x7f7cb894f000 [pid 5033] <... openat resumed>) = 4 [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5033] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5037] <... mprotect resumed>) = 0 [pid 5001] lstat("./0/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./0/file0", [pid 5037] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5003] lstat("./0/file0", [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] <... clone resumed>, parent_tid=[5038], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5038 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5037] <... futex resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 4998] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 4998] fstat(4, [pid 5003] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 5001] getdents64(4, [pid 4998] getdents64(4, [pid 5001] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] close(4 [pid 4998] getdents64(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 5001] rmdir("./0/file0" [pid 4998] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5033] close(3 [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] close(4 [pid 5033] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 5001] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5033] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./0/file0" [pid 5003] close(4 [pid 5001] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 5033] <... mkdir resumed>) = 0 [pid 5003] rmdir("./0/file0" [pid 5001] rmdir("./0" [pid 5033] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4998] close(3 [pid 5001] mkdir("./1", 0777 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] rmdir("./0" [pid 5003] close(3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./0" [pid 5001] <... openat resumed>) = 3 [pid 4998] mkdir("./1", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] mkdir("./1", 0777 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5038 attached [pid 5038] set_robust_list(0x7f7cb896f9e0, 24 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5038] <... set_robust_list resumed>) = 0 [pid 5038] getuid() = 0 [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5040 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] close(3 [pid 5038] <... futex resumed>) = 1 [pid 5037] <... futex resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5038] memfd_create("syzkaller", 0 [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3 [pid 5038] <... memfd_create resumed>) = 3 [pid 5037] <... futex resumed>) = 0 [pid 5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] <... mmap resumed>) = 0x7f7cb054f000 [pid 5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 4998] <... close resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5041 [ 43.047241][ T5033] loop1: detected capacity change from 0 to 8192 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5042 attached ./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5040] chdir("./1") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] set_robust_list(0x55555710d5e0, 24 [pid 5040] setpgid(0, 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5042 [pid 5042] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5041 attached [pid 5042] chdir("./1" [pid 5040] <... setpgid resumed>) = 0 [pid 5042] <... chdir resumed>) = 0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5041] set_robust_list(0x55555710d5e0, 24 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5042] <... prctl resumed>) = 0 [pid 5042] setpgid(0, 0 [pid 5041] <... set_robust_list resumed>) = 0 [pid 5040] <... openat resumed>) = 3 [pid 5042] <... setpgid resumed>) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5041] chdir("./1" [pid 5040] write(3, "1000", 4 [pid 5042] <... openat resumed>) = 3 [pid 5042] write(3, "1000", 4 [pid 5040] <... write resumed>) = 4 [pid 5042] <... write resumed>) = 4 [pid 5041] <... chdir resumed>) = 0 [pid 5040] close(3 [pid 5042] close(3 [pid 5041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5040] <... close resumed>) = 0 [pid 5042] <... close resumed>) = 0 [pid 5041] <... prctl resumed>) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs" [pid 5042] symlink("/dev/binderfs", "./binderfs" [pid 5041] setpgid(0, 0 [pid 5040] <... symlink resumed>) = 0 [pid 5042] <... symlink resumed>) = 0 [pid 5041] <... setpgid resumed>) = 0 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5040] <... futex resumed>) = 0 [pid 5042] <... futex resumed>) = 0 [pid 5041] <... openat resumed>) = 3 [pid 5040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5041] write(3, "1000", 4 [pid 5040] <... mmap resumed>) = 0x7f7cb894f000 [pid 5042] <... mmap resumed>) = 0x7f7cb894f000 [pid 5041] <... write resumed>) = 4 [pid 5040] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5042] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5041] close(3 [pid 5040] <... mprotect resumed>) = 0 [pid 5042] <... mprotect resumed>) = 0 [pid 5041] <... close resumed>) = 0 [pid 5040] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5042] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5040] <... clone resumed>, parent_tid=[5043], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5043 [pid 5042] <... clone resumed>, parent_tid=[5044], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5044 [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5042] <... futex resumed>) = 0 [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5044 attached ./strace-static-x86_64: Process 5043 attached [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] <... mmap resumed>) = 0x7f7cb894f000 [pid 5044] set_robust_list(0x7f7cb896f9e0, 24 [pid 5043] set_robust_list(0x7f7cb896f9e0, 24 [pid 5041] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5044] <... set_robust_list resumed>) = 0 [pid 5043] <... set_robust_list resumed>) = 0 [pid 5041] <... mprotect resumed>) = 0 [ 43.085625][ T5033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5044] getuid( [pid 5043] getuid( [pid 5041] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5044] <... getuid resumed>) = 0 [pid 5043] <... getuid resumed>) = 0 [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... clone resumed>, parent_tid=[5045], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5045 [pid 5044] <... futex resumed>) = 1 [pid 5043] <... futex resumed>) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5045 attached [pid 5044] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5036] <... write resumed>) = 4194304 [pid 5045] set_robust_list(0x7f7cb896f9e0, 24 [pid 5044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5042] <... futex resumed>) = 0 [pid 5036] munmap(0x7f7cb054f000, 4194304 [pid 5045] <... set_robust_list resumed>) = 0 [pid 5044] memfd_create("syzkaller", 0 [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... munmap resumed>) = 0 [pid 5045] getuid( [pid 5044] <... memfd_create resumed>) = 3 [pid 5036] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5045] <... getuid resumed>) = 0 [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5036] <... openat resumed>) = 4 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... mmap resumed>) = 0x7f7cb054f000 [pid 5036] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... futex resumed>) = 0 [pid 5043] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] <... futex resumed>) = 1 [ 43.140581][ T5033] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 43.150374][ T5033] REISERFS (device loop1): using ordered data mode [ 43.157271][ T5033] reiserfs: using flush barriers [ 43.163247][ T5033] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.166572][ T5036] loop4: detected capacity change from 0 to 8192 [pid 5045] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] memfd_create("syzkaller", 0 [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] <... write resumed>) = 4194304 [pid 5045] <... futex resumed>) = 0 [pid 5043] <... memfd_create resumed>) = 3 [pid 5041] <... futex resumed>) = 1 [pid 5038] munmap(0x7f7cb054f000, 4194304 [pid 5045] memfd_create("syzkaller", 0) = 3 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] <... munmap resumed>) = 0 [pid 5043] <... mmap resumed>) = 0x7f7cb054f000 [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5033] <... mount resumed>) = 0 [pid 5038] <... openat resumed>) = 4 [pid 5038] ioctl(4, LOOP_SET_FD, 3 [pid 5033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5033] <... openat resumed>) = 3 [pid 5033] chdir("./file0") = 0 [pid 5038] <... ioctl resumed>) = 0 [pid 5033] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] close(4 [pid 5043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5038] close(3 [pid 5036] <... ioctl resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5038] <... close resumed>) = 0 [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5038] mkdir("./file0", 0777 [pid 5033] mkdir(".", 0777 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... mkdir resumed>) = 0 [pid 5032] <... futex resumed>) = 0 [pid 5033] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [ 43.187065][ T5033] REISERFS (device loop1): checking transaction log (loop1) [ 43.197485][ T5033] REISERFS (device loop1): Using r5 hash to sort names [ 43.217580][ T5038] loop2: detected capacity change from 0 to 8192 [pid 5033] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5036] close(3) = 0 [pid 5036] mkdir("./file0", 0777) = 0 [ 43.237918][ T5033] reiserfs: enabling write barrier flush mode [ 43.257403][ T5038] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.270817][ T5036] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5036] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5044] <... write resumed>) = 4194304 [pid 5044] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5044] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... write resumed>) = 4194304 [pid 5044] <... ioctl resumed>) = 0 [pid 5033] <... mount resumed>) = 0 [pid 5045] munmap(0x7f7cb054f000, 4194304 [pid 5044] close(3 [ 43.272485][ T5033] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 43.287250][ T5044] loop0: detected capacity change from 0 to 8192 [ 43.300200][ T5036] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 43.309474][ T5036] REISERFS (device loop4): using ordered data mode [ 43.312710][ T5038] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 43.315994][ T5036] reiserfs: using flush barriers [pid 5033] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5045] <... munmap resumed>) = 0 [pid 5044] <... close resumed>) = 0 [pid 5043] <... write resumed>) = 4194304 [pid 5033] <... openat resumed>) = 4 [pid 5045] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5044] mkdir("./file0", 0777 [pid 5043] munmap(0x7f7cb054f000, 4194304 [pid 5033] chdir("." [pid 5045] <... openat resumed>) = 4 [pid 5044] <... mkdir resumed>) = 0 [pid 5043] <... munmap resumed>) = 0 [pid 5033] <... chdir resumed>) = 0 [pid 5045] ioctl(4, LOOP_SET_FD, 3 [pid 5044] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5033] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 43.331297][ T5036] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.333874][ T5038] REISERFS (device loop2): using ordered data mode [ 43.353933][ T5038] reiserfs: using flush barriers [ 43.355273][ T5036] REISERFS (device loop4): checking transaction log (loop4) [ 43.363180][ T5045] loop5: detected capacity change from 0 to 8192 [ 43.366566][ T5038] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5043] ioctl(4, LOOP_SET_FD, 3 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... ioctl resumed>) = 0 [pid 5045] close(3) = 0 [pid 5045] mkdir("./file0", 0777) = 0 [pid 5045] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5043] <... ioctl resumed>) = 0 [pid 5043] close(3) = 0 [pid 5043] mkdir("./file0", 0777) = 0 [pid 5043] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5033] <... futex resumed>) = 0 [pid 5032] <... futex resumed>) = 1 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] <... mount resumed>) = 0 [pid 5036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5036] chdir("./file0") = 0 [pid 5036] ioctl(4, LOOP_CLR_FD) = 0 [pid 5036] close(4) = 0 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] <... futex resumed>) = 0 [pid 5032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = 0 [pid 5035] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5032] <... futex resumed>) = 1 [pid 5036] mkdir(".", 0777 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5033] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [ 43.374216][ T5043] loop3: detected capacity change from 0 to 8192 [ 43.390042][ T5036] REISERFS (device loop4): Using r5 hash to sort names [ 43.403224][ T5044] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.414042][ T5038] REISERFS (device loop2): checking transaction log (loop2) [ 43.427100][ T5044] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5033] <... open resumed>) = 6 [pid 5036] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [ 43.427281][ T5045] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.436789][ T5044] REISERFS (device loop0): using ordered data mode [ 43.449483][ T5036] reiserfs: enabling write barrier flush mode [ 43.455923][ T5044] reiserfs: using flush barriers [ 43.462584][ T5043] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.479764][ T5045] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5033] ftruncate(6, 33587199 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... ftruncate resumed>) = 0 [pid 5032] <... futex resumed>) = 0 [ 43.481138][ T5044] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.489208][ T5045] REISERFS (device loop5): using ordered data mode [ 43.511676][ T5045] reiserfs: using flush barriers [ 43.514365][ T5038] REISERFS (device loop2): Using r5 hash to sort names [ 43.518231][ T5043] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] sendfile(5, 6, NULL, 281474978811909 [pid 5038] <... mount resumed>) = 0 [pid 5038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5038] chdir("./file0") = 0 [pid 5038] ioctl(4, LOOP_CLR_FD) = 0 [pid 5038] close(4) = 0 [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = 0 [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] <... futex resumed>) = 1 [pid 5038] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5038] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5036] <... mount resumed>) = 0 [pid 5036] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5036] chdir(".") = 0 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5032] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = 1 [ 43.523686][ T5045] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.532661][ T5043] REISERFS (device loop3): using ordered data mode [ 43.555511][ T5043] reiserfs: using flush barriers [ 43.562696][ T5038] reiserfs: enabling write barrier flush mode [ 43.577166][ T5036] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5032] <... futex resumed>) = 0 [pid 5036] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5032] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5036] <... open resumed>) = 5 [pid 5032] <... mmap resumed>) = 0x7f7cb092e000 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5036] <... futex resumed>) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5032] <... mprotect resumed>) = 0 [pid 5036] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5036] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... clone resumed>, parent_tid=[5051], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5051 [pid 5036] <... open resumed>) = 6 [pid 5032] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... futex resumed>) = 0 [pid 5036] <... futex resumed>) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5032] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5036] ftruncate(6, 33587199 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5051 attached [pid 5051] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5051] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5051] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5051] memfd_create("syzkaller", 0 [pid 5032] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... memfd_create resumed>) = 7 [pid 5032] <... futex resumed>) = 0 [pid 5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5032] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5051] <... mmap resumed>) = 0x7f7ca852e000 [ 43.581562][ T5044] REISERFS (device loop0): checking transaction log (loop0) [ 43.593582][ T5043] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.608114][ T5038] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 43.610874][ T5043] REISERFS (device loop3): checking transaction log (loop3) [ 43.627496][ T5044] REISERFS (device loop0): Using r5 hash to sort names [ 43.635336][ T5043] REISERFS (device loop3): Using r5 hash to sort names [pid 5044] <... mount resumed>) = 0 [pid 5043] <... mount resumed>) = 0 [pid 5036] <... ftruncate resumed>) = 0 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5036] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5036] sendfile(5, 6, NULL, 281474978811909 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5044] <... openat resumed>) = 3 [pid 5044] chdir("./file0" [pid 5043] <... openat resumed>) = 3 [pid 5045] <... mount resumed>) = 0 [pid 5044] <... chdir resumed>) = 0 [pid 5043] chdir("./file0" [pid 5038] <... mount resumed>) = 0 [pid 5045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5044] ioctl(4, LOOP_CLR_FD [pid 5043] <... chdir resumed>) = 0 [pid 5038] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5045] <... openat resumed>) = 3 [pid 5044] <... ioctl resumed>) = 0 [pid 5043] ioctl(4, LOOP_CLR_FD [pid 5038] <... openat resumed>) = 4 [pid 5045] chdir("./file0" [pid 5044] close(4 [pid 5043] <... ioctl resumed>) = 0 [pid 5038] chdir("." [pid 5044] <... close resumed>) = 0 [pid 5043] close(4 [pid 5045] <... chdir resumed>) = 0 [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... close resumed>) = 0 [pid 5038] <... chdir resumed>) = 0 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5044] <... futex resumed>) = 1 [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... ioctl resumed>) = 0 [pid 5044] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] <... futex resumed>) = 1 [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 0 [pid 5038] <... futex resumed>) = 1 [pid 5037] <... futex resumed>) = 0 [pid 5051] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5045] close(4 [pid 5044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5043] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] <... futex resumed>) = 0 [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... close resumed>) = 0 [pid 5044] mkdir(".", 0777 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5043] mkdir(".", 0777 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5045] <... futex resumed>) = 1 [ 43.644340][ T5045] REISERFS (device loop5): checking transaction log (loop5) [ 43.653450][ T5045] REISERFS (device loop5): Using r5 hash to sort names [pid 5044] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5043] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5038] <... open resumed>) = 5 [pid 5037] <... futex resumed>) = 0 [pid 5045] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] <... futex resumed>) = 0 [pid 5038] <... futex resumed>) = 0 [pid 5035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5045] mkdir(".", 0777 [pid 5038] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5035] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5045] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5038] <... futex resumed>) = 0 [pid 5037] <... futex resumed>) = 1 [pid 5035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] <... mmap resumed>) = 0x7f7cb092e000 [ 43.690694][ T5044] reiserfs: enabling write barrier flush mode [ 43.697745][ T5043] reiserfs: enabling write barrier flush mode [ 43.721335][ T5045] reiserfs: enabling write barrier flush mode [ 43.730802][ T5044] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... mprotect resumed>) = 0 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5037] <... futex resumed>) = 0 [pid 5035] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5038] ftruncate(6, 33587199 [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5052 attached [pid 5038] <... ftruncate resumed>) = 0 [pid 5052] set_robust_list(0x7f7cb094e9e0, 24 [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... clone resumed>, parent_tid=[5052], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5052 [pid 5052] <... set_robust_list resumed>) = 0 [pid 5038] <... futex resumed>) = 0 [pid 5037] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] sendfile(5, 6, NULL, 281474978811909 [pid 5052] ftruncate(-1, 18446744073709551609 [pid 5037] <... futex resumed>) = 0 [pid 5035] <... futex resumed>) = 0 [pid 5044] <... mount resumed>) = 0 [pid 5044] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5044] chdir(".") = 0 [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... futex resumed>) = 1 [pid 5044] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5052] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5037] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5035] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... mount resumed>) = 0 [pid 5044] <... open resumed>) = 5 [pid 5052] memfd_create("syzkaller", 0 [pid 5035] <... futex resumed>) = 0 [pid 5043] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5035] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5052] <... memfd_create resumed>) = 7 [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5043] <... openat resumed>) = 4 [pid 5043] chdir("." [pid 5052] <... mmap resumed>) = 0x7f7ca852e000 [pid 5043] <... chdir resumed>) = 0 [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 0 [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 1 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5045] <... mount resumed>) = 0 [pid 5045] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5045] chdir(".") = 0 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = 1 [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... futex resumed>) = 1 [pid 5044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5045] <... open resumed>) = 5 [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... futex resumed>) = 1 [pid 5044] ftruncate(6, 33587199 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... open resumed>) = 6 [pid 5043] <... open resumed>) = 5 [pid 5041] <... futex resumed>) = 0 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... ftruncate resumed>) = 0 [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = 0 [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 1 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] <... futex resumed>) = 0 [pid 5045] ftruncate(6, 33587199 [pid 5044] <... futex resumed>) = 1 [pid 5043] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] <... futex resumed>) = 0 [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... ftruncate resumed>) = 0 [pid 5044] sendfile(5, 6, NULL, 281474978811909 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5042] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5042] <... futex resumed>) = 0 [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = 0 [pid 5043] <... open resumed>) = 6 [pid 5042] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [ 43.740590][ T5043] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 43.753519][ T5045] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5043] <... futex resumed>) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5045] sendfile(5, 6, NULL, 281474978811909 [pid 5043] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... write resumed>) = 4194304 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] <... futex resumed>) = 0 [pid 5043] ftruncate(6, 33587199 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... ftruncate resumed>) = 0 [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5040] <... futex resumed>) = 0 [pid 5043] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] <... futex resumed>) = 0 [pid 5043] sendfile(5, 6, NULL, 281474978811909 [pid 5040] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5051] munmap(0x7f7ca852e000, 4194304 [pid 5037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5051] <... munmap resumed>) = 0 [pid 5037] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5037] <... futex resumed>) = 0 [pid 5051] <... openat resumed>) = 8 [pid 5037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5051] ioctl(8, LOOP_SET_FD, 7 [pid 5037] <... mmap resumed>) = 0x7f7cb092e000 [pid 5051] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5037] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5051] ioctl(8, LOOP_CLR_FD [pid 5037] <... mprotect resumed>) = 0 [pid 5051] <... ioctl resumed>) = 0 [pid 5037] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x7f7cb094e9e0, 24 [pid 5037] <... clone resumed>, parent_tid=[5053], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5053 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5037] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] ftruncate(-1, 18446744073709551609 [pid 5051] ioctl(8, LOOP_SET_FD, 7 [pid 5037] <... futex resumed>) = 0 [pid 5053] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5051] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5037] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] close(8 [pid 5042] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5053] <... futex resumed>) = 0 [pid 5051] <... close resumed>) = 0 [pid 5042] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5040] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5037] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] memfd_create("syzkaller", 0 [pid 5051] close(7 [pid 5037] <... futex resumed>) = 0 [pid 5053] <... memfd_create resumed>) = 7 [pid 5052] <... write resumed>) = 4194304 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5041] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5052] munmap(0x7f7ca852e000, 4194304 [pid 5042] <... mmap resumed>) = 0x7f7cb092e000 [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5052] <... munmap resumed>) = 0 [pid 5042] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5052] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5042] <... mprotect resumed>) = 0 [pid 5041] <... mmap resumed>) = 0x7f7cb092e000 [pid 5040] <... mmap resumed>) = 0x7f7cb092e000 [pid 5053] <... mmap resumed>) = 0x7f7ca852e000 [pid 5052] <... openat resumed>) = 8 [pid 5042] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5041] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5040] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5052] ioctl(8, LOOP_SET_FD, 7 [pid 5041] <... mprotect resumed>) = 0 [pid 5040] <... mprotect resumed>) = 0 [pid 5052] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5042] <... clone resumed>, parent_tid=[5054], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5054 [pid 5041] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5040] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5052] ioctl(8, LOOP_CLR_FD [pid 5042] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... ioctl resumed>) = 0 [pid 5042] <... futex resumed>) = 0 [pid 5041] <... clone resumed>, parent_tid=[5055], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5055 [pid 5040] <... clone resumed>, parent_tid=[5056], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5056 [pid 5042] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5041] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5052] close(8) = 0 [pid 5052] close(7./strace-static-x86_64: Process 5056 attached [pid 5056] set_robust_list(0x7f7cb094e9e0, 24./strace-static-x86_64: Process 5054 attached ) = 0 [pid 5056] ftruncate(-1, 18446744073709551609 [pid 5054] set_robust_list(0x7f7cb094e9e0, 24 [pid 5056] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5054] <... set_robust_list resumed>) = 0 [pid 5056] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] ftruncate(-1, 18446744073709551609 [pid 5056] <... futex resumed>) = 1 [pid 5054] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5040] <... futex resumed>) = 0 [pid 5056] memfd_create("syzkaller", 0 [pid 5054] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... memfd_create resumed>) = 7 [pid 5054] <... futex resumed>) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5054] memfd_create("syzkaller", 0 [pid 5042] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... mmap resumed>) = 0x7f7ca852e000 [pid 5054] <... memfd_create resumed>) = 7 [pid 5042] <... futex resumed>) = 0 [pid 5054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5042] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5054] <... mmap resumed>) = 0x7f7ca852e000 [pid 5052] <... close resumed>) = 0 [pid 5052] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5035] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5035] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] <... futex resumed>) = 1 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5041] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5041] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb090d000 [pid 5041] mprotect(0x7f7cb090e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5041] clone(child_stack=0x7f7cb092d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5057], tls=0x7f7cb092d700, child_tidptr=0x7f7cb092d9d0) = 5057 [pid 5041] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5055 attached [pid 5052] <... open resumed>) = 7 [pid 5036] <... sendfile resumed>) = 589824 [pid 5055] set_robust_list(0x7f7cb094e9e0, 24) = 0 ./strace-static-x86_64: Process 5057 attached [pid 5056] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5055] ftruncate(-1, 18446744073709551609 [pid 5054] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5053] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5052] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... close resumed>) = 0 [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] set_robust_list(0x7f7cb092d9e0, 24 [pid 5055] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5052] <... futex resumed>) = 0 [pid 5051] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = 0 [pid 5035] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... set_robust_list resumed>) = 0 [pid 5055] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 1 [pid 5036] creat("./file0", 000 [pid 5035] <... futex resumed>) = 0 [pid 5032] <... futex resumed>) = 0 [pid 5057] memfd_create("syzkaller", 0 [pid 5055] <... futex resumed>) = 0 [pid 5051] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] <... creat resumed>) = 8 [pid 5032] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... memfd_create resumed>) = 7 [pid 5055] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... futex resumed>) = 0 [pid 5057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5036] <... futex resumed>) = 0 [pid 5032] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... mmap resumed>) = 0x7f7ca850d000 [pid 5036] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5054] <... write resumed>) = 4194304 [pid 5051] <... open resumed>) = 7 [pid 5033] <... sendfile resumed>) = 1048576 [pid 5054] munmap(0x7f7ca852e000, 4194304 [pid 5035] exit_group(0 [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... munmap resumed>) = 0 [pid 5052] <... futex resumed>) = ? [pid 5051] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] <... futex resumed>) = ? [pid 5035] <... exit_group resumed>) = ? [pid 5033] <... futex resumed>) = 0 [pid 5054] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5052] +++ exited with 0 +++ [pid 5051] <... futex resumed>) = 1 [pid 5036] +++ exited with 0 +++ [pid 5032] <... futex resumed>) = 0 [pid 5051] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5032] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] +++ exited with 0 +++ [pid 5033] creat("./file0", 000 [pid 5054] <... openat resumed>) = 8 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5035, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5056] <... write resumed>) = 4194304 [pid 5054] ioctl(8, LOOP_SET_FD, 7 [pid 5033] <... creat resumed>) = 8 [pid 5056] munmap(0x7f7ca852e000, 4194304 [pid 5054] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5033] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] ioctl(8, LOOP_CLR_FD [pid 5033] <... futex resumed>) = 1 [pid 5032] <... futex resumed>) = 0 [pid 5002] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5054] <... ioctl resumed>) = 0 [pid 5033] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5032] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5051] <... futex resumed>) = ? [pid 5033] <... futex resumed>) = ? [pid 5032] <... exit_group resumed>) = ? [pid 5056] <... munmap resumed>) = 0 [pid 5051] +++ exited with 0 +++ [pid 5033] +++ exited with 0 +++ [pid 5032] +++ exited with 0 +++ [pid 5002] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5054] ioctl(8, LOOP_SET_FD, 7 [pid 5002] <... openat resumed>) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5056] <... openat resumed>) = 8 [pid 5054] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5002] fstat(3, [pid 5056] ioctl(8, LOOP_SET_FD, 7 [pid 5054] close(8 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5056] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5054] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 5057] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 4999] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5054] close(7 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] ioctl(8, LOOP_CLR_FD [pid 5002] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... ioctl resumed>) = 0 [pid 5002] lstat("./1/binderfs", [pid 4999] fstat(3, [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] unlink("./1/binderfs") = 0 [pid 4999] getdents64(3, [pid 5056] ioctl(8, LOOP_SET_FD, 7 [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5056] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5056] close(8 [pid 4999] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... close resumed>) = 0 [pid 5056] close(7 [pid 5053] <... write resumed>) = 4194304 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./1/binderfs" [pid 5053] munmap(0x7f7ca852e000, 4194304 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5053] <... munmap resumed>) = 0 [pid 5053] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 8 [pid 5053] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5053] ioctl(8, LOOP_CLR_FD) = 0 [pid 5053] ioctl(8, LOOP_SET_FD, 7 [pid 5054] <... close resumed>) = 0 [pid 5053] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5054] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] close(8) = 0 [pid 5053] close(7 [pid 5054] <... futex resumed>) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5054] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5042] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... write resumed>) = 4194304 [pid 5056] <... close resumed>) = 0 [pid 5054] <... open resumed>) = 7 [pid 5053] <... close resumed>) = 0 [pid 5044] <... sendfile resumed>) = 851968 [pid 5002] <... umount2 resumed>) = 0 [pid 5056] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... futex resumed>) = 1 [pid 5054] <... futex resumed>) = 1 [pid 5053] <... futex resumed>) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5037] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] lstat("./1/file0", [pid 5057] munmap(0x7f7ca850d000, 4194304 [pid 5056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5037] <... futex resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5056] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5054] creat("./file0", 000 [pid 5053] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5044] <... futex resumed>) = 0 [pid 5042] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5054] <... creat resumed>) = 8 [pid 5044] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5054] <... futex resumed>) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5054] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] exit_group(0 [pid 5002] <... openat resumed>) = 4 [pid 5054] <... futex resumed>) = ? [pid 5044] <... futex resumed>) = ? [pid 5042] <... exit_group resumed>) = ? [pid 5002] fstat(4, [pid 5054] +++ exited with 0 +++ [pid 5044] +++ exited with 0 +++ [pid 5042] +++ exited with 0 +++ [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5002] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] getdents64(4, [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5057] <... munmap resumed>) = 0 [pid 5002] close(4 [pid 5057] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 4998] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... openat resumed>) = 8 [pid 5002] rmdir("./1/file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5057] ioctl(8, LOOP_SET_FD, 7 [pid 5056] <... open resumed>) = 7 [pid 5053] <... open resumed>) = 7 [pid 5043] <... sendfile resumed>) = 1048576 [pid 5038] <... sendfile resumed>) = 983040 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5057] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5056] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5057] ioctl(8, LOOP_CLR_FD [pid 5056] <... futex resumed>) = 1 [pid 5053] <... futex resumed>) = 1 [pid 5040] <... futex resumed>) = 0 [pid 5037] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... ioctl resumed>) = 0 [pid 5056] creat("./file0", 000 [pid 5053] creat("./file0", 000 [pid 5040] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5053] <... creat resumed>) = 8 [pid 5043] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 0 [pid 5038] <... futex resumed>) = 0 [pid 5037] <... futex resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4998] lstat("./1/binderfs", [pid 5056] <... creat resumed>) = 8 [pid 5053] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5040] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] rmdir("./1" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5056] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... futex resumed>) = 0 [pid 5043] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4998] unlink("./1/binderfs" [pid 5057] ioctl(8, LOOP_SET_FD, 7 [pid 5056] <... futex resumed>) = 0 [pid 5053] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] exit_group(0 [pid 5037] exit_group(0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5057] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5053] <... futex resumed>) = ? [pid 5043] <... futex resumed>) = ? [pid 5040] <... exit_group resumed>) = ? [pid 5038] <... futex resumed>) = ? [pid 5037] <... exit_group resumed>) = ? [pid 5002] mkdir("./2", 0777 [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] +++ exited with 0 +++ [pid 5038] +++ exited with 0 +++ [pid 5057] close(8 [pid 5002] <... mkdir resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5057] close(7 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] +++ exited with 0 +++ [pid 5053] +++ exited with 0 +++ [pid 5040] +++ exited with 0 +++ [pid 5037] +++ exited with 0 +++ [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5037, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5059 [pid 5001] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 5001] lstat("./1/binderfs", [pid 5000] lstat("./1/binderfs", ./strace-static-x86_64: Process 5059 attached [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] unlink("./1/binderfs" [pid 5000] unlink("./1/binderfs" [pid 5059] set_robust_list(0x55555710d5e0, 24 [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] getdents64(4, [pid 5059] <... set_robust_list resumed>) = 0 [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] chdir("./2" [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5059] <... chdir resumed>) = 0 [pid 4999] close(4 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./1/file0") = 0 [pid 4999] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./1" [pid 5059] <... prctl resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./2", 0777 [pid 5059] setpgid(0, 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... setpgid resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 3 [pid 5059] write(3, "1000", 4 [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5060 [pid 5059] <... write resumed>) = 4 [pid 5059] close(3./strace-static-x86_64: Process 5060 attached [pid 5060] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5060] chdir("./2") = 0 [pid 5059] <... close resumed>) = 0 [pid 5059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5059] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5057] <... close resumed>) = 0 [pid 5059] <... mprotect resumed>) = 0 [pid 5059] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5057] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... clone resumed>, parent_tid=[5061], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5061 [pid 5041] <... futex resumed>) = 0 [pid 5041] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = 1 [pid 5055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5041] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] <... futex resumed>) = 1 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] setpgid(0, 0) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] write(3, "1000", 4) = 4 [pid 5060] close(3) = 0 [pid 5060] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5061 attached ) = 0 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5060] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5061] set_robust_list(0x7f7cb896f9e0, 24 [pid 5060] <... mprotect resumed>) = 0 [pid 5060] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5061] <... set_robust_list resumed>) = 0 [pid 5061] getuid( [pid 5060] <... clone resumed>, parent_tid=[5062], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5062 [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... getuid resumed>) = 0 [pid 5060] <... futex resumed>) = 0 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5061] memfd_create("syzkaller", 0 [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] <... memfd_create resumed>) = 3 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 ./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x7f7cb896f9e0, 24 [pid 5045] <... sendfile resumed>) = 1310720 [pid 5062] <... set_robust_list resumed>) = 0 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] getuid( [pid 5045] <... futex resumed>) = 0 [pid 5062] <... getuid resumed>) = 0 [pid 5055] <... open resumed>) = 7 [pid 5045] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... umount2 resumed>) = 0 [pid 5062] <... futex resumed>) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5055] <... futex resumed>) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5062] memfd_create("syzkaller", 0 [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... memfd_create resumed>) = 3 [pid 5060] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = 1 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5045] creat("./file0", 000 [pid 5041] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... mmap resumed>) = 0x7f7cb054f000 [pid 5045] <... creat resumed>) = 8 [pid 5045] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5041] <... futex resumed>) = 0 [pid 5045] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5041] exit_group(0 [pid 5057] <... futex resumed>) = ? [pid 5055] <... futex resumed>) = ? [pid 5045] <... futex resumed>) = ? [pid 5041] <... exit_group resumed>) = ? [pid 5057] +++ exited with 0 +++ [pid 5055] +++ exited with 0 +++ [pid 5045] +++ exited with 0 +++ [pid 5041] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5041, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5003] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/file0", [pid 5003] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5003] unlink("./1/binderfs" [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./1/file0" [pid 5003] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./1") = 0 [pid 4998] mkdir("./2", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5064 [pid 5000] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5064 attached [pid 5064] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5064] chdir("./2") = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5064] <... write resumed>) = 4 [pid 5064] close(3) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5064] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mprotect resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5066], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5066 [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] lstat("./1/file0", [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./1/file0"./strace-static-x86_64: Process 5066 attached ) = 0 [pid 5066] set_robust_list(0x7f7cb896f9e0, 24 [pid 5000] getdents64(3, [pid 5066] <... set_robust_list resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5066] getuid( [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 5066] <... getuid resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] rmdir("./1" [pid 5066] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 5066] memfd_create("syzkaller", 0 [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... memfd_create resumed>) = 3 [pid 5064] <... futex resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] mkdir("./2", 0777 [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5000] <... mkdir resumed>) = 0 [pid 5066] <... mmap resumed>) = 0x7f7cb054f000 [pid 5001] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5001] fstat(4, [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5067 [pid 5001] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./1/file0") = 0 ./strace-static-x86_64: Process 5067 attached [pid 5001] getdents64(3, [pid 5067] set_robust_list(0x55555710d5e0, 24 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5001] close(3 [pid 5067] chdir("./2") = 0 [pid 5001] <... close resumed>) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] rmdir("./1" [pid 5067] <... prctl resumed>) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] mkdir("./2", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 5067] write(3, "1000", 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... write resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5067] close(3) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5067] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... symlink resumed>) = 0 [pid 5001] close(3 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... close resumed>) = 0 [pid 5067] <... futex resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5068 attached ) = 0x7f7cb894f000 [pid 5067] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5067] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5068 [pid 5068] set_robust_list(0x55555710d5e0, 24 [pid 5067] <... clone resumed>, parent_tid=[5069], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5069 [pid 5068] <... set_robust_list resumed>) = 0 [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] chdir("./2") = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5069] getuid() = 0 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5068] <... prctl resumed>) = 0 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] memfd_create("syzkaller", 0 [pid 5068] setpgid(0, 0 [pid 5069] <... memfd_create resumed>) = 3 [pid 5068] <... setpgid resumed>) = 0 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... mmap resumed>) = 0x7f7cb054f000 [pid 5068] <... openat resumed>) = 3 [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... futex resumed>) = 0 [pid 5003] lstat("./1/file0", [pid 5068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mmap resumed>) = 0x7f7cb894f000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5003] <... openat resumed>) = 4 [pid 5068] <... mprotect resumed>) = 0 [pid 5062] <... write resumed>) = 4194304 [pid 5003] fstat(4, [pid 5068] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5070 attached [pid 5062] munmap(0x7f7cb054f000, 4194304 [pid 5061] <... write resumed>) = 4194304 [pid 5003] getdents64(4, [pid 5070] set_robust_list(0x7f7cb896f9e0, 24 [pid 5068] <... clone resumed>, parent_tid=[5070], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5070 [pid 5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5062] <... munmap resumed>) = 0 [pid 5061] munmap(0x7f7cb054f000, 4194304 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... munmap resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5070] getuid( [pid 5068] <... futex resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] getdents64(4, [pid 5070] <... getuid resumed>) = 0 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... openat resumed>) = 4 [pid 5061] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(4 [pid 5070] <... futex resumed>) = 0 [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... close resumed>) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5068] <... futex resumed>) = 0 [pid 5003] rmdir("./1/file0" [pid 5070] <... memfd_create resumed>) = 3 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] <... ioctl resumed>) = 0 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] close(3 [pid 5070] <... mmap resumed>) = 0x7f7cb054f000 [pid 5061] <... close resumed>) = 0 [pid 5061] mkdir("./file0", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5061] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./1" [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5069] <... write resumed>) = 4194304 [pid 5066] <... write resumed>) = 4194304 [pid 5062] <... ioctl resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5069] munmap(0x7f7cb054f000, 4194304 [ 44.582673][ T5061] loop4: detected capacity change from 0 to 8192 [ 44.591685][ T5062] loop1: detected capacity change from 0 to 8192 [ 44.619980][ T5061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5066] munmap(0x7f7cb054f000, 4194304 [pid 5062] close(3 [pid 5003] mkdir("./2", 0777 [pid 5069] <... munmap resumed>) = 0 [pid 5066] <... munmap resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] mkdir("./file0", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5069] ioctl(4, LOOP_SET_FD, 3 [pid 5066] ioctl(4, LOOP_SET_FD, 3 [pid 5062] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5069] <... ioctl resumed>) = 0 [pid 5069] close(3 [pid 5066] <... ioctl resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... close resumed>) = 0 [pid 5003] close(3 [pid 5069] mkdir("./file0", 0777 [pid 5003] <... close resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5073 ./strace-static-x86_64: Process 5073 attached [pid 5070] <... write resumed>) = 4194304 [pid 5066] close(3) = 0 [pid 5073] set_robust_list(0x55555710d5e0, 24 [pid 5070] munmap(0x7f7cb054f000, 4194304 [pid 5066] mkdir("./file0", 0777 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5073] chdir("./2" [ 44.633577][ T5061] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 44.642226][ T5069] loop2: detected capacity change from 0 to 8192 [ 44.649220][ T5061] REISERFS (device loop4): using ordered data mode [ 44.656388][ T5066] loop0: detected capacity change from 0 to 8192 [ 44.663497][ T5061] reiserfs: using flush barriers [pid 5066] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5073] <... chdir resumed>) = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setpgid(0, 0) = 0 [pid 5070] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 5070] <... openat resumed>) = 4 [pid 5073] write(3, "1000", 4 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... write resumed>) = 4 [pid 5073] close(3) = 0 [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5073] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [ 44.683678][ T5061] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.684221][ T5062] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.711627][ T5070] loop3: detected capacity change from 0 to 8192 [ 44.712845][ T5062] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [pid 5073] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5076], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5076 [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = 0 [pid 5073] <... futex resumed>) = 0 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(3./strace-static-x86_64: Process 5076 attached [ 44.725943][ T5069] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.728486][ T5062] REISERFS (device loop1): using ordered data mode [ 44.741902][ T5066] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.747912][ T5062] reiserfs: using flush barriers [ 44.767139][ T5062] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5076] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5076] getuid() = 0 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5076] memfd_create("syzkaller", 0 [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... memfd_create resumed>) = 3 [pid 5073] <... futex resumed>) = 0 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5070] <... close resumed>) = 0 [pid 5070] mkdir("./file0", 0777) = 0 [pid 5070] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5062] <... mount resumed>) = 0 [ 44.783634][ T5061] REISERFS (device loop4): checking transaction log (loop4) [ 44.791463][ T5062] REISERFS (device loop1): checking transaction log (loop1) [ 44.799227][ T5061] REISERFS (device loop4): Using r5 hash to sort names [ 44.799826][ T5062] REISERFS (device loop1): Using r5 hash to sort names [ 44.814463][ T5066] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 44.816013][ T5069] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] chdir("./file0") = 0 [pid 5061] ioctl(4, LOOP_CLR_FD) = 0 [pid 5061] close(4) = 0 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] chdir("./file0" [pid 5059] <... futex resumed>) = 0 [pid 5062] <... chdir resumed>) = 0 [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5059] <... futex resumed>) = 1 [pid 5062] ioctl(4, LOOP_CLR_FD [pid 5061] mkdir(".", 0777 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5061] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5062] close(4) = 0 [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5062] mkdir(".", 0777 [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] <... futex resumed>) = 0 [ 44.824184][ T5066] REISERFS (device loop0): using ordered data mode [ 44.835167][ T5070] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.839871][ T5066] reiserfs: using flush barriers [ 44.868072][ T5061] reiserfs: enabling write barrier flush mode [ 44.869555][ T5070] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [pid 5062] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [ 44.879532][ T5062] reiserfs: enabling write barrier flush mode [ 44.883455][ T5070] REISERFS (device loop3): using ordered data mode [ 44.895914][ T5070] reiserfs: using flush barriers [ 44.902407][ T5069] REISERFS (device loop2): using ordered data mode [ 44.903835][ T5066] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.908940][ T5069] reiserfs: using flush barriers [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... write resumed>) = 4194304 [ 44.927531][ T5070] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.946316][ T5069] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.948673][ T5061] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 44.963187][ T5062] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5076] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5061] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5061] chdir("." [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5076] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... chdir resumed>) = 0 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... futex resumed>) = 0 [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 1 [pid 5061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... futex resumed>) = 0 [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 1 [pid 5061] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... futex resumed>) = 0 [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... ioctl resumed>) = 0 [pid 5062] <... mount resumed>) = 0 [pid 5061] <... futex resumed>) = 1 [pid 5061] ftruncate(6, 33587199 [pid 5076] close(3 [pid 5062] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... ftruncate resumed>) = 0 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5059] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] sendfile(5, 6, NULL, 281474978811909 [pid 5059] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] mkdir("./file0", 0777 [pid 5062] chdir("." [pid 5076] <... mkdir resumed>) = 0 [pid 5062] <... chdir resumed>) = 0 [pid 5076] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5062] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... mount resumed>) = 0 [ 44.980822][ T5069] REISERFS (device loop2): checking transaction log (loop2) [ 44.993134][ T5076] loop5: detected capacity change from 0 to 8192 [ 45.008375][ T5070] REISERFS (device loop3): checking transaction log (loop3) [ 45.010522][ T5066] REISERFS (device loop0): checking transaction log (loop0) [ 45.016649][ T5070] REISERFS (device loop3): Using r5 hash to sort names [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] chdir("./file0") = 0 [pid 5070] ioctl(4, LOOP_CLR_FD) = 0 [pid 5070] close(4 [pid 5062] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 0 [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... futex resumed>) = 1 [pid 5070] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5070] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5062] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5062] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] chdir("./file0" [pid 5062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5059] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5079], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5079 [pid 5059] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 45.032427][ T5066] REISERFS (device loop0): Using r5 hash to sort names [ 45.039965][ T5076] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.053503][ T5070] reiserfs: enabling write barrier flush mode [ 45.061769][ T5069] REISERFS (device loop2): Using r5 hash to sort names [ 45.068859][ T5076] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5059] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... chdir resumed>) = 0 [pid 5062] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5066] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] <... open resumed>) = 6 [pid 5066] close(4 [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 5062] <... futex resumed>) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5062] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = 1 [pid 5062] ftruncate(6, 33587199 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5079 attached [pid 5070] <... mount resumed>) = 0 [pid 5069] <... mount resumed>) = 0 [pid 5062] <... ftruncate resumed>) = 0 [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] <... futex resumed>) = 0 [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] <... futex resumed>) = 1 [pid 5066] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5060] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5079] set_robust_list(0x7f7cb094e9e0, 24 [pid 5070] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5069] chdir("./file0" [pid 5060] <... futex resumed>) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5062] sendfile(5, 6, NULL, 281474978811909 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5069] <... chdir resumed>) = 0 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] ftruncate(-1, 18446744073709551609 [pid 5070] chdir("." [pid 5069] ioctl(4, LOOP_CLR_FD) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5069] close(4 [pid 5079] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5079] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 1 [pid 5079] <... futex resumed>) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5059] <... futex resumed>) = 0 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] memfd_create("syzkaller", 0 [pid 5070] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5069] <... futex resumed>) = 1 [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5059] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... memfd_create resumed>) = 7 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... open resumed>) = 5 [pid 5069] mkdir(".", 0777 [pid 5068] <... futex resumed>) = 0 [pid 5059] <... futex resumed>) = 0 [pid 5079] <... mmap resumed>) = 0x7f7ca852e000 [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 45.069808][ T5070] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 45.085885][ T5076] REISERFS (device loop5): using ordered data mode [ 45.100197][ T5066] reiserfs: enabling write barrier flush mode [ 45.111974][ T5076] reiserfs: using flush barriers [pid 5059] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... futex resumed>) = 0 [pid 5069] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... mount resumed>) = 0 [pid 5070] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5068] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... open resumed>) = 6 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = 0 [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5070] ftruncate(6, 33587199 [pid 5068] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] chdir(".") = 0 [pid 5060] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ftruncate resumed>) = 0 [pid 5066] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = 0 [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... futex resumed>) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5066] <... open resumed>) = 5 [pid 5064] <... futex resumed>) = 0 [pid 5060] <... mmap resumed>) = 0x7f7cb092e000 [pid 5070] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5060] <... mprotect resumed>) = 0 [pid 5070] sendfile(5, 6, NULL, 281474978811909 [pid 5068] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... mount resumed>) = 0 [pid 5069] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5069] chdir(".") = 0 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... futex resumed>) = 0 [ 45.120456][ T5076] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.144707][ T5069] reiserfs: enabling write barrier flush mode [ 45.145719][ T5066] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 45.158355][ T5076] REISERFS (device loop5): checking transaction log (loop5) [ 45.161268][ T5069] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 45.178099][ T5076] REISERFS (device loop5): Using r5 hash to sort names [pid 5069] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... futex resumed>) = 0 [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 1 [pid 5076] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5080 attached [pid 5076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... futex resumed>) = 0 [pid 5066] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... clone resumed>, parent_tid=[5080], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5080 [pid 5080] set_robust_list(0x7f7cb094e9e0, 24 [pid 5076] <... openat resumed>) = 3 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5060] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5076] chdir("./file0" [pid 5069] <... open resumed>) = 5 [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = 0 [pid 5080] ftruncate(-1, 18446744073709551609 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... chdir resumed>) = 0 [pid 5069] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 1 [pid 5060] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(4, LOOP_CLR_FD [pid 5069] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] ftruncate(6, 33587199 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... futex resumed>) = 0 [pid 5066] <... ftruncate resumed>) = 0 [pid 5060] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... futex resumed>) = 0 [pid 5080] <... memfd_create resumed>) = 7 [pid 5076] <... close resumed>) = 0 [pid 5069] <... open resumed>) = 6 [pid 5066] <... futex resumed>) = 1 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... futex resumed>) = 0 [pid 5069] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5064] <... futex resumed>) = 0 [pid 5060] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... mmap resumed>) = 0x7f7ca852e000 [pid 5076] <... futex resumed>) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] mkdir(".", 0777 [pid 5069] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 1 [pid 5076] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5069] ftruncate(6, 33587199 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] sendfile(5, 6, NULL, 281474978811909 [pid 5064] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5069] <... ftruncate resumed>) = 0 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... write resumed>) = 4194304 [pid 5069] <... futex resumed>) = 1 [pid 5068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5068] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5079] munmap(0x7f7ca852e000, 4194304 [pid 5068] <... mprotect resumed>) = 0 [pid 5067] <... futex resumed>) = 0 [pid 5079] <... munmap resumed>) = 0 [pid 5068] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5081], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5081 [pid 5068] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 8 [pid 5079] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5079] ioctl(8, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 5081 attached [pid 5081] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5079] ioctl(8, LOOP_SET_FD, 7 [pid 5081] ftruncate(-1, 18446744073709551609 [pid 5079] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5081] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(8 [pid 5081] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 5081] <... futex resumed>) = 1 [pid 5079] close(7 [pid 5068] <... futex resumed>) = 0 [pid 5081] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] memfd_create("syzkaller", 0 [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 1 [pid 5081] <... memfd_create resumed>) = 7 [pid 5069] sendfile(5, 6, NULL, 281474978811909 [pid 5067] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... mount resumed>) = 0 [pid 5081] <... mmap resumed>) = 0x7f7ca852e000 [pid 5064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5064] <... mmap resumed>) = 0x7f7cb092e000 [pid 5076] chdir("." [ 45.257101][ T5076] reiserfs: enabling write barrier flush mode [ 45.278737][ T5076] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5064] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5080] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5076] <... chdir resumed>) = 0 [pid 5064] <... mprotect resumed>) = 0 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... futex resumed>) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] <... clone resumed>, parent_tid=[5082], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5082 [pid 5081] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5076] <... open resumed>) = 5 [pid 5073] <... futex resumed>) = 0 [pid 5067] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5064] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... mmap resumed>) = 0x7f7cb092e000 ./strace-static-x86_64: Process 5082 attached [pid 5076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] <... futex resumed>) = 0 [pid 5067] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5082] set_robust_list(0x7f7cb094e9e0, 24 [pid 5076] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... mprotect resumed>) = 0 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5076] <... open resumed>) = 6 [pid 5067] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5082] ftruncate(-1, 18446744073709551609 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... futex resumed>) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5082] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... clone resumed>, parent_tid=[5083], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5083 [pid 5082] <... futex resumed>) = 1 [pid 5076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] <... futex resumed>) = 0 [pid 5067] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5083 attached [pid 5082] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... close resumed>) = 0 [pid 5076] ftruncate(6, 33587199 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 0 [pid 5064] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5076] <... ftruncate resumed>) = 0 [pid 5059] <... futex resumed>) = 0 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5059] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] memfd_create("syzkaller", 0 [pid 5064] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... futex resumed>) = 0 [pid 5083] set_robust_list(0x7f7cb094e9e0, 24 [pid 5082] <... memfd_create resumed>) = 7 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... futex resumed>) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5083] ftruncate(-1, 18446744073709551609 [pid 5082] <... mmap resumed>) = 0x7f7ca852e000 [pid 5076] sendfile(5, 6, NULL, 281474978811909 [pid 5073] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... write resumed>) = 4194304 [pid 5073] <... futex resumed>) = 0 [pid 5083] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [pid 5080] munmap(0x7f7ca852e000, 4194304 [pid 5067] <... futex resumed>) = 0 [pid 5083] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... munmap resumed>) = 0 [pid 5079] <... open resumed>) = 7 [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] memfd_create("syzkaller", 0 [pid 5079] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5083] <... memfd_create resumed>) = 7 [pid 5080] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] <... futex resumed>) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... openat resumed>) = 8 [pid 5079] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mmap resumed>) = 0x7f7ca852e000 [pid 5080] ioctl(8, LOOP_SET_FD, 7 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] creat("./file0", 000 [pid 5059] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] ioctl(8, LOOP_CLR_FD [pid 5079] <... creat resumed>) = 8 [pid 5080] <... ioctl resumed>) = 0 [pid 5079] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5079] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5080] close(8 [pid 5083] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5082] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5081] <... write resumed>) = 4194304 [pid 5080] <... close resumed>) = 0 [pid 5061] <... sendfile resumed>) = 786432 [pid 5081] munmap(0x7f7ca852e000, 4194304 [pid 5080] close(7 [pid 5061] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... munmap resumed>) = 0 [pid 5073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5061] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 8 [pid 5073] <... futex resumed>) = 0 [pid 5081] ioctl(8, LOOP_SET_FD, 7 [pid 5073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... mmap resumed>) = 0x7f7cb092e000 [pid 5081] ioctl(8, LOOP_CLR_FD [pid 5073] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... ioctl resumed>) = 0 [pid 5073] <... mprotect resumed>) = 0 [pid 5073] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5084], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5084 [pid 5073] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5081] close(8) = 0 [pid 5081] close(7 [pid 5061] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] exit_group(0 [pid 5079] <... futex resumed>) = ? [pid 5059] <... exit_group resumed>) = ? [pid 5079] +++ exited with 0 +++ [pid 5061] <... futex resumed>) = ? [pid 5081] <... close resumed>) = 0 [pid 5061] +++ exited with 0 +++ [pid 5059] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- ./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5084] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5084] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, [pid 5084] <... futex resumed>) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5084] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] <... futex resumed>) = 0 [pid 5084] memfd_create("syzkaller", 0 [pid 5073] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] getdents64(3, [pid 5084] <... memfd_create resumed>) = 7 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./2/binderfs", [pid 5084] <... mmap resumed>) = 0x7f7ca852e000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./2/binderfs") = 0 [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5068] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5068] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5080] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5060] <... futex resumed>) = 0 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5060] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... write resumed>) = 4194304 [pid 5081] <... open resumed>) = 7 [pid 5081] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 0 [pid 5068] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 1 [pid 5081] creat("./file0", 000) = 8 [pid 5083] munmap(0x7f7ca852e000, 4194304 [pid 5080] <... open resumed>) = 7 [pid 5062] <... sendfile resumed>) = 983040 [pid 5081] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5081] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... munmap resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 8 [pid 5083] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5083] ioctl(8, LOOP_CLR_FD) = 0 [pid 5083] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5083] close(8) = 0 [pid 5083] close(7 [pid 5084] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5082] <... write resumed>) = 4194304 [pid 5080] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... sendfile resumed>) = 655360 [pid 5082] munmap(0x7f7ca852e000, 4194304 [pid 5080] <... futex resumed>) = 0 [pid 5070] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] exit_group(0 [pid 5060] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] <... munmap resumed>) = 0 [pid 5081] <... futex resumed>) = ? [pid 5080] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... futex resumed>) = ? [pid 5068] <... exit_group resumed>) = ? [pid 5060] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] +++ exited with 0 +++ [pid 5070] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5062] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = 1 [pid 5082] <... openat resumed>) = 8 [pid 5062] creat("./file0", 000 [pid 5060] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5062] <... creat resumed>) = 8 [pid 5002] <... umount2 resumed>) = 0 [pid 5062] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] ioctl(8, LOOP_SET_FD, 7 [pid 5062] <... futex resumed>) = 0 [pid 5060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] exit_group(0 [pid 5082] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5080] <... futex resumed>) = ? [pid 5062] <... futex resumed>) = ? [pid 5060] <... exit_group resumed>) = ? [pid 5001] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] ioctl(8, LOOP_CLR_FD [pid 5080] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 5060] +++ exited with 0 +++ [pid 5082] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5060, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] ioctl(8, LOOP_SET_FD, 7 [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] close(8 [pid 5001] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5082] <... close resumed>) = 0 [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] close(7 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(3, [pid 5002] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./2/file0") = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5001] lstat("./2/binderfs", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 5001] unlink("./2/binderfs" [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] <... close resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./2" [pid 4999] lstat("./2/binderfs", [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] mkdir("./3", 0777 [pid 4999] unlink("./2/binderfs" [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5085] chdir("./3") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5083] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5085] <... mmap resumed>) = 0x7f7cb894f000 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5067] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5086], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5086 [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... open resumed>) = 7 [pid 5082] <... close resumed>) = 0 [pid 5083] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5086] getuid() = 0 [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [pid 5086] memfd_create("syzkaller", 0) = 3 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5082] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5082] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5083] creat("./file0", 000 [pid 5067] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... creat resumed>) = 8 [pid 5083] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5084] <... write resumed>) = 4194304 [pid 5083] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 0 [pid 5082] <... open resumed>) = 7 [pid 5082] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5064] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] munmap(0x7f7ca852e000, 4194304 [pid 5069] <... sendfile resumed>) = 1048576 [pid 5066] <... sendfile resumed>) = 1310720 [pid 5084] <... munmap resumed>) = 0 [pid 5069] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] creat("./file0", 000 [pid 5069] <... futex resumed>) = 0 [pid 5067] exit_group(0 [pid 5066] <... futex resumed>) = 0 [pid 5069] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... futex resumed>) = ? [pid 5069] <... futex resumed>) = ? [pid 5067] <... exit_group resumed>) = ? [pid 5066] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5082] <... creat resumed>) = 8 [pid 5067] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 8 [pid 5084] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5084] ioctl(8, LOOP_CLR_FD) = 0 [pid 5082] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5084] ioctl(8, LOOP_SET_FD, 7 [pid 5082] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5084] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] exit_group(0 [pid 5084] close(8 [pid 5082] <... futex resumed>) = ? [pid 5066] <... futex resumed>) = ? [pid 5064] <... exit_group resumed>) = ? [pid 5001] lstat("./2/file0", [pid 5000] <... restart_syscall resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5082] +++ exited with 0 +++ [pid 5066] +++ exited with 0 +++ [pid 5064] +++ exited with 0 +++ [pid 5084] close(7 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 4998] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(4, [pid 5000] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 4998] fstat(3, [pid 5001] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(3, [pid 4998] getdents64(3, [pid 5001] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5001] close(4) = 0 [pid 5000] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./2/file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5000] lstat("./2/binderfs", [pid 4998] lstat("./2/binderfs", [pid 5001] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5000] unlink("./2/binderfs" [pid 4998] unlink("./2/binderfs" [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5001] close(3 [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5001] rmdir("./2" [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 5001] mkdir("./3", 0777 [pid 4999] lstat("./2/file0", [pid 5084] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 4 [pid 5001] close(3 [pid 4999] fstat(4, [pid 5084] <... open resumed>) = 7 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5001] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5087 [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5086] <... write resumed>) = 4194304 [pid 4999] close(4 [pid 5086] munmap(0x7f7cb054f000, 4194304 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./2/file0") = 0 [pid 4999] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./2" [pid 5086] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5087 attached [pid 5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] mkdir("./3", 0777 [pid 5087] set_robust_list(0x55555710d5e0, 24 [pid 5086] <... openat resumed>) = 4 [pid 5084] <... futex resumed>) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5084] creat("./file0", 000 [pid 5073] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... mkdir resumed>) = 0 [pid 5087] chdir("./3" [pid 5084] <... creat resumed>) = 8 [pid 5073] <... futex resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5084] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... ioctl resumed>) = 0 [pid 5084] <... futex resumed>) = 0 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... umount2 resumed>) = 0 [pid 5087] <... prctl resumed>) = 0 [pid 5086] close(3 [pid 5084] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... openat resumed>) = 3 [pid 5087] setpgid(0, 0 [pid 5086] <... close resumed>) = 0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5087] <... setpgid resumed>) = 0 [pid 5086] mkdir("./file0", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] <... mkdir resumed>) = 0 [pid 5000] lstat("./2/file0", [pid 4999] close(3 [pid 5087] <... openat resumed>) = 3 [pid 5086] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] write(3, "1000", 4 [pid 4999] <... close resumed>) = 0 [pid 5087] <... write resumed>) = 4 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... close resumed>) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5000] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5089 [pid 5087] <... symlink resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... sendfile resumed>) = 1179648 [pid 5000] fstat(4, [pid 4998] <... umount2 resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5076] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... futex resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... mmap resumed>) = 0x7f7cb894f000 [pid 5076] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5073] exit_group(0 [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] lstat("./2/file0", ./strace-static-x86_64: Process 5089 attached [pid 5087] <... mprotect resumed>) = 0 [pid 5084] <... futex resumed>) = ? [pid 5076] <... futex resumed>) = ? [pid 5073] <... exit_group resumed>) = ? [pid 5000] getdents64(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] set_robust_list(0x55555710d5e0, 24 [pid 5087] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] +++ exited with 0 +++ [pid 5076] +++ exited with 0 +++ [pid 5073] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... set_robust_list resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5000] close(4 [pid 5089] chdir("./3" [pid 5087] <... clone resumed>, parent_tid=[5090], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5090 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] rmdir("./2/file0" [pid 4998] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] <... futex resumed>) = 0 [pid 5089] <... chdir resumed>) = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... rmdir resumed>) = 0 [pid 5089] <... prctl resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5000] getdents64(3, ./strace-static-x86_64: Process 5090 attached [pid 5089] setpgid(0, 0 [pid 4998] fstat(4, [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5090] set_robust_list(0x7f7cb896f9e0, 24 [pid 5089] <... setpgid resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1000", 4) = 4 [ 45.923239][ T5086] loop4: detected capacity change from 0 to 8192 [ 45.947080][ T5086] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5089] close(3) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5089] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5089] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5091], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5091 [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5091] getuid() = 0 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 0 [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] <... futex resumed>) = 1 [pid 5091] memfd_create("syzkaller", 0) = 3 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5003] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5090] getuid( [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./2" [pid 5090] <... getuid resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5003] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] unlink("./2/binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5000] mkdir("./3", 0777 [pid 4998] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5090] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] close(4 [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5090] memfd_create("syzkaller", 0 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] rmdir("./2/file0" [pid 5090] <... memfd_create resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5090] <... mmap resumed>) = 0x7f7cb054f000 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 5000] close(3) = 0 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [ 45.971605][ T5086] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 45.981981][ T5086] REISERFS (device loop4): using ordered data mode [ 45.989838][ T5086] reiserfs: using flush barriers [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5092 [pid 4998] rmdir("./2"./strace-static-x86_64: Process 5092 attached [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 4998] <... rmdir resumed>) = 0 [pid 5092] set_robust_list(0x55555710d5e0, 24 [pid 4998] mkdir("./3", 0777 [pid 5092] <... set_robust_list resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5092] chdir("./3" [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5092] <... chdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5092] <... prctl resumed>) = 0 [pid 5092] setpgid(0, 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5092] <... setpgid resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] close(3 [pid 5092] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5092] write(3, "1000", 4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... write resumed>) = 4 [pid 5092] close(3./strace-static-x86_64: Process 5093 attached ) = 0 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5093 [pid 5092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5093] set_robust_list(0x55555710d5e0, 24 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5093] chdir("./3" [pid 5092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5093] <... chdir resumed>) = 0 [pid 5092] <... mmap resumed>) = 0x7f7cb894f000 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5093] <... prctl resumed>) = 0 [pid 5093] setpgid(0, 0 [pid 5092] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5093] <... setpgid resumed>) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5092] <... clone resumed>, parent_tid=[5094], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5094 [pid 5093] <... openat resumed>) = 3 [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] write(3, "1000", 4 [pid 5092] <... futex resumed>) = 0 [pid 5093] <... write resumed>) = 4 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] close(3) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5093] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5093] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5095], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5095 [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 46.010230][ T5086] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.031809][ T5086] REISERFS (device loop4): checking transaction log (loop4) [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x7f7cb896f9e0, 24) = 0 ./strace-static-x86_64: Process 5095 attached [pid 5094] getuid( [pid 5095] set_robust_list(0x7f7cb896f9e0, 24 [pid 5094] <... getuid resumed>) = 0 [pid 5091] <... write resumed>) = 4194304 [pid 5003] <... umount2 resumed>) = 0 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] munmap(0x7f7cb054f000, 4194304 [pid 5095] getuid( [pid 5094] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5095] <... getuid resumed>) = 0 [pid 5094] memfd_create("syzkaller", 0 [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... munmap resumed>) = 0 [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5091] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5090] <... write resumed>) = 4194304 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] <... openat resumed>) = 4 [pid 5090] munmap(0x7f7cb054f000, 4194304 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5095] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5090] <... munmap resumed>) = 0 [pid 5003] lstat("./2/file0", [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... memfd_create resumed>) = 3 [pid 5093] <... futex resumed>) = 0 [pid 5086] <... mount resumed>) = 0 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5095] memfd_create("syzkaller", 0 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] <... memfd_create resumed>) = 3 [pid 5091] <... ioctl resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5091] close(3 [pid 5090] <... openat resumed>) = 4 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] <... mmap resumed>) = 0x7f7cb054f000 [pid 5091] <... close resumed>) = 0 [pid 5090] ioctl(4, LOOP_SET_FD, 3 [pid 5086] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5091] mkdir("./file0", 0777) = 0 [pid 5091] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5090] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5086] chdir("./file0" [pid 5003] fstat(4, [pid 5086] <... chdir resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] ioctl(4, LOOP_CLR_FD [pid 5003] getdents64(4, [pid 5086] <... ioctl resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5086] close(4 [pid 5003] getdents64(4, [ 46.098782][ T5086] REISERFS (device loop4): Using r5 hash to sort names [ 46.101217][ T5091] loop1: detected capacity change from 0 to 8192 [ 46.118459][ T5090] loop3: detected capacity change from 0 to 8192 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5090] close(3 [pid 5086] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5090] <... close resumed>) = 0 [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] close(4 [pid 5090] mkdir("./file0", 0777 [pid 5086] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5090] <... mkdir resumed>) = 0 [pid 5086] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] rmdir("./2/file0" [pid 5090] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5086] mkdir(".", 0777 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] getdents64(3, [pid 5086] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5003] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5086] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5003] close(3) = 0 [pid 5003] rmdir("./2") = 0 [pid 5003] mkdir("./3", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 46.145418][ T5091] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.169098][ T5091] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 46.170982][ T5086] reiserfs: enabling write barrier flush mode [ 46.178359][ T5091] REISERFS (device loop1): using ordered data mode [ 46.191297][ T5091] reiserfs: using flush barriers [pid 5003] close(3 [pid 5095] <... write resumed>) = 4194304 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5098 [pid 5095] munmap(0x7f7cb054f000, 4194304./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x55555710d5e0, 24 [pid 5095] <... munmap resumed>) = 0 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5098] chdir("./3") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5098] setpgid(0, 0 [pid 5095] <... openat resumed>) = 4 [pid 5098] <... setpgid resumed>) = 0 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 46.197166][ T5091] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.213683][ T5090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.213823][ T5091] REISERFS (device loop1): checking transaction log (loop1) [ 46.232900][ T5095] loop0: detected capacity change from 0 to 8192 [ 46.234623][ T5086] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5095] <... ioctl resumed>) = 0 [pid 5094] <... write resumed>) = 4194304 [pid 5086] <... mount resumed>) = 0 [pid 5098] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5086] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5098] <... mprotect resumed>) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5098] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5086] chdir(".") = 0 [pid 5098] <... clone resumed>, parent_tid=[5099], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5099 [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 0 [pid 5086] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = 0 [pid 5086] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] munmap(0x7f7cb054f000, 4194304 [pid 5086] <... open resumed>) = 5 [pid 5094] <... munmap resumed>) = 0 [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5086] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... futex resumed>) = 0 [pid 5086] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... open resumed>) = 6 [pid 5095] close(3 [pid 5094] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... close resumed>) = 0 [pid 5094] <... openat resumed>) = 4 [pid 5086] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5095] mkdir("./file0", 0777 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5086] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... mkdir resumed>) = 0 [pid 5091] <... mount resumed>) = 0 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5091] chdir("./file0") = 0 [pid 5091] ioctl(4, LOOP_CLR_FD) = 0 [ 46.250461][ T5090] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 46.259875][ T5090] REISERFS (device loop3): using ordered data mode [ 46.259919][ T5091] REISERFS (device loop1): Using r5 hash to sort names [ 46.273400][ T5090] reiserfs: using flush barriers [ 46.274915][ T5094] loop2: detected capacity change from 0 to 8192 [pid 5091] close(4./strace-static-x86_64: Process 5099 attached [pid 5094] <... ioctl resumed>) = 0 [pid 5091] <... close resumed>) = 0 [pid 5086] ftruncate(6, 33587199 [pid 5085] <... futex resumed>) = 0 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5089] <... futex resumed>) = 0 [pid 5091] mkdir(".", 0777 [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5089] <... futex resumed>) = 0 [pid 5091] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] set_robust_list(0x7f7cb896f9e0, 24 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5094] close(3 [pid 5086] <... ftruncate resumed>) = 0 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] <... set_robust_list resumed>) = 0 [pid 5098] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... close resumed>) = 0 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] getuid() = 0 [pid 5099] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... futex resumed>) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb892e000 [pid 5098] mprotect(0x7f7cb892f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5098] clone(child_stack=0x7f7cb894e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5101], tls=0x7f7cb894e700, child_tidptr=0x7f7cb894e9d0) = 5101 [pid 5098] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x7f7cb894e9e0, 24) = 0 [pid 5094] mkdir("./file0", 0777 [pid 5085] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] memfd_create("syzkaller", 0 [pid 5094] <... mkdir resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5086] sendfile(5, 6, NULL, 281474978811909 [pid 5085] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... memfd_create resumed>) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb052e000 [ 46.286635][ T5090] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.290862][ T5091] reiserfs: enabling write barrier flush mode [ 46.303773][ T5090] REISERFS (device loop3): checking transaction log (loop3) [ 46.317762][ T5090] REISERFS (device loop3): Using r5 hash to sort names [ 46.329981][ T5095] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5094] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5090] <... mount resumed>) = 0 [pid 5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5090] chdir("./file0") = 0 [pid 5090] ioctl(4, LOOP_CLR_FD) = 0 [pid 5090] close(4) = 0 [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5090] mkdir(".", 0777 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5090] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5090] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5085] <... mmap resumed>) = 0x7f7cb092e000 [pid 5085] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5103 attached , parent_tid=[5103], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5103 [pid 5085] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5103] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5103] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5103] <... futex resumed>) = 1 [pid 5103] memfd_create("syzkaller", 0) = 7 [ 46.344248][ T5091] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 46.359620][ T5094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.370553][ T5095] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 46.383697][ T5090] reiserfs: enabling write barrier flush mode [ 46.383741][ T5095] REISERFS (device loop0): using ordered data mode [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5091] <... mount resumed>) = 0 [ 46.403283][ T5090] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 46.412558][ T5095] reiserfs: using flush barriers [ 46.418552][ T5094] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 46.421269][ T5095] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.427984][ T5094] REISERFS (device loop2): using ordered data mode [pid 5091] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5091] chdir(".") = 0 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5089] <... futex resumed>) = 0 [pid 5091] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] <... mount resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5090] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... open resumed>) = 5 [pid 5090] <... openat resumed>) = 4 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] chdir("." [pid 5094] <... mount resumed>) = 0 [pid 5091] <... futex resumed>) = 1 [pid 5090] <... chdir resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5091] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [ 46.450698][ T5094] reiserfs: using flush barriers [ 46.457621][ T5094] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.475113][ T5094] REISERFS (device loop2): checking transaction log (loop2) [ 46.484584][ T5094] REISERFS (device loop2): Using r5 hash to sort names [ 46.492597][ T5095] REISERFS (device loop0): checking transaction log (loop0) [pid 5103] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5101] <... write resumed>) = 4194304 [pid 5094] <... openat resumed>) = 3 [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] <... futex resumed>) = 1 [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... write resumed>) = 4194304 [pid 5101] munmap(0x7f7cb052e000, 4194304 [pid 5095] <... mount resumed>) = 0 [pid 5094] chdir("./file0" [pid 5091] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5090] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5103] munmap(0x7f7ca852e000, 4194304 [pid 5101] <... munmap resumed>) = 0 [pid 5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5094] <... chdir resumed>) = 0 [pid 5091] <... open resumed>) = 6 [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... munmap resumed>) = 0 [pid 5101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5095] <... openat resumed>) = 3 [pid 5094] ioctl(4, LOOP_CLR_FD [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 1 [pid 5103] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5101] <... openat resumed>) = 4 [pid 5095] chdir("./file0" [pid 5094] <... ioctl resumed>) = 0 [pid 5091] <... futex resumed>) = 0 [pid 5090] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... openat resumed>) = 8 [ 46.501116][ T5095] REISERFS (device loop0): Using r5 hash to sort names [pid 5101] ioctl(4, LOOP_SET_FD, 3 [pid 5095] <... chdir resumed>) = 0 [pid 5094] close(4 [pid 5091] ftruncate(6, 33587199 [pid 5089] <... futex resumed>) = 0 [pid 5103] ioctl(8, LOOP_SET_FD, 7 [pid 5090] <... open resumed>) = 5 [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5090] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 5090] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5101] <... ioctl resumed>) = 0 [pid 5095] ioctl(4, LOOP_CLR_FD [pid 5094] <... close resumed>) = 0 [pid 5090] <... open resumed>) = 6 [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] ioctl(8, LOOP_CLR_FD [pid 5101] close(3 [pid 5095] <... ioctl resumed>) = 0 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... ioctl resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5095] close(4 [pid 5094] <... futex resumed>) = 1 [pid 5101] mkdir("./file0", 0777 [pid 5095] <... close resumed>) = 0 [pid 5094] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] <... mkdir resumed>) = 0 [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] ioctl(8, LOOP_SET_FD, 7 [pid 5095] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5103] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5095] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] <... futex resumed>) = 0 [pid 5103] close(8) = 0 [pid 5103] close(7 [pid 5101] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... ftruncate resumed>) = 0 [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = 1 [pid 5095] mkdir(".", 0777 [pid 5094] <... futex resumed>) = 0 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5092] <... futex resumed>) = 1 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5095] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5094] mkdir(".", 0777 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] <... futex resumed>) = 1 [pid 5090] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... futex resumed>) = 0 [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5094] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5091] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] ftruncate(6, 33587199 [pid 5089] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5091] sendfile(5, 6, NULL, 281474978811909 [ 46.539883][ T5101] loop5: detected capacity change from 0 to 8192 [ 46.570981][ T5095] reiserfs: enabling write barrier flush mode [ 46.578715][ T5094] reiserfs: enabling write barrier flush mode [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... ftruncate resumed>) = 0 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] <... futex resumed>) = 0 [pid 5087] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] sendfile(5, 6, NULL, 281474978811909 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... mount resumed>) = 0 [pid 5089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5089] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5089] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [ 46.588509][ T5095] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.598574][ T5101] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.621489][ T5094] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 46.628580][ T5101] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5103] <... futex resumed>) = 1 [pid 5089] <... mprotect resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5095] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5094] <... mount resumed>) = 0 [pid 5089] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5085] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5085] <... futex resumed>) = 0 [pid 5094] <... openat resumed>) = 4 [pid 5089] <... clone resumed>, parent_tid=[5105], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5105 [pid 5085] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] chdir("." [pid 5089] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... chdir resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5105 attached [pid 5094] <... open resumed>) = 5 [pid 5092] <... futex resumed>) = 0 [pid 5105] set_robust_list(0x7f7cb094e9e0, 24 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] <... set_robust_list resumed>) = 0 [pid 5094] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] ftruncate(-1, 18446744073709551609 [pid 5094] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = 1 [pid 5095] <... openat resumed>) = 4 [pid 5094] <... open resumed>) = 6 [pid 5089] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5105] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [ 46.642779][ T5101] REISERFS (device loop5): using ordered data mode [ 46.649865][ T5101] reiserfs: using flush barriers [ 46.655559][ T5101] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5105] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5095] chdir(".") = 0 [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x7f7cb092e000 [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5087] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5095] <... open resumed>) = 5 [pid 5093] <... futex resumed>) = 0 [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... open resumed>) = 6 [pid 5093] <... futex resumed>) = 0 [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5093] <... futex resumed>) = 0 [pid 5095] ftruncate(6, 33587199 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... mprotect resumed>) = 0 [pid 5095] <... ftruncate resumed>) = 0 [pid 5094] ftruncate(6, 33587199 [pid 5087] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5106 attached [pid 5087] <... clone resumed>, parent_tid=[5106], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5106 [pid 5095] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5087] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] sendfile(5, 6, NULL, 281474978811909 [pid 5093] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = 0 [pid 5106] set_robust_list(0x7f7cb094e9e0, 24 [pid 5093] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] <... set_robust_list resumed>) = 0 [pid 5106] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5106] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] memfd_create("syzkaller", 0 [pid 5094] <... ftruncate resumed>) = 0 [pid 5087] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] <... memfd_create resumed>) = 7 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5094] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5092] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5094] sendfile(5, 6, NULL, 281474978811909 [pid 5092] <... futex resumed>) = 0 [pid 5103] <... open resumed>) = 7 [pid 5092] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5105] <... mmap resumed>) = 0x7f7ca852e000 [pid 5085] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] creat("./file0", 000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... creat resumed>) = 8 [pid 5103] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5103] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = 0 [pid 5106] memfd_create("syzkaller", 0) = 7 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [ 46.687459][ T5101] REISERFS (device loop5): checking transaction log (loop5) [pid 5105] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5093] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5093] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5086] <... sendfile resumed>) = 655360 [pid 5093] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5093] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5107], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5107 [pid 5093] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5092] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5092] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5086] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... mprotect resumed>) = 0 [pid 5086] <... futex resumed>) = 0 [pid 5085] exit_group(0 [pid 5092] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5085] <... exit_group resumed>) = ? [pid 5103] <... futex resumed>) = ? [pid 5103] +++ exited with 0 +++ [pid 5092] <... clone resumed>, parent_tid=[5108], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5108 [pid 5086] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ [pid 5092] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5092] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5108 attached [pid 5101] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5107] ftruncate(-1, 18446744073709551609 [pid 5108] set_robust_list(0x7f7cb094e9e0, 24 [pid 5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5107] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 0 [pid 5093] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5107] <... futex resumed>) = 1 [pid 5107] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 3 [pid 5107] <... memfd_create resumed>) = 7 [pid 5002] fstat(3, [pid 5108] <... set_robust_list resumed>) = 0 [pid 5101] <... openat resumed>) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./3/binderfs" [pid 5101] chdir("./file0" [pid 5108] ftruncate(-1, 18446744073709551609 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... chdir resumed>) = 0 [pid 5108] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] ioctl(4, LOOP_CLR_FD [pid 5108] <... futex resumed>) = 1 [pid 5101] <... ioctl resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5108] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] close(4 [pid 5092] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... close resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [ 46.756075][ T5101] REISERFS (device loop5): Using r5 hash to sort names [pid 5108] memfd_create("syzkaller", 0 [pid 5101] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5108] <... memfd_create resumed>) = 7 [pid 5101] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5101] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... mmap resumed>) = 0x7f7ca852e000 [pid 5099] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5106] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5099] mkdir(".", 0777 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5099] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5105] <... write resumed>) = 4194304 [pid 5105] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 5105] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5105] ioctl(8, LOOP_CLR_FD) = 0 [pid 5105] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5105] close(8) = 0 [pid 5105] close(7 [ 46.845839][ T5099] reiserfs: enabling write barrier flush mode [ 46.874867][ T5099] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5107] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5108] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5099] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5099] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5099] chdir("." [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... chdir resumed>) = 0 [pid 5099] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./3/file0", [pid 5099] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5098] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 4 [pid 5098] <... futex resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] <... open resumed>) = 5 [pid 5099] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5099] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5098] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, [pid 5099] <... open resumed>) = 6 [pid 5098] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 0 [pid 5098] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] ftruncate(6, 33587199 [pid 5098] <... futex resumed>) = 0 [pid 5099] <... ftruncate resumed>) = 0 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 5099] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5099] sendfile(5, 6, NULL, 281474978811909 [pid 5098] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] rmdir("./3/file0") = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5098] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./3") = 0 [pid 5105] <... close resumed>) = 0 [pid 5002] mkdir("./4", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5105] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5109 [pid 5105] <... futex resumed>) = 1 [pid 5105] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... futex resumed>) = 0 [pid 5089] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 5109 attached [pid 5106] <... write resumed>) = 4194304 [pid 5105] <... futex resumed>) = 0 [pid 5089] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] set_robust_list(0x55555710d5e0, 24 [pid 5108] <... write resumed>) = 4194304 [pid 5107] <... write resumed>) = 4194304 [pid 5106] munmap(0x7f7ca852e000, 4194304 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5108] munmap(0x7f7ca852e000, 4194304 [pid 5106] <... munmap resumed>) = 0 [pid 5109] chdir("./4" [pid 5108] <... munmap resumed>) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5109] <... chdir resumed>) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5106] <... openat resumed>) = 8 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5108] <... openat resumed>) = 8 [pid 5106] ioctl(8, LOOP_SET_FD, 7 [pid 5109] <... prctl resumed>) = 0 [pid 5109] setpgid(0, 0 [pid 5108] ioctl(8, LOOP_SET_FD, 7 [pid 5106] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5109] <... setpgid resumed>) = 0 [pid 5108] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5106] ioctl(8, LOOP_CLR_FD [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5108] ioctl(8, LOOP_CLR_FD [pid 5106] <... ioctl resumed>) = 0 [pid 5109] <... openat resumed>) = 3 [pid 5108] <... ioctl resumed>) = 0 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5109] <... close resumed>) = 0 [pid 5098] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] symlink("/dev/binderfs", "./binderfs" [pid 5108] ioctl(8, LOOP_SET_FD, 7 [pid 5106] ioctl(8, LOOP_SET_FD, 7 [pid 5101] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5109] <... symlink resumed>) = 0 [pid 5108] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5106] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5101] ftruncate(-1, 18446744073709551609 [pid 5098] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] close(8 [pid 5106] close(8 [pid 5101] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5109] <... futex resumed>) = 0 [pid 5108] <... close resumed>) = 0 [pid 5107] munmap(0x7f7ca852e000, 4194304 [pid 5105] <... open resumed>) = 7 [pid 5105] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] <... munmap resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 8 [pid 5107] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5107] ioctl(8, LOOP_CLR_FD) = 0 [pid 5107] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5107] close(8) = 0 [pid 5107] close(7 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] close(7 [pid 5106] <... close resumed>) = 0 [pid 5101] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... sendfile resumed>) = 851968 [pid 5089] <... futex resumed>) = 0 [pid 5109] <... mmap resumed>) = 0x7f7cb894f000 [pid 5101] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5106] close(7 [pid 5101] memfd_create("syzkaller", 0 [pid 5098] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 1 [pid 5109] <... mprotect resumed>) = 0 [pid 5101] <... memfd_create resumed>) = 7 [pid 5098] <... futex resumed>) = 0 [pid 5091] creat("./file0", 000) = 8 [pid 5091] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5098] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5089] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... mmap resumed>) = 0x7f7ca852e000 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] <... clone resumed>, parent_tid=[5110], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5110 [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] exit_group(0 [pid 5109] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = ? [pid 5091] <... futex resumed>) = ? [pid 5089] <... exit_group resumed>) = ? [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] +++ exited with 0 +++ [pid 5091] +++ exited with 0 +++ [pid 5089] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5110 attached [pid 5107] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5110] set_robust_list(0x7f7cb896f9e0, 24 [pid 4999] fstat(3, [pid 5110] <... set_robust_list resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] getuid( [pid 4999] getdents64(3, [pid 5110] <... getuid resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... close resumed>) = 0 [pid 5106] <... close resumed>) = 0 [pid 4999] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... futex resumed>) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5108] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 4999] lstat("./3/binderfs", [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] <... futex resumed>) = 0 [pid 5092] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./3/binderfs" [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5110] memfd_create("syzkaller", 0 [pid 5092] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... unlink resumed>) = 0 [pid 5106] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5110] <... memfd_create resumed>) = 3 [pid 5101] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5092] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] <... open resumed>) = 7 [pid 5094] <... sendfile resumed>) = 786432 [pid 5110] <... mmap resumed>) = 0x7f7cb054f000 [pid 5108] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5093] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... futex resumed>) = 0 [pid 5094] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] creat("./file0", 000) = 8 [pid 5108] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5108] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] exit_group(0 [pid 5108] <... futex resumed>) = ? [pid 5094] <... futex resumed>) = ? [pid 5092] <... exit_group resumed>) = ? [pid 5094] +++ exited with 0 +++ [pid 5108] +++ exited with 0 +++ [pid 5092] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5000] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5106] <... open resumed>) = 7 [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] unlink("./3/binderfs" [pid 5107] <... open resumed>) = 7 [pid 5087] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... unlink resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x7f7ca890d000 [pid 5106] <... futex resumed>) = 0 [pid 5107] creat("./file0", 000 [pid 5093] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE [pid 5107] <... creat resumed>) = 8 [pid 5106] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... futex resumed>) = 0 [pid 5107] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... mprotect resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5107] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5111 attached [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5101] <... write resumed>) = 4194304 [pid 5111] set_robust_list(0x7f7ca892d9e0, 24 [pid 5090] <... sendfile resumed>) = 1114112 [pid 5087] <... clone resumed>, parent_tid=[5111], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5111 [pid 5111] <... set_robust_list resumed>) = 0 [pid 5090] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] creat("./file0", 000 [pid 5087] <... futex resumed>) = 0 [pid 5087] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] <... creat resumed>) = 8 [pid 5111] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5111] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] exit_group(0 [pid 5111] <... futex resumed>) = ? [pid 5106] <... futex resumed>) = ? [pid 5090] <... futex resumed>) = ? [pid 5087] <... exit_group resumed>) = ? [pid 5111] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ [pid 5090] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5101] munmap(0x7f7ca852e000, 4194304 [pid 5095] <... sendfile resumed>) = 1048576 [pid 5001] getdents64(3, [pid 5095] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] exit_group(0 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5107] <... futex resumed>) = ? [pid 5101] <... munmap resumed>) = 0 [pid 5095] <... futex resumed>) = ? [pid 5093] <... exit_group resumed>) = ? [pid 5001] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] +++ exited with 0 +++ [pid 5101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5095] +++ exited with 0 +++ [pid 5093] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... openat resumed>) = 8 [pid 5001] lstat("./3/binderfs", [pid 5101] ioctl(8, LOOP_SET_FD, 7 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5101] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5001] unlink("./3/binderfs" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5101] ioctl(8, LOOP_CLR_FD [pid 5001] <... unlink resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5101] <... ioctl resumed>) = 0 [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 4998] <... openat resumed>) = 3 [pid 5101] close(8 [pid 4998] fstat(3, [pid 5101] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5101] close(7 [pid 4998] getdents64(3, [pid 4999] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./3/file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] unlink("./3/binderfs" [pid 4999] getdents64(3, [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./3") = 0 [pid 4999] mkdir("./4", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5112 ./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5112] chdir("./4") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5110] <... write resumed>) = 4194304 [pid 5112] <... mprotect resumed>) = 0 [pid 5112] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5110] munmap(0x7f7cb054f000, 4194304 [pid 5101] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5113 attached [pid 5110] <... munmap resumed>) = 0 [pid 5101] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] lstat("./3/file0", [pid 5112] <... clone resumed>, parent_tid=[5113], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5113 [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5112] <... futex resumed>) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5113] set_robust_list(0x7f7cb896f9e0, 24 [pid 5101] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5098] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] <... set_robust_list resumed>) = 0 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... openat resumed>) = 4 [pid 5098] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5113] getuid( [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5098] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5113] <... getuid resumed>) = 0 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 4 [pid 5113] <... futex resumed>) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5000] fstat(4, [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5000] getdents64(4, [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] memfd_create("syzkaller", 0 [pid 5101] <... open resumed>) = 7 [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5113] <... memfd_create resumed>) = 3 [pid 5101] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] getdents64(4, [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5098] <... futex resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5101] <... futex resumed>) = 1 [pid 5098] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] close(4 [pid 5113] <... mmap resumed>) = 0x7f7cb054f000 [pid 5101] creat("./file0", 000 [pid 5098] <... futex resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5099] <... sendfile resumed>) = 917504 [pid 5098] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] rmdir("./3/file0" [pid 5099] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... rmdir resumed>) = 0 [pid 5101] <... creat resumed>) = 8 [pid 5099] <... futex resumed>) = 0 [pid 5000] getdents64(3, [pid 5099] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] <... ioctl resumed>) = 0 [pid 5110] close(3 [pid 5101] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5101] <... futex resumed>) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5000] close(3 [pid 5101] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] exit_group(0 [pid 5000] <... close resumed>) = 0 [pid 5101] <... futex resumed>) = ? [pid 5099] <... futex resumed>) = ? [pid 5098] <... exit_group resumed>) = ? [pid 5000] rmdir("./3" [pid 5099] +++ exited with 0 +++ [pid 5110] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./4", 0777 [pid 5110] mkdir("./file0", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5110] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5110] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5115 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] +++ exited with 0 +++ [pid 5098] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./3/file0" [pid 5003] <... openat resumed>) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] fstat(3, [pid 5001] getdents64(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 47.363856][ T5110] loop4: detected capacity change from 0 to 8192 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5115 attached [pid 5003] getdents64(3, [pid 5001] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 5115] set_robust_list(0x55555710d5e0, 24 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5001] <... close resumed>) = 0 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] <... set_robust_list resumed>) = 0 [pid 5003] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5115] chdir("./4" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] rmdir("./3" [pid 4998] lstat("./3/file0", [pid 5115] <... chdir resumed>) = 0 [pid 5003] lstat("./3/binderfs", [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5115] <... prctl resumed>) = 0 [pid 5003] unlink("./3/binderfs" [pid 5001] mkdir("./4", 0777 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] setpgid(0, 0 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5115] <... setpgid resumed>) = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] fstat(4, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5116 [pid 5115] write(3, "1000", 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5115] <... write resumed>) = 4 [pid 4998] getdents64(4, [pid 5115] close(3) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 4998] getdents64(4, [pid 5115] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] close(4 [pid 5115] <... futex resumed>) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... close resumed>) = 0 [pid 5115] <... mmap resumed>) = 0x7f7cb894f000 [pid 4998] rmdir("./3/file0") = 0 [pid 4998] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./3") = 0 [pid 5115] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] mkdir("./4", 0777) = 0 [pid 5115] <... clone resumed>, parent_tid=[5117], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5117 [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5118 ./strace-static-x86_64: Process 5117 attached [ 47.409132][ T5110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.431929][ T5110] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 47.443085][ T5110] REISERFS (device loop4): using ordered data mode [ 47.449994][ T5110] reiserfs: using flush barriers ./strace-static-x86_64: Process 5118 attached [pid 5117] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5118] set_robust_list(0x55555710d5e0, 24 [pid 5117] getuid() = 0 [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5117] <... futex resumed>) = 1 [pid 5117] memfd_create("syzkaller", 0 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5118] chdir("./4") = 0 [pid 5117] <... memfd_create resumed>) = 3 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] setpgid(0, 0 [pid 5117] <... mmap resumed>) = 0x7f7cb054f000 [pid 5118] <... setpgid resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5116 attached ) = 0 [pid 5113] <... write resumed>) = 4194304 [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5118] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5119], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5119 [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] set_robust_list(0x55555710d5e0, 24 [pid 5113] munmap(0x7f7cb054f000, 4194304 [pid 5116] <... set_robust_list resumed>) = 0 [pid 5113] <... munmap resumed>) = 0 [pid 5116] chdir("./4" [ 47.456577][ T5110] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.493805][ T5110] REISERFS (device loop4): checking transaction log (loop4) [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5116] <... chdir resumed>) = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5113] <... openat resumed>) = 4 [pid 5116] <... prctl resumed>) = 0 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5116] setpgid(0, 0./strace-static-x86_64: Process 5119 attached [pid 5119] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5119] getuid() = 0 [pid 5116] <... setpgid resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1000", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5116] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5116] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5113] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5120 attached [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] close(3 [pid 5110] <... mount resumed>) = 0 [pid 5120] set_robust_list(0x7f7cb896f9e0, 24 [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5116] <... clone resumed>, parent_tid=[5120], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5120 [pid 5113] <... close resumed>) = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] mkdir("./file0", 0777 [pid 5110] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = 0 [pid 5120] getuid( [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... futex resumed>) = 0 [pid 5116] <... futex resumed>) = 0 [pid 5110] chdir("./file0" [pid 5120] <... getuid resumed>) = 0 [pid 5119] memfd_create("syzkaller", 0 [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... mkdir resumed>) = 0 [pid 5110] <... chdir resumed>) = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... memfd_create resumed>) = 3 [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5110] ioctl(4, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] <... futex resumed>) = 0 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... ioctl resumed>) = 0 [pid 5003] lstat("./3/file0", [pid 5120] memfd_create("syzkaller", 0 [pid 5119] <... mmap resumed>) = 0x7f7cb054f000 [pid 5116] <... futex resumed>) = 0 [pid 5110] close(4 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5120] <... memfd_create resumed>) = 3 [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5110] <... close resumed>) = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] <... mmap resumed>) = 0x7f7cb054f000 [ 47.504782][ T5110] REISERFS (device loop4): Using r5 hash to sort names [ 47.513009][ T5113] loop1: detected capacity change from 0 to 8192 [ 47.538388][ T5113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5110] <... futex resumed>) = 1 [pid 5003] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5109] <... futex resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] mkdir(".", 0777 [pid 5109] <... futex resumed>) = 0 [pid 5110] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] fstat(4, [pid 5110] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5117] <... write resumed>) = 4194304 [pid 5117] munmap(0x7f7cb054f000, 4194304 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5117] <... munmap resumed>) = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5117] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5110] <... mount resumed>) = 0 [ 47.576348][ T5113] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 47.596964][ T5113] REISERFS (device loop1): using ordered data mode [ 47.604281][ T5110] reiserfs: enabling write barrier flush mode [ 47.606347][ T5117] loop2: detected capacity change from 0 to 8192 [ 47.612202][ T5110] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5110] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5003] getdents64(4, [pid 5110] <... openat resumed>) = 4 [pid 5110] chdir("." [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5110] <... chdir resumed>) = 0 [pid 5003] close(4 [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5110] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... close resumed>) = 0 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] <... futex resumed>) = 0 [pid 5003] rmdir("./3/file0" [pid 5110] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... open resumed>) = 5 [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5110] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] <... futex resumed>) = 0 [pid 5110] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... rmdir resumed>) = 0 [pid 5110] <... open resumed>) = 6 [pid 5003] getdents64(3, [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5003] close(3 [pid 5120] <... write resumed>) = 4194304 [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... write resumed>) = 4194304 [pid 5120] munmap(0x7f7cb054f000, 4194304 [pid 5117] <... ioctl resumed>) = 0 [pid 5117] close(3) = 0 [pid 5117] mkdir("./file0", 0777 [pid 5110] ftruncate(6, 33587199 [pid 5117] <... mkdir resumed>) = 0 [pid 5119] munmap(0x7f7cb054f000, 4194304 [pid 5110] <... ftruncate resumed>) = 0 [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... close resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5003] rmdir("./3" [pid 5110] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] <... futex resumed>) = 0 [pid 5109] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5003] <... rmdir resumed>) = 0 [pid 5110] sendfile(5, 6, NULL, 281474978811909 [pid 5003] mkdir("./4", 0777 [pid 5109] <... futex resumed>) = 0 [pid 5109] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5120] <... munmap resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5119] <... munmap resumed>) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 47.626178][ T5113] reiserfs: using flush barriers [ 47.635054][ T5113] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.654254][ T5113] REISERFS (device loop1): checking transaction log (loop1) [ 47.662486][ T5120] loop3: detected capacity change from 0 to 8192 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5120] <... ioctl resumed>) = 0 [pid 5120] close(3) = 0 [pid 5120] mkdir("./file0", 0777) = 0 [pid 5120] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5119] <... ioctl resumed>) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file0", 0777) = 0 [pid 5119] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5123 ./strace-static-x86_64: Process 5123 attached [pid 5123] set_robust_list(0x55555710d5e0, 24 [pid 5113] <... mount resumed>) = 0 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./file0") = 0 [pid 5123] <... set_robust_list resumed>) = 0 [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] close(4 [pid 5109] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5109] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5109] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5109] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5126], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5126 [pid 5109] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x7f7cb094e9e0, 24 [pid 5113] <... close resumed>) = 0 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = 0 [ 47.672256][ T5119] loop0: detected capacity change from 0 to 8192 [ 47.677669][ T5113] REISERFS (device loop1): Using r5 hash to sort names [ 47.690746][ T5117] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.704759][ T5120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] chdir("./4" [pid 5113] <... futex resumed>) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5123] <... chdir resumed>) = 0 [pid 5113] mkdir(".", 0777 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5113] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5123] <... prctl resumed>) = 0 [pid 5113] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5126] <... set_robust_list resumed>) = 0 [pid 5123] setpgid(0, 0 [pid 5126] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5126] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... setpgid resumed>) = 0 [pid 5126] <... futex resumed>) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5123] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5127], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5127 [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5127 attached [pid 5126] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] set_robust_list(0x7f7cb896f9e0, 24 [pid 5126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] <... futex resumed>) = 0 [ 47.725503][ T5119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.731229][ T5113] reiserfs: enabling write barrier flush mode [ 47.745916][ T5119] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 47.753261][ T5117] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 47.755600][ T5119] REISERFS (device loop0): using ordered data mode [pid 5127] <... set_robust_list resumed>) = 0 [pid 5126] memfd_create("syzkaller", 0 [pid 5109] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5127] getuid( [pid 5126] <... memfd_create resumed>) = 7 [ 47.772423][ T5117] REISERFS (device loop2): using ordered data mode [ 47.774585][ T5120] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 47.780483][ T5117] reiserfs: using flush barriers [ 47.789218][ T5113] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 47.794576][ T5119] reiserfs: using flush barriers [ 47.802392][ T5120] REISERFS (device loop3): using ordered data mode [pid 5127] <... getuid resumed>) = 0 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5113] <... mount resumed>) = 0 [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... mmap resumed>) = 0x7f7ca852e000 [pid 5113] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5127] <... futex resumed>) = 1 [pid 5127] memfd_create("syzkaller", 0 [pid 5113] <... openat resumed>) = 4 [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=39000000} [pid 5113] chdir("." [pid 5127] <... memfd_create resumed>) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5113] <... chdir resumed>) = 0 [pid 5127] <... mmap resumed>) = 0x7f7cb054f000 [pid 5126] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] <... futex resumed>) = 0 [ 47.807362][ T5117] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.818212][ T5120] reiserfs: using flush barriers [ 47.833187][ T5117] REISERFS (device loop2): checking transaction log (loop2) [ 47.843402][ T5119] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.860070][ T5120] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = 0 [pid 5112] <... futex resumed>) = 1 [pid 5117] <... mount resumed>) = 0 [pid 5113] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5113] <... open resumed>) = 5 [pid 5117] <... openat resumed>) = 3 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] chdir("./file0" [pid 5113] <... futex resumed>) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5117] <... chdir resumed>) = 0 [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] ioctl(4, LOOP_CLR_FD [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5117] <... ioctl resumed>) = 0 [pid 5113] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5117] close(4 [pid 5113] <... open resumed>) = 6 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5117] <... close resumed>) = 0 [pid 5113] ftruncate(6, 33587199 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... ftruncate resumed>) = 0 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5113] sendfile(5, 6, NULL, 281474978811909 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... futex resumed>) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5117] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5120] <... mount resumed>) = 0 [pid 5117] mkdir(".", 0777 [ 47.878033][ T5117] REISERFS (device loop2): Using r5 hash to sort names [ 47.893011][ T5119] REISERFS (device loop0): checking transaction log (loop0) [ 47.906539][ T5120] REISERFS (device loop3): checking transaction log (loop3) [ 47.916523][ T5120] REISERFS (device loop3): Using r5 hash to sort names [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5117] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5117] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5120] <... openat resumed>) = 3 [pid 5126] <... write resumed>) = 4194304 [pid 5126] munmap(0x7f7ca852e000, 4194304 [pid 5120] chdir("./file0") = 0 [pid 5120] ioctl(4, LOOP_CLR_FD) = 0 [pid 5120] close(4) = 0 [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... munmap resumed>) = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 5126] ioctl(8, LOOP_SET_FD, 7 [pid 5120] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5126] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5112] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5112] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5112] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5128], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5128 [pid 5112] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5126] ioctl(8, LOOP_CLR_FD [ 47.930327][ T5119] REISERFS (device loop0): Using r5 hash to sort names [ 47.955660][ T5117] reiserfs: enabling write barrier flush mode [ 47.971125][ T5117] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5120] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5126] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x7f7cb094e9e0, 24 [pid 5126] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5126] close(8) = 0 [pid 5126] close(7 [pid 5119] <... mount resumed>) = 0 [pid 5128] <... set_robust_list resumed>) = 0 [pid 5128] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5128] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5128] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... futex resumed>) = 0 [pid 5128] memfd_create("syzkaller", 0 [pid 5112] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5128] <... memfd_create resumed>) = 7 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD [pid 5127] <... write resumed>) = 4194304 [pid 5119] <... ioctl resumed>) = 0 [pid 5127] munmap(0x7f7cb054f000, 4194304 [pid 5120] <... mount resumed>) = 0 [pid 5119] close(4 [pid 5117] <... mount resumed>) = 0 [pid 5127] <... munmap resumed>) = 0 [pid 5120] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5119] <... close resumed>) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5117] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5127] <... openat resumed>) = 4 [pid 5120] <... openat resumed>) = 4 [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5120] chdir("." [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [ 47.985930][ T5120] reiserfs: enabling write barrier flush mode [ 48.004856][ T5120] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5117] <... openat resumed>) = 4 [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... chdir resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5119] mkdir(".", 0777 [pid 5117] chdir("." [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5117] <... chdir resumed>) = 0 [pid 5120] <... futex resumed>) = 1 [pid 5127] <... ioctl resumed>) = 0 [pid 5119] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5127] close(3 [pid 5120] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... close resumed>) = 0 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5127] mkdir("./file0", 0777 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5117] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... mkdir resumed>) = 0 [pid 5120] <... open resumed>) = 5 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5127] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5126] <... close resumed>) = 0 [pid 5120] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] <... open resumed>) = 5 [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5126] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] <... futex resumed>) = 0 [pid 5126] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5109] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] <... futex resumed>) = 0 [ 48.037131][ T5127] loop5: detected capacity change from 0 to 8192 [ 48.057244][ T5119] reiserfs: enabling write barrier flush mode [ 48.072050][ T5119] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 0 [pid 5128] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5126] <... open resumed>) = 7 [pid 5126] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5120] <... open resumed>) = 6 [pid 5117] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5126] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... mount resumed>) = 0 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5109] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5126] creat("./file0", 000 [pid 5120] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5117] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... creat resumed>) = 8 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... openat resumed>) = 4 [pid 5117] <... open resumed>) = 6 [pid 5116] <... futex resumed>) = 0 [pid 5126] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] ftruncate(6, 33587199 [pid 5119] chdir("." [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... futex resumed>) = 1 [pid 5119] <... chdir resumed>) = 0 [pid 5117] <... futex resumed>) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5126] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] <... ftruncate resumed>) = 0 [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] ftruncate(6, 33587199 [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5117] <... ftruncate resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = 1 [pid 5119] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [ 48.081835][ T5127] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.100885][ T5127] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] <... write resumed>) = 4194304 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] <... futex resumed>) = 0 [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 5128] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5128] ioctl(8, LOOP_CLR_FD) = 0 [pid 5120] sendfile(5, 6, NULL, 281474978811909 [pid 5128] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5128] close(8) = 0 [pid 5119] <... open resumed>) = 5 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 0 [pid 5128] close(7 [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [ 48.132583][ T5127] REISERFS (device loop5): using ordered data mode [ 48.139548][ T5127] reiserfs: using flush barriers [ 48.145566][ T5127] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5117] sendfile(5, 6, NULL, 281474978811909 [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... close resumed>) = 0 [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5110] <... sendfile resumed>) = 851968 [pid 5110] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... futex resumed>) = 0 [pid 5109] exit_group(0 [pid 5128] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... mount resumed>) = 0 [pid 5126] <... futex resumed>) = ? [pid 5119] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... futex resumed>) = ? [pid 5109] <... exit_group resumed>) = ? [pid 5127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5119] <... open resumed>) = 6 [pid 5127] <... openat resumed>) = 3 [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] chdir("./file0" [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5128] <... futex resumed>) = 1 [pid 5126] +++ exited with 0 +++ [pid 5112] <... futex resumed>) = 0 [pid 5110] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ [pid 5128] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] ftruncate(6, 33587199 [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = 0 [pid 5128] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5127] <... chdir resumed>) = 0 [pid 5112] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... ftruncate resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5002] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] ioctl(4, LOOP_CLR_FD [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5127] <... ioctl resumed>) = 0 [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5127] close(4 [pid 5119] sendfile(5, 6, NULL, 281474978811909 [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./4/binderfs" [pid 5127] <... close resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5002] <... unlink resumed>) = 0 [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5116] <... futex resumed>) = 0 [pid 5127] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5127] mkdir(".", 0777 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] <... mmap resumed>) = 0x7f7cb092e000 [pid 5127] <... mkdir resumed>) = -1 EEXIST (File exists) [ 48.178424][ T5127] REISERFS (device loop5): checking transaction log (loop5) [ 48.186962][ T5127] REISERFS (device loop5): Using r5 hash to sort names [pid 5116] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5127] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5116] <... mprotect resumed>) = 0 [pid 5116] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5130], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5130 [pid 5116] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5116] <... futex resumed>) = 0 [pid 5115] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 ./strace-static-x86_64: Process 5130 attached [pid 5128] <... open resumed>) = 7 [pid 5115] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5131], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5131 [pid 5115] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... mount resumed>) = 0 [pid 5127] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5127] chdir("." [pid 5113] <... sendfile resumed>) = 655360 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] <... futex resumed>) = 1 [pid 5128] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] <... futex resumed>) = 0 [pid 5112] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = 0 [pid 5112] <... futex resumed>) = 1 [pid 5113] creat("./file0", 000 [pid 5112] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... creat resumed>) = 8 [pid 5113] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5113] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] exit_group(0 [pid 5130] set_robust_list(0x7f7cb094e9e0, 24 [pid 5113] <... futex resumed>) = ? [pid 5112] <... exit_group resumed>) = ? [pid 5130] <... set_robust_list resumed>) = 0 [pid 5130] ftruncate(-1, 18446744073709551609 [pid 5113] +++ exited with 0 +++ [pid 5130] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5130] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5130] memfd_create("syzkaller", 0 [pid 5116] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... memfd_create resumed>) = 7 [pid 5116] <... futex resumed>) = 0 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5130] <... mmap resumed>) = 0x7f7ca852e000 [pid 5128] <... futex resumed>) = ? [pid 5128] +++ exited with 0 +++ [pid 5112] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5127] <... chdir resumed>) = 0 [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... futex resumed>) = 1 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] <... open resumed>) = 5 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5127] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5118] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 4999] fstat(3, [pid 5127] <... open resumed>) = 6 [pid 5123] <... futex resumed>) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... mmap resumed>) = 0x7f7cb092e000 [pid 4999] getdents64(3, [pid 5127] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5127] ftruncate(6, 33587199 [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... mprotect resumed>) = 0 [pid 4999] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] <... ftruncate resumed>) = 0 [pid 5123] <... futex resumed>) = 0 [pid 5118] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] lstat("./4/binderfs", [pid 5127] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... clone resumed>, parent_tid=[5132], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5132 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5127] sendfile(5, 6, NULL, 281474978811909 [pid 5123] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] unlink("./4/binderfs"./strace-static-x86_64: Process 5131 attached [pid 5123] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5131] set_robust_list(0x7f7cb094e9e0, 24 [ 48.229120][ T5127] reiserfs: enabling write barrier flush mode [ 48.240856][ T5127] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5123] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5132] ftruncate(-1, 18446744073709551609 [pid 5131] <... set_robust_list resumed>) = 0 [pid 5132] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5131] ftruncate(-1, 18446744073709551609 [pid 5132] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5132] <... futex resumed>) = 1 [pid 5131] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5115] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5132] memfd_create("syzkaller", 0 [pid 5131] <... futex resumed>) = 0 [pid 5118] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] <... memfd_create resumed>) = 7 [pid 5131] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5115] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 0 [pid 5132] <... mmap resumed>) = 0x7f7ca852e000 [pid 5131] memfd_create("syzkaller", 0 [pid 5115] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5131] <... memfd_create resumed>) = 7 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5123] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5123] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5133], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5133 [pid 5123] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5133 attached [pid 5133] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5133] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5133] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5133] memfd_create("syzkaller", 0 [pid 5123] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... memfd_create resumed>) = 7 [pid 5123] <... futex resumed>) = 0 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5123] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5133] <... mmap resumed>) = 0x7f7ca852e000 [pid 5130] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5131] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./4/file0") = 0 [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3) = 0 [pid 5002] rmdir("./4" [pid 4999] lstat("./4/file0", [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./5", 0777 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... write resumed>) = 4194304 [pid 4999] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 4 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] fstat(4, [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3 [pid 4999] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./4/file0") = 0 [pid 4999] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./4" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./5", 0777) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5134 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5135 ./strace-static-x86_64: Process 5135 attached [pid 5135] set_robust_list(0x55555710d5e0, 24./strace-static-x86_64: Process 5134 attached ) = 0 [pid 5134] set_robust_list(0x55555710d5e0, 24 [pid 5130] <... write resumed>) = 4194304 [pid 5135] chdir("./5" [pid 5133] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5135] <... chdir resumed>) = 0 [pid 5134] <... set_robust_list resumed>) = 0 [pid 5130] munmap(0x7f7ca852e000, 4194304 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] chdir("./5" [pid 5131] munmap(0x7f7ca852e000, 4194304 [pid 5135] <... prctl resumed>) = 0 [pid 5135] setpgid(0, 0) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] <... munmap resumed>) = 0 [pid 5135] <... openat resumed>) = 3 [pid 5135] write(3, "1000", 4) = 4 [pid 5134] <... chdir resumed>) = 0 [pid 5135] close(3) = 0 [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5135] <... symlink resumed>) = 0 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5134] <... prctl resumed>) = 0 [pid 5131] <... munmap resumed>) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5135] <... mmap resumed>) = 0x7f7cb894f000 [pid 5134] setpgid(0, 0 [pid 5130] <... openat resumed>) = 8 [pid 5135] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5134] <... setpgid resumed>) = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5130] ioctl(8, LOOP_SET_FD, 7 [pid 5135] <... mprotect resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5135] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5134] <... openat resumed>) = 3 [pid 5131] <... openat resumed>) = 8 [pid 5130] ioctl(8, LOOP_CLR_FD [pid 5135] <... clone resumed>, parent_tid=[5136], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5136 [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] write(3, "1000", 4 [pid 5131] ioctl(8, LOOP_SET_FD, 7 [pid 5130] <... ioctl resumed>) = 0 [pid 5134] <... write resumed>) = 4 [pid 5131] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5136 attached [pid 5134] close(3 [pid 5132] <... write resumed>) = 4194304 [pid 5131] ioctl(8, LOOP_CLR_FD [pid 5136] set_robust_list(0x7f7cb896f9e0, 24 [pid 5134] <... close resumed>) = 0 [pid 5132] munmap(0x7f7ca852e000, 4194304 [pid 5131] <... ioctl resumed>) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5130] ioctl(8, LOOP_SET_FD, 7 [pid 5136] <... set_robust_list resumed>) = 0 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... munmap resumed>) = 0 [pid 5130] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5136] getuid( [pid 5134] <... futex resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5131] ioctl(8, LOOP_SET_FD, 7 [pid 5130] close(8 [pid 5136] <... getuid resumed>) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5132] <... openat resumed>) = 8 [pid 5131] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5130] <... close resumed>) = 0 [pid 5133] <... write resumed>) = 4194304 [pid 5133] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 8 [pid 5133] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5133] ioctl(8, LOOP_CLR_FD) = 0 [pid 5133] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5133] close(8) = 0 [pid 5133] close(7 [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5134] <... mmap resumed>) = 0x7f7cb894f000 [pid 5132] ioctl(8, LOOP_SET_FD, 7 [pid 5131] close(8 [pid 5130] close(7 [pid 5136] <... futex resumed>) = 0 [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5132] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5131] <... close resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5136] memfd_create("syzkaller", 0 [pid 5134] <... mprotect resumed>) = 0 [pid 5132] ioctl(8, LOOP_CLR_FD [pid 5131] close(7 [pid 5136] <... memfd_create resumed>) = 3 [pid 5134] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5132] <... ioctl resumed>) = 0 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5131] <... close resumed>) = 0 [pid 5136] <... mmap resumed>) = 0x7f7cb054f000 [pid 5134] <... clone resumed>, parent_tid=[5137], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5137 [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] ioctl(8, LOOP_SET_FD, 7 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5132] close(8) = 0 [pid 5132] close(7 [pid 5133] <... close resumed>) = 0 ./strace-static-x86_64: Process 5137 attached [pid 5130] <... close resumed>) = 0 [pid 5137] set_robust_list(0x7f7cb896f9e0, 24 [pid 5133] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... set_robust_list resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5131] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5137] getuid( [pid 5133] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 1 [pid 5123] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5137] <... getuid resumed>) = 0 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5123] <... futex resumed>) = 0 [pid 5116] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5131] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5116] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5134] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = 1 [pid 5131] <... open resumed>) = 7 [pid 5130] <... open resumed>) = 7 [pid 5118] <... futex resumed>) = 0 [pid 5117] <... sendfile resumed>) = 1114112 [pid 5137] memfd_create("syzkaller", 0 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5132] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... sendfile resumed>) = 1114112 [pid 5118] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... memfd_create resumed>) = 3 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 1 [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5131] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] <... futex resumed>) = 0 [pid 5118] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... mmap resumed>) = 0x7f7cb054f000 [pid 5120] creat("./file0", 000 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5133] <... open resumed>) = 7 [pid 5120] <... creat resumed>) = 8 [pid 5117] creat("./file0", 000 [pid 5133] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... creat resumed>) = 8 [pid 5133] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = 0 [pid 5117] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] creat("./file0", 000 [pid 5123] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] <... futex resumed>) = 0 [pid 5133] <... creat resumed>) = 8 [pid 5132] <... open resumed>) = 7 [pid 5123] <... futex resumed>) = 0 [pid 5119] <... sendfile resumed>) = 1048576 [pid 5117] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5132] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] exit_group(0 [pid 5115] exit_group(0 [pid 5133] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] <... futex resumed>) = 1 [pid 5131] <... futex resumed>) = ? [pid 5130] <... futex resumed>) = ? [pid 5120] <... futex resumed>) = ? [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = ? [pid 5116] <... exit_group resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5132] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 5119] <... futex resumed>) = 0 [pid 5118] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] +++ exited with 0 +++ [pid 5119] creat("./file0", 000) = 8 [pid 5116] +++ exited with 0 +++ [pid 5119] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5115] +++ exited with 0 +++ [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5119] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] exit_group(0 [pid 5132] <... futex resumed>) = ? [pid 5119] <... futex resumed>) = ? [pid 5118] <... exit_group resumed>) = ? [pid 5001] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5132] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 5000] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] <... openat resumed>) = 3 [pid 5001] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./4/binderfs", [pid 5000] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./4/binderfs" [pid 5000] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./4/binderfs", [pid 4998] <... openat resumed>) = 3 [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5127] <... sendfile resumed>) = 851968 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] fstat(3, [pid 5127] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] exit_group(0 [pid 5000] unlink("./4/binderfs" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5133] <... futex resumed>) = ? [pid 5127] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5000] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 5133] +++ exited with 0 +++ [pid 5127] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4998] lstat("./4/binderfs", [pid 5003] <... restart_syscall resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./4/binderfs") = 0 [pid 5003] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5137] <... write resumed>) = 4194304 [pid 5136] <... write resumed>) = 4194304 [pid 5003] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5137] munmap(0x7f7cb054f000, 4194304 [pid 5136] munmap(0x7f7cb054f000, 4194304 [pid 5003] <... openat resumed>) = 3 [pid 5137] <... munmap resumed>) = 0 [pid 5136] <... munmap resumed>) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5003] fstat(3, [pid 5137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5137] <... openat resumed>) = 4 [pid 5003] getdents64(3, [pid 5137] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./4/binderfs" [pid 5136] <... ioctl resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] close(3) = 0 [pid 5136] mkdir("./file0", 0777) = 0 [ 48.783033][ T5136] loop1: detected capacity change from 0 to 8192 [ 48.803025][ T5137] loop4: detected capacity change from 0 to 8192 [pid 5136] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./4/file0", [pid 5000] lstat("./4/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./4/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5000] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 4998] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(4, [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 4998] fstat(4, [pid 5001] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] getdents64(4, [pid 5001] rmdir("./4/file0" [pid 5000] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5137] <... ioctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5137] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4998] getdents64(4, [pid 5137] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5137] mkdir("./file0", 0777) = 0 [pid 5137] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5001] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [ 48.849568][ T5136] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.871196][ T5136] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 48.881314][ T5136] REISERFS (device loop1): using ordered data mode [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 5000] rmdir("./4/file0" [pid 4998] close(4 [pid 5003] lstat("./4/file0", [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./4" [pid 5000] getdents64(3, [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./4/file0" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] mkdir("./5", 0777 [pid 5000] close(3 [ 48.885107][ T5137] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.887958][ T5136] reiserfs: using flush barriers [ 48.888931][ T5136] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.901584][ T5137] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 48.922926][ T5136] REISERFS (device loop1): checking transaction log (loop1) [ 48.939309][ T5137] REISERFS (device loop4): using ordered data mode [pid 4998] getdents64(3, [pid 5003] <... openat resumed>) = 4 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5136] <... mount resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5136] chdir("./file0") = 0 [pid 5136] ioctl(4, LOOP_CLR_FD) = 0 [pid 5136] close(4) = 0 [pid 5003] fstat(4, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] rmdir("./4" [pid 4998] close(3 [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./4/file0") = 0 [pid 5003] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./4") = 0 [pid 5003] mkdir("./5", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5135] <... futex resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] mkdir("./5", 0777 [pid 4998] rmdir("./4" [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5140 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5136] mkdir(".", 0777 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] <... close resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5141 [ 48.941051][ T5136] REISERFS (device loop1): Using r5 hash to sort names [ 48.947993][ T5137] reiserfs: using flush barriers [ 48.960661][ T5137] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.986845][ T5137] REISERFS (device loop4): checking transaction log (loop4) ./strace-static-x86_64: Process 5140 attached [pid 5140] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5136] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 4998] mkdir("./5", 0777 [pid 5140] chdir("./5") = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 4998] <... mkdir resumed>) = 0 [pid 5140] setpgid(0, 0) = 0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5140] write(3, "1000", 4) = 4 [pid 5140] close(3) = 0 [pid 5140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 4998] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3 [pid 5140] <... mmap resumed>) = 0x7f7cb894f000 [pid 5140] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... close resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5142 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5140] <... mprotect resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5143 [pid 5140] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5144], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5144 [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5142] chdir("./5") = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 ./strace-static-x86_64: Process 5143 attached [pid 5142] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5143] set_robust_list(0x55555710d5e0, 24 [pid 5142] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5141 attached [pid 5143] <... set_robust_list resumed>) = 0 [pid 5142] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5145], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5145 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5144 attached [pid 5144] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5144] getuid() = 0 [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5144] memfd_create("syzkaller", 0 [pid 5143] chdir("./5" [pid 5141] set_robust_list(0x55555710d5e0, 24 [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... memfd_create resumed>) = 3 [pid 5143] <... chdir resumed>) = 0 [pid 5141] <... set_robust_list resumed>) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5141] chdir("./5" [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5144] <... mmap resumed>) = 0x7f7cb054f000 [pid 5143] <... prctl resumed>) = 0 [pid 5141] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5145 attached [pid 5143] setpgid(0, 0 [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5137] <... mount resumed>) = 0 [pid 5136] <... mount resumed>) = 0 [pid 5145] set_robust_list(0x7f7cb896f9e0, 24 [pid 5143] <... setpgid resumed>) = 0 [pid 5141] <... prctl resumed>) = 0 [pid 5137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5136] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5145] <... set_robust_list resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5141] setpgid(0, 0 [pid 5137] <... openat resumed>) = 3 [pid 5136] <... openat resumed>) = 4 [pid 5145] getuid( [pid 5143] <... openat resumed>) = 3 [pid 5141] <... setpgid resumed>) = 0 [pid 5137] chdir("./file0" [pid 5136] chdir("." [pid 5145] <... getuid resumed>) = 0 [pid 5143] write(3, "1000", 4 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5137] <... chdir resumed>) = 0 [pid 5136] <... chdir resumed>) = 0 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... write resumed>) = 4 [pid 5141] <... openat resumed>) = 3 [pid 5137] ioctl(4, LOOP_CLR_FD [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = 1 [pid 5143] close(3 [pid 5142] <... futex resumed>) = 0 [pid 5141] write(3, "1000", 4 [pid 5137] <... ioctl resumed>) = 0 [pid 5136] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5145] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... close resumed>) = 0 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... write resumed>) = 4 [pid 5137] close(4 [pid 5136] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5142] <... futex resumed>) = 0 [pid 5141] close(3 [pid 5137] <... close resumed>) = 0 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5145] memfd_create("syzkaller", 0 [pid 5143] <... symlink resumed>) = 0 [pid 5141] <... close resumed>) = 0 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... memfd_create resumed>) = 3 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5141] symlink("/dev/binderfs", "./binderfs" [pid 5137] <... futex resumed>) = 1 [pid 5136] <... open resumed>) = 5 [pid 5134] <... futex resumed>) = 0 [ 48.996123][ T5137] REISERFS (device loop4): Using r5 hash to sort names [ 49.007679][ T5136] reiserfs: enabling write barrier flush mode [ 49.025288][ T5136] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5143] <... futex resumed>) = 0 [pid 5141] <... symlink resumed>) = 0 [pid 5137] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... mmap resumed>) = 0x7f7cb054f000 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5144] <... write resumed>) = 4194304 [pid 5143] <... mmap resumed>) = 0x7f7cb894f000 [pid 5141] <... futex resumed>) = 0 [pid 5137] mkdir(".", 0777 [pid 5136] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5144] munmap(0x7f7cb054f000, 4194304 [pid 5143] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5143] <... mprotect resumed>) = 0 [pid 5141] <... mmap resumed>) = 0x7f7cb894f000 [pid 5137] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5136] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... munmap resumed>) = 0 [pid 5143] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5141] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5144] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3 [pid 5141] <... mprotect resumed>) = 0 [pid 5136] <... open resumed>) = 6 [pid 5143] <... clone resumed>, parent_tid=[5146], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5146 [pid 5141] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... ioctl resumed>) = 0 [pid 5144] close(3) = 0 ./strace-static-x86_64: Process 5147 attached ./strace-static-x86_64: Process 5146 attached [pid 5143] <... futex resumed>) = 0 [pid 5137] <... mount resumed>) = 0 [pid 5136] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] <... clone resumed>, parent_tid=[5147], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5147 [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] mkdir("./file0", 0777 [pid 5146] set_robust_list(0x7f7cb896f9e0, 24 [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5144] <... mkdir resumed>) = 0 [pid 5146] <... set_robust_list resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5144] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5146] getuid( [pid 5136] ftruncate(6, 33587199 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... openat resumed>) = 4 [pid 5137] chdir(".") = 0 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... getuid resumed>) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5137] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... open resumed>) = 5 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... ftruncate resumed>) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5146] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] memfd_create("syzkaller", 0 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5136] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5146] <... memfd_create resumed>) = 3 [pid 5135] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] sendfile(5, 6, NULL, 281474978811909 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5135] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 1 [pid 5137] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5135] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... mmap resumed>) = 0x7f7cb054f000 [pid 5137] ftruncate(6, 33587199 [pid 5147] set_robust_list(0x7f7cb896f9e0, 24 [pid 5137] <... ftruncate resumed>) = 0 [pid 5147] <... set_robust_list resumed>) = 0 [pid 5147] getuid() = 0 [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5147] memfd_create("syzkaller", 0 [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... memfd_create resumed>) = 3 [pid 5141] <... futex resumed>) = 0 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5147] <... mmap resumed>) = 0x7f7cb054f000 [pid 5137] sendfile(5, 6, NULL, 281474978811909 [ 49.102936][ T5137] reiserfs: enabling write barrier flush mode [ 49.106799][ T5144] loop5: detected capacity change from 0 to 8192 [ 49.116897][ T5137] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5145] <... write resumed>) = 4194304 [pid 5134] <... futex resumed>) = 0 [pid 5145] munmap(0x7f7cb054f000, 4194304 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... munmap resumed>) = 0 [pid 5145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5145] ioctl(4, LOOP_SET_FD, 3 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5135] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5135] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5145] <... ioctl resumed>) = 0 [pid 5135] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5145] close(3) = 0 [pid 5135] <... clone resumed>, parent_tid=[5149], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5149 [pid 5145] mkdir("./file0", 0777 [pid 5135] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... mkdir resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5145] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5135] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5149 attached [pid 5149] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5149] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [ 49.148947][ T5144] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.171309][ T5145] loop0: detected capacity change from 0 to 8192 [ 49.178160][ T5144] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5149] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... write resumed>) = 4194304 [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5149] <... futex resumed>) = 1 [pid 5146] munmap(0x7f7cb054f000, 4194304 [pid 5135] <... futex resumed>) = 0 [pid 5134] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5147] <... write resumed>) = 4194304 [pid 5146] <... munmap resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5149] memfd_create("syzkaller", 0 [pid 5135] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5149] <... memfd_create resumed>) = 7 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] munmap(0x7f7cb054f000, 4194304 [pid 5146] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5149] <... mmap resumed>) = 0x7f7ca852e000 [pid 5147] <... munmap resumed>) = 0 [pid 5146] <... openat resumed>) = 4 [pid 5134] <... mmap resumed>) = 0x7f7cb092e000 [pid 5147] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5134] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5147] <... openat resumed>) = 4 [pid 5146] <... ioctl resumed>) = 0 [pid 5134] <... mprotect resumed>) = 0 [ 49.203382][ T5145] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.223439][ T5144] REISERFS (device loop5): using ordered data mode [ 49.234530][ T5144] reiserfs: using flush barriers [ 49.238954][ T5146] loop2: detected capacity change from 0 to 8192 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5134] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5151], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5151 [pid 5146] close(3 [pid 5134] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... close resumed>) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] mkdir("./file0", 0777./strace-static-x86_64: Process 5151 attached ) = 0 [pid 5151] set_robust_list(0x7f7cb094e9e0, 24 [pid 5146] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5151] <... set_robust_list resumed>) = 0 [ 49.240285][ T5144] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.251258][ T5147] loop3: detected capacity change from 0 to 8192 [ 49.261984][ T5145] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 49.277544][ T5145] REISERFS (device loop0): using ordered data mode [ 49.284052][ T5145] reiserfs: using flush barriers [pid 5151] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5151] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5151] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5134] <... futex resumed>) = 0 [pid 5151] memfd_create("syzkaller", 0 [pid 5134] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5151] <... memfd_create resumed>) = 7 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5145] <... mount resumed>) = 0 [pid 5145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5145] chdir("./file0") = 0 [pid 5145] ioctl(4, LOOP_CLR_FD) = 0 [ 49.296300][ T5145] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.314366][ T5146] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.319016][ T5145] REISERFS (device loop0): checking transaction log (loop0) [ 49.346815][ T5145] REISERFS (device loop0): Using r5 hash to sort names [pid 5145] close(4 [pid 5151] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5149] <... write resumed>) = 4194304 [pid 5145] <... close resumed>) = 0 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5145] <... futex resumed>) = 1 [pid 5145] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5145] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5149] munmap(0x7f7ca852e000, 4194304 [pid 5147] <... ioctl resumed>) = 0 [ 49.368751][ T5146] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 49.378084][ T5146] REISERFS (device loop2): using ordered data mode [ 49.384589][ T5146] reiserfs: using flush barriers [ 49.390456][ T5146] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.394374][ T5145] reiserfs: enabling write barrier flush mode [pid 5149] <... munmap resumed>) = 0 [pid 5147] close(3 [pid 5149] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5147] <... close resumed>) = 0 [pid 5149] <... openat resumed>) = 8 [pid 5147] mkdir("./file0", 0777 [pid 5149] ioctl(8, LOOP_SET_FD, 7 [pid 5147] <... mkdir resumed>) = 0 [pid 5149] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5147] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5149] ioctl(8, LOOP_CLR_FD) = 0 [pid 5151] <... write resumed>) = 4194304 [pid 5149] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5151] munmap(0x7f7ca852e000, 4194304 [ 49.417152][ T5144] REISERFS (device loop5): checking transaction log (loop5) [ 49.429995][ T5147] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.430150][ T5144] REISERFS (device loop5): Using r5 hash to sort names [ 49.447205][ T5146] REISERFS (device loop2): checking transaction log (loop2) [ 49.459204][ T5147] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [pid 5149] close(8 [pid 5151] <... munmap resumed>) = 0 [pid 5149] <... close resumed>) = 0 [pid 5151] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5149] close(7 [pid 5151] <... openat resumed>) = 8 [pid 5146] <... mount resumed>) = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5146] chdir("./file0") = 0 [pid 5146] ioctl(4, LOOP_CLR_FD) = 0 [pid 5146] close(4) = 0 [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5146] <... futex resumed>) = 1 [pid 5146] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5146] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5151] ioctl(8, LOOP_SET_FD, 7 [pid 5144] <... mount resumed>) = 0 [pid 5151] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 49.470046][ T5146] REISERFS (device loop2): Using r5 hash to sort names [ 49.492106][ T5146] reiserfs: enabling write barrier flush mode [ 49.496617][ T5145] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 49.499851][ T5146] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5151] ioctl(8, LOOP_CLR_FD) = 0 [pid 5144] <... openat resumed>) = 3 [pid 5145] <... mount resumed>) = 0 [pid 5145] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5145] chdir("." [pid 5151] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5151] close(8) = 0 [pid 5145] <... chdir resumed>) = 0 [pid 5151] close(7 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... futex resumed>) = 1 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... futex resumed>) = 1 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... futex resumed>) = 1 [pid 5145] ftruncate(6, 33587199 [pid 5144] chdir("./file0") = 0 [pid 5144] ioctl(4, LOOP_CLR_FD) = 0 [pid 5144] close(4) = 0 [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] mkdir(".", 0777 [pid 5140] <... futex resumed>) = 0 [pid 5144] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5144] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [ 49.518971][ T5147] REISERFS (device loop3): using ordered data mode [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5145] <... ftruncate resumed>) = 0 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5146] <... mount resumed>) = 0 [pid 5145] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5146] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5145] sendfile(5, 6, NULL, 281474978811909 [pid 5146] <... openat resumed>) = 4 [pid 5146] chdir(".") = 0 [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5146] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 49.544397][ T5144] reiserfs: enabling write barrier flush mode [ 49.561370][ T5147] reiserfs: using flush barriers [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... close resumed>) = 0 [pid 5146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... futex resumed>) = 0 [pid 5149] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... open resumed>) = 5 [pid 5135] <... futex resumed>) = 0 [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 1 [pid 5135] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = 1 [pid 5149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5135] <... futex resumed>) = 0 [pid 5146] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... futex resumed>) = 0 [pid 5151] <... close resumed>) = 0 [pid 5144] <... mount resumed>) = 0 [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5142] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5154], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5154 [pid 5142] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = 0 [pid 5146] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5151] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5146] <... open resumed>) = 6 [pid 5134] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x7f7cb094e9e0, 24 [pid 5134] <... futex resumed>) = 0 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5154] ftruncate(-1, 18446744073709551609 [pid 5134] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5154] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] <... futex resumed>) = 1 [pid 5154] memfd_create("syzkaller", 0) = 7 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5146] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5146] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] ftruncate(6, 33587199 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... ftruncate resumed>) = 0 [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5146] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5146] sendfile(5, 6, NULL, 281474978811909 [pid 5143] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5144] chdir(".") = 0 [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5144] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... open resumed>) = 5 [pid 5140] <... futex resumed>) = 0 [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5144] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... open resumed>) = 6 [pid 5140] <... futex resumed>) = 0 [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5144] ftruncate(6, 33587199 [ 49.585282][ T5144] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 49.597940][ T5147] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.622744][ T5147] REISERFS (device loop3): checking transaction log (loop3) [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... open resumed>) = 7 [pid 5144] <... ftruncate resumed>) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5137] <... sendfile resumed>) = 917504 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... sendfile resumed>) = 983040 [pid 5135] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] <... futex resumed>) = 0 [pid 5144] sendfile(5, 6, NULL, 281474978811909 [pid 5140] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5140] <... futex resumed>) = 0 [pid 5135] <... mmap resumed>) = 0x7f7ca890d000 [pid 5140] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5137] <... futex resumed>) = 0 [pid 5135] <... clone resumed>, parent_tid=[5155], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5155 [pid 5135] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... futex resumed>) = 0 [pid 5149] <... open resumed>) = 7 [pid 5136] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5149] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5149] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] creat("./file0", 000 [pid 5134] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... creat resumed>) = 8 ./strace-static-x86_64: Process 5155 attached [pid 5147] <... mount resumed>) = 0 [pid 5137] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] set_robust_list(0x7f7ca892d9e0, 24 [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5137] <... futex resumed>) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5155] <... set_robust_list resumed>) = 0 [pid 5147] <... openat resumed>) = 3 [pid 5143] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] exit_group(0 [pid 5155] creat("./file0", 000 [pid 5151] <... futex resumed>) = ? [pid 5147] chdir("./file0" [pid 5143] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = ? [pid 5134] <... exit_group resumed>) = ? [pid 5155] <... creat resumed>) = 8 [pid 5151] +++ exited with 0 +++ [pid 5147] <... chdir resumed>) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5155] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5147] ioctl(4, LOOP_CLR_FD [pid 5143] <... mmap resumed>) = 0x7f7cb092e000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5155] <... futex resumed>) = 1 [pid 5147] <... ioctl resumed>) = 0 [pid 5143] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5135] <... futex resumed>) = 0 [pid 5155] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5147] close(4 [pid 5143] <... mprotect resumed>) = 0 [pid 5135] exit_group(0 [pid 5149] <... futex resumed>) = ? [pid 5147] <... close resumed>) = 0 [pid 5143] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5135] <... exit_group resumed>) = ? [pid 5002] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./5/binderfs" [pid 5155] <... futex resumed>) = ? [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = ? [pid 5002] <... unlink resumed>) = 0 [pid 5155] +++ exited with 0 +++ [pid 5147] <... futex resumed>) = 1 [pid 5143] <... clone resumed>, parent_tid=[5156], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5156 [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] +++ exited with 0 +++ [pid 5135] +++ exited with 0 +++ [pid 5147] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 49.653413][ T5147] REISERFS (device loop3): Using r5 hash to sort names [pid 5147] mkdir(".", 0777 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5140] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5140] <... futex resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5156 attached [pid 5147] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5140] <... mmap resumed>) = 0x7f7cb092e000 [pid 5156] set_robust_list(0x7f7cb094e9e0, 24 [pid 5147] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5140] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5156] <... set_robust_list resumed>) = 0 [pid 5140] <... mprotect resumed>) = 0 [pid 4999] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] ftruncate(-1, 18446744073709551609 [pid 5140] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5156] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5156] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... clone resumed>, parent_tid=[5157], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5157 [pid 4999] <... openat resumed>) = 3 [pid 5156] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5140] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(3, [pid 5156] memfd_create("syzkaller", 0 [pid 5143] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5156] <... memfd_create resumed>) = 7 [pid 5143] <... futex resumed>) = 0 [pid 5140] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(3, [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5143] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5156] <... mmap resumed>) = 0x7f7ca852e000 [pid 4999] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./5/binderfs") = 0 [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5157 attached [pid 5157] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5157] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5154] <... write resumed>) = 4194304 [pid 5157] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] munmap(0x7f7ca852e000, 4194304 [pid 5157] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5157] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5157] memfd_create("syzkaller", 0 [pid 5140] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5157] <... memfd_create resumed>) = 7 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5154] <... munmap resumed>) = 0 [pid 5157] <... mmap resumed>) = 0x7f7ca852e000 [pid 5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 8 [pid 5154] ioctl(8, LOOP_SET_FD, 7 [pid 5002] <... umount2 resumed>) = 0 [pid 5154] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] ioctl(8, LOOP_CLR_FD [pid 5147] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... ioctl resumed>) = 0 [pid 5147] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5002] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] <... openat resumed>) = 4 [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 49.729590][ T5147] reiserfs: enabling write barrier flush mode [ 49.762543][ T5147] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5156] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5154] ioctl(8, LOOP_SET_FD, 7 [pid 5147] chdir("." [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5147] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5154] close(8 [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... openat resumed>) = 4 [pid 5154] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 5154] close(7 [pid 5147] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(4, [pid 5147] <... open resumed>) = 5 [pid 5141] <... futex resumed>) = 0 [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5147] <... futex resumed>) = 0 [pid 5141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] getdents64(4, [pid 5147] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5002] close(4 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 5147] <... open resumed>) = 6 [pid 5002] rmdir("./5/file0" [pid 5157] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5154] <... close resumed>) = 0 [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5147] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(3, [pid 5154] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5147] ftruncate(6, 33587199 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] close(3 [pid 5142] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5147] <... ftruncate resumed>) = 0 [pid 5142] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... close resumed>) = 0 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5002] rmdir("./5" [pid 5147] <... futex resumed>) = 1 [pid 5142] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] <... futex resumed>) = 0 [pid 5147] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... rmdir resumed>) = 0 [pid 5147] sendfile(5, 6, NULL, 281474978811909 [pid 5141] <... futex resumed>) = 0 [pid 5002] mkdir("./6", 0777 [pid 5141] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5158 [pid 5145] <... sendfile resumed>) = 720896 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... open resumed>) = 7 ./strace-static-x86_64: Process 5158 attached [pid 5154] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = 0 [pid 5142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5158] set_robust_list(0x55555710d5e0, 24 [pid 5154] <... futex resumed>) = 0 [pid 5145] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... set_robust_list resumed>) = 0 [pid 5154] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5142] <... futex resumed>) = 0 [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5158] chdir("./6" [pid 5145] creat("./file0", 000 [pid 5142] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... chdir resumed>) = 0 [pid 5157] <... write resumed>) = 4194304 [pid 5145] <... creat resumed>) = 8 [pid 5141] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5157] munmap(0x7f7ca852e000, 4194304 [pid 5145] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5158] <... prctl resumed>) = 0 [pid 5157] <... munmap resumed>) = 0 [pid 5145] <... futex resumed>) = 1 [pid 5142] <... futex resumed>) = 0 [pid 5141] <... mmap resumed>) = 0x7f7cb092e000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5158] setpgid(0, 0 [pid 5157] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5145] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] exit_group(0 [pid 5141] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 4999] lstat("./5/file0", [pid 5158] <... setpgid resumed>) = 0 [pid 5157] <... openat resumed>) = 8 [pid 5154] <... futex resumed>) = ? [pid 5145] <... futex resumed>) = ? [pid 5142] <... exit_group resumed>) = ? [pid 5141] <... mprotect resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5157] ioctl(8, LOOP_SET_FD, 7 [pid 5154] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ [pid 5141] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5158] <... openat resumed>) = 3 [pid 5157] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5158] write(3, "1000", 4 [pid 5157] ioctl(8, LOOP_CLR_FD [pid 5141] <... clone resumed>, parent_tid=[5159], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5159 [pid 4999] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5158] <... write resumed>) = 4 [pid 5157] <... ioctl resumed>) = 0 [pid 5141] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 4 [pid 5158] close(3 [pid 5141] <... futex resumed>) = 0 [pid 4999] fstat(4, [pid 5158] <... close resumed>) = 0 [pid 5141] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5158] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5158] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] ioctl(8, LOOP_SET_FD, 7 [pid 4999] getdents64(4, [pid 5158] <... futex resumed>) = 0 [pid 5157] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5157] close(8 [pid 4999] close(4 [pid 4998] fstat(3, ./strace-static-x86_64: Process 5159 attached [pid 5158] <... mmap resumed>) = 0x7f7cb894f000 [pid 5157] <... close resumed>) = 0 [pid 5156] <... write resumed>) = 4194304 [pid 4999] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5159] set_robust_list(0x7f7cb094e9e0, 24 [pid 5158] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5157] close(7 [pid 5156] munmap(0x7f7ca852e000, 4194304 [pid 4999] rmdir("./5/file0" [pid 5159] <... set_robust_list resumed>) = 0 [pid 5158] <... mprotect resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5158] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5158] <... clone resumed>, parent_tid=[5160], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5160 [pid 4999] close(3 [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5158] <... futex resumed>) = 0 [pid 4999] rmdir("./5" [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./6", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5161 ./strace-static-x86_64: Process 5161 attached ./strace-static-x86_64: Process 5160 attached [pid 5161] set_robust_list(0x55555710d5e0, 24 [pid 5160] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5160] getuid() = 0 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 1 [pid 5160] memfd_create("syzkaller", 0 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5161] chdir("./6" [pid 5160] <... memfd_create resumed>) = 3 [pid 5161] <... chdir resumed>) = 0 [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5161] setpgid(0, 0) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5157] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5161] <... openat resumed>) = 3 [pid 4998] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] write(3, "1000", 4) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5161] close(3) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] lstat("./5/binderfs", [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] unlink("./5/binderfs" [pid 5161] <... mmap resumed>) = 0x7f7cb894f000 [pid 5161] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 4998] <... unlink resumed>) = 0 [pid 5161] <... mprotect resumed>) = 0 [pid 5159] ftruncate(-1, 18446744073709551609 [pid 5156] <... munmap resumed>) = 0 [pid 5161] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5159] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5156] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb090d000 [pid 5161] <... clone resumed>, parent_tid=[5162], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5162 [pid 5141] mprotect(0x7f7cb090e000, 131072, PROT_READ|PROT_WRITE [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... mprotect resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [pid 5159] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 1 [pid 5141] clone(child_stack=0x7f7cb092d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5140] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5162 attached [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... futex resumed>) = 0 [pid 5156] <... openat resumed>) = 8 [pid 5162] set_robust_list(0x7f7cb896f9e0, 24 [pid 5159] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] ioctl(8, LOOP_SET_FD, 7 [pid 5140] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... set_robust_list resumed>) = 0 [pid 5156] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5141] <... clone resumed>, parent_tid=[5163], tls=0x7f7cb092d700, child_tidptr=0x7f7cb092d9d0) = 5163 [pid 5140] <... futex resumed>) = 0 [pid 5162] getuid( [pid 5156] ioctl(8, LOOP_CLR_FD [pid 5141] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... getuid resumed>) = 0 [pid 5156] <... ioctl resumed>) = 0 [pid 5141] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5163 attached [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5141] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5163] set_robust_list(0x7f7cb092d9e0, 24 [pid 5162] <... futex resumed>) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5162] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] close(8) = 0 [pid 5156] close(7 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5162] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 1 [pid 5163] memfd_create("syzkaller", 0 [pid 5162] memfd_create("syzkaller", 0 [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5163] <... memfd_create resumed>) = 7 [pid 5162] <... memfd_create resumed>) = 3 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5157] <... open resumed>) = 7 [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5163] <... mmap resumed>) = 0x7f7ca850d000 [pid 5162] <... mmap resumed>) = 0x7f7cb054f000 [pid 5157] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5144] <... sendfile resumed>) = 983040 [pid 5140] <... futex resumed>) = 0 [pid 5157] creat("./file0", 000 [pid 5144] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... creat resumed>) = 8 [pid 5157] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = 1 [pid 5144] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... futex resumed>) = 0 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5157] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] exit_group(0 [pid 5157] <... futex resumed>) = ? [pid 5144] <... futex resumed>) = ? [pid 5140] <... exit_group resumed>) = ? [pid 5157] +++ exited with 0 +++ [pid 5156] <... close resumed>) = 0 [pid 5144] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 4998] <... umount2 resumed>) = 0 [pid 5003] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 4998] lstat("./5/file0", [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./5/binderfs", [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./5/binderfs" [pid 4998] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... unlink resumed>) = 0 [pid 5163] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5156] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 5156] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5143] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4998] fstat(4, [pid 5143] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./5/file0") = 0 [pid 4998] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./5") = 0 [pid 4998] mkdir("./6", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 4998] <... close resumed>) = 0 [pid 5156] <... open resumed>) = 7 [pid 5156] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5164 [pid 5156] <... futex resumed>) = 1 [pid 5156] creat("./file0", 000) = 8 [pid 5156] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5156] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5164] chdir("./6") = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5164] setpgid(0, 0) = 0 [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... sendfile resumed>) = 1114112 [pid 5164] <... futex resumed>) = 0 [pid 5146] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5146] <... futex resumed>) = 0 [pid 5164] <... mmap resumed>) = 0x7f7cb894f000 [pid 5160] <... write resumed>) = 4194304 [pid 5146] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5003] <... umount2 resumed>) = 0 [pid 5164] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5163] <... write resumed>) = 4194304 [pid 5160] munmap(0x7f7cb054f000, 4194304 [pid 5143] exit_group(0 [pid 5164] <... mprotect resumed>) = 0 [pid 5156] <... futex resumed>) = ? [pid 5146] <... futex resumed>) = ? [pid 5143] <... exit_group resumed>) = ? [pid 5164] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5160] <... munmap resumed>) = 0 [pid 5156] +++ exited with 0 +++ [pid 5146] +++ exited with 0 +++ [pid 5143] +++ exited with 0 +++ [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5164] <... clone resumed>, parent_tid=[5165], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5165 [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... openat resumed>) = 4 [pid 5164] <... futex resumed>) = 0 [pid 5163] munmap(0x7f7ca850d000, 4194304 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5165 attached [pid 5165] set_robust_list(0x7f7cb896f9e0, 24 [pid 5163] <... munmap resumed>) = 0 [pid 5165] <... set_robust_list resumed>) = 0 [pid 5165] getuid() = 0 [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = 0 [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5165] <... futex resumed>) = 1 [pid 5165] memfd_create("syzkaller", 0) = 3 [pid 5163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5162] <... write resumed>) = 4194304 [pid 5160] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] <... openat resumed>) = 8 [pid 5003] lstat("./5/file0", [pid 5163] ioctl(8, LOOP_SET_FD, 7 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5163] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] ioctl(8, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5163] <... ioctl resumed>) = 0 [pid 5160] close(3 [pid 5003] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5165] <... mmap resumed>) = 0x7f7cb054f000 [pid 5162] munmap(0x7f7cb054f000, 4194304 [pid 5160] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] mkdir("./file0", 0777 [pid 5003] fstat(4, [pid 5000] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5163] ioctl(8, LOOP_SET_FD, 7 [pid 5160] <... mkdir resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5163] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5160] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] getdents64(4, [pid 5000] fstat(3, [pid 5163] close(8 [pid 5162] <... munmap resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5163] <... close resumed>) = 0 [pid 5000] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./5/binderfs") = 0 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [ 50.212362][ T5160] loop4: detected capacity change from 0 to 8192 [ 50.247121][ T5160] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5163] close(7 [pid 5162] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] getdents64(4, [pid 5162] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5162] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(4) = 0 [pid 5003] rmdir("./5/file0") = 0 [pid 5003] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./5") = 0 [pid 5003] mkdir("./6", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 5000] <... umount2 resumed>) = 0 [pid 5162] <... ioctl resumed>) = 0 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] set_robust_list(0x55555710d5e0, 24 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5167] <... set_robust_list resumed>) = 0 [ 50.267522][ T5160] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 50.268194][ T5162] loop1: detected capacity change from 0 to 8192 [ 50.277642][ T5160] REISERFS (device loop4): using ordered data mode [ 50.304865][ T5160] reiserfs: using flush barriers [pid 5167] chdir("./6" [pid 5162] close(3 [pid 5000] lstat("./5/file0", [pid 5162] <... close resumed>) = 0 [pid 5162] mkdir("./file0", 0777) = 0 [pid 5162] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5163] <... close resumed>) = 0 [pid 5163] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5141] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 1 [pid 5163] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... futex resumed>) = 0 [pid 5159] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5167] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] <... prctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5167] setpgid(0, 0 [pid 5000] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5167] <... setpgid resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5167] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 5167] write(3, "1000", 4 [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5167] <... write resumed>) = 4 [pid 5167] close(3 [pid 5000] getdents64(4, [pid 5167] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 5167] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... close resumed>) = 0 [pid 5167] <... symlink resumed>) = 0 [pid 5000] rmdir("./5/file0") = 0 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] getdents64(3, [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5167] <... mmap resumed>) = 0x7f7cb894f000 [pid 5000] close(3 [pid 5167] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5000] <... close resumed>) = 0 [pid 5159] <... open resumed>) = 7 [pid 5159] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5141] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... futex resumed>) = 1 [pid 5159] creat("./file0", 000) = 8 [pid 5159] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [ 50.317186][ T5160] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.334876][ T5160] REISERFS (device loop4): checking transaction log (loop4) [ 50.352483][ T5160] REISERFS (device loop4): Using r5 hash to sort names [pid 5159] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] <... write resumed>) = 4194304 [pid 5165] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5165] ioctl(4, LOOP_SET_FD, 3 [pid 5167] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5160] <... mount resumed>) = 0 [pid 5000] rmdir("./5" [pid 5165] <... ioctl resumed>) = 0 [pid 5165] close(3) = 0 [pid 5165] mkdir("./file0", 0777) = 0 [pid 5165] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5167] <... clone resumed>, parent_tid=[5169], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5169 [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5169] getuid() = 0 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5169] <... futex resumed>) = 1 [pid 5169] memfd_create("syzkaller", 0) = 3 [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./6", 0777 [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 5160] <... openat resumed>) = 3 [pid 5160] chdir("./file0" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5169] <... mmap resumed>) = 0x7f7cb054f000 [pid 5160] <... chdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5147] <... sendfile resumed>) = 1114112 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5160] <... ioctl resumed>) = 0 [pid 5147] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 50.360562][ T5162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.367060][ T5165] loop0: detected capacity change from 0 to 8192 [ 50.374417][ T5162] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 50.391813][ T5162] REISERFS (device loop1): using ordered data mode [ 50.391881][ T5165] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.398450][ T5162] reiserfs: using flush barriers [pid 5147] <... futex resumed>) = 0 [pid 5141] exit_group(0 [pid 5163] <... futex resumed>) = ? [pid 5159] <... futex resumed>) = ? [pid 5141] <... exit_group resumed>) = ? [pid 5163] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ [pid 5141] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./5/binderfs") = 0 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] close(4 [pid 5000] close(3 [pid 5160] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 50.417960][ T5162] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.435291][ T5162] REISERFS (device loop1): checking transaction log (loop1) [ 50.443072][ T5165] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 50.454227][ T5165] REISERFS (device loop0): using ordered data mode [ 50.457793][ T5162] REISERFS (device loop1): Using r5 hash to sort names [pid 5160] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5171 [pid 5160] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, ""./strace-static-x86_64: Process 5171 attached [pid 5171] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5171] chdir("./6" [pid 5162] <... mount resumed>) = 0 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5162] chdir("./file0") = 0 [pid 5162] ioctl(4, LOOP_CLR_FD) = 0 [pid 5162] close(4) = 0 [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5162] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] <... futex resumed>) = 0 [pid 5162] mkdir(".", 0777 [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5162] <... mkdir resumed>) = -1 EEXIST (File exists) [ 50.461037][ T5165] reiserfs: using flush barriers [ 50.473299][ T5160] reiserfs: enabling write barrier flush mode [ 50.484013][ T5160] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5162] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5171] <... chdir resumed>) = 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5171] setpgid(0, 0) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5171] write(3, "1000", 4) = 4 [pid 5171] close(3) = 0 [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./5/file0", [pid 5171] <... futex resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 50.510187][ T5165] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.510286][ T5162] reiserfs: enabling write barrier flush mode [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5160] <... mount resumed>) = 0 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... mmap resumed>) = 0x7f7cb894f000 [pid 5160] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5171] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5160] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] <... mprotect resumed>) = 0 [pid 5169] <... write resumed>) = 4194304 [pid 5160] chdir("." [pid 5001] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5162] <... mount resumed>) = 0 [pid 5171] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5169] munmap(0x7f7cb054f000, 4194304 [pid 5165] <... mount resumed>) = 0 [pid 5162] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5160] <... chdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5172 attached [pid 5169] <... munmap resumed>) = 0 [pid 5165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5162] <... openat resumed>) = 4 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] fstat(4, [pid 5172] set_robust_list(0x7f7cb896f9e0, 24 [pid 5171] <... clone resumed>, parent_tid=[5172], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5172 [pid 5169] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5165] <... openat resumed>) = 3 [pid 5162] chdir("." [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] <... set_robust_list resumed>) = 0 [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... openat resumed>) = 4 [pid 5165] chdir("./file0" [pid 5162] <... chdir resumed>) = 0 [pid 5160] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] getdents64(4, [pid 5172] getuid( [pid 5171] <... futex resumed>) = 0 [pid 5169] ioctl(4, LOOP_SET_FD, 3 [pid 5165] <... chdir resumed>) = 0 [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... futex resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5172] <... getuid resumed>) = 0 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... ioctl resumed>) = 0 [pid 5165] ioctl(4, LOOP_CLR_FD [pid 5162] <... futex resumed>) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] getdents64(4, [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] close(3 [pid 5165] <... ioctl resumed>) = 0 [pid 5162] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... open resumed>) = 5 [pid 5001] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... close resumed>) = 0 [pid 5165] close(4 [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] <... futex resumed>) = 0 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] close(4 [pid 5172] memfd_create("syzkaller", 0 [pid 5171] <... futex resumed>) = 0 [pid 5165] <... close resumed>) = 0 [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... memfd_create resumed>) = 3 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5169] mkdir("./file0", 0777 [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5160] <... futex resumed>) = 1 [pid 5001] <... close resumed>) = 0 [pid 5169] <... mkdir resumed>) = 0 [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [ 50.558551][ T5165] REISERFS (device loop0): checking transaction log (loop0) [ 50.558762][ T5162] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 50.576052][ T5165] REISERFS (device loop0): Using r5 hash to sort names [ 50.595244][ T5169] loop5: detected capacity change from 0 to 8192 [pid 5162] <... open resumed>) = 5 [pid 5160] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... futex resumed>) = 0 [pid 5001] rmdir("./5/file0" [pid 5169] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5165] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... rmdir resumed>) = 0 [pid 5165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5164] <... futex resumed>) = 0 [pid 5162] <... futex resumed>) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5001] getdents64(3, [pid 5165] mkdir(".", 0777 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5162] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5165] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] <... futex resumed>) = 0 [pid 5160] <... open resumed>) = 6 [pid 5001] close(3 [pid 5165] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5162] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... close resumed>) = 0 [pid 5162] <... open resumed>) = 6 [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5001] rmdir("./5" [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... rmdir resumed>) = 0 [pid 5162] <... futex resumed>) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5001] mkdir("./6", 0777 [pid 5162] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... mkdir resumed>) = 0 [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] <... futex resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5162] ftruncate(6, 33587199 [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5162] <... ftruncate resumed>) = 0 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... futex resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5162] <... futex resumed>) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5160] ftruncate(6, 33587199 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5174 [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] <... futex resumed>) = 0 [pid 5162] sendfile(5, 6, NULL, 281474978811909 [pid 5161] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... ftruncate resumed>) = 0 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5174 attached [pid 5174] set_robust_list(0x55555710d5e0, 24 [pid 5160] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5160] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... futex resumed>) = 0 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5174] chdir("./6" [pid 5160] sendfile(5, 6, NULL, 281474978811909 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... chdir resumed>) = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 50.620059][ T5165] reiserfs: enabling write barrier flush mode [ 50.629598][ T5169] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.640718][ T5165] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5174] write(3, "1000", 4) = 4 [pid 5174] close(3) = 0 [pid 5174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5174] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5174] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5165] <... mount resumed>) = 0 [pid 5174] <... clone resumed>, parent_tid=[5175], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5175 [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5175 attached [pid 5175] set_robust_list(0x7f7cb896f9e0, 24 [pid 5165] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5165] chdir(".") = 0 [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5165] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5164] <... futex resumed>) = 0 [pid 5165] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5165] <... open resumed>) = 5 [pid 5161] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = 0 [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] <... set_robust_list resumed>) = 0 [pid 5165] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... mmap resumed>) = 0x7f7cb092e000 [pid 5158] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] getuid( [pid 5172] <... write resumed>) = 4194304 [pid 5165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5164] <... futex resumed>) = 0 [pid 5161] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5158] <... futex resumed>) = 0 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] munmap(0x7f7cb054f000, 4194304 [pid 5161] <... mprotect resumed>) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5161] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5158] <... mmap resumed>) = 0x7f7cb092e000 [pid 5158] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5161] <... clone resumed>, parent_tid=[5176], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5176 [pid 5158] <... mprotect resumed>) = 0 [pid 5161] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5161] <... futex resumed>) = 0 [ 50.667579][ T5169] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 50.676857][ T5169] REISERFS (device loop5): using ordered data mode [ 50.683388][ T5169] reiserfs: using flush barriers [ 50.691507][ T5169] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.707845][ T5169] REISERFS (device loop5): checking transaction log (loop5) [pid 5165] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000./strace-static-x86_64: Process 5177 attached ./strace-static-x86_64: Process 5176 attached [pid 5175] <... getuid resumed>) = 0 [pid 5165] <... open resumed>) = 6 [pid 5161] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... clone resumed>, parent_tid=[5177], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5177 [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5158] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] ftruncate(6, 33587199 [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5169] <... mount resumed>) = 0 [pid 5165] <... ftruncate resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5158] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... munmap resumed>) = 0 [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] set_robust_list(0x7f7cb094e9e0, 24 [pid 5176] set_robust_list(0x7f7cb094e9e0, 24 [pid 5172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5169] <... openat resumed>) = 3 [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5176] <... set_robust_list resumed>) = 0 [pid 5175] <... futex resumed>) = 1 [pid 5174] <... futex resumed>) = 0 [pid 5172] <... openat resumed>) = 4 [pid 5169] chdir("./file0" [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] sendfile(5, 6, NULL, 281474978811909 [pid 5174] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5177] ftruncate(-1, 18446744073709551609 [pid 5176] ftruncate(-1, 18446744073709551609 [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5169] <... chdir resumed>) = 0 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5177] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] ioctl(4, LOOP_CLR_FD [pid 5177] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5177] memfd_create("syzkaller", 0 [pid 5176] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5169] <... ioctl resumed>) = 0 [pid 5177] <... memfd_create resumed>) = 7 [pid 5176] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] close(4 [pid 5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5176] <... futex resumed>) = 0 [pid 5175] <... write resumed>) = 4194304 [pid 5172] <... ioctl resumed>) = 0 [pid 5161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5176] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] munmap(0x7f7cb054f000, 4194304 [pid 5172] close(3 [pid 5161] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... mmap resumed>) = 0x7f7ca852e000 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... munmap resumed>) = 0 [pid 5172] <... close resumed>) = 0 [pid 5169] <... close resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [pid 5176] memfd_create("syzkaller", 0 [pid 5175] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5172] mkdir("./file0", 0777 [pid 5161] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] <... memfd_create resumed>) = 7 [pid 5175] <... openat resumed>) = 4 [pid 5172] <... mkdir resumed>) = 0 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5175] ioctl(4, LOOP_SET_FD, 3 [ 50.725525][ T5169] REISERFS (device loop5): Using r5 hash to sort names [ 50.755362][ T5172] loop2: detected capacity change from 0 to 8192 [pid 5172] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5176] <... mmap resumed>) = 0x7f7ca852e000 [pid 5175] <... ioctl resumed>) = 0 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5169] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] close(3 [pid 5169] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... close resumed>) = 0 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5175] mkdir("./file0", 0777 [pid 5169] mkdir(".", 0777 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5164] <... mmap resumed>) = 0x7f7cb092e000 [ 50.788640][ T5175] loop3: detected capacity change from 0 to 8192 [ 50.800032][ T5172] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.824909][ T5172] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [pid 5169] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5164] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5175] <... mkdir resumed>) = 0 [pid 5164] <... mprotect resumed>) = 0 [pid 5175] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5164] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5180], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5180 [pid 5164] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... write resumed>) = 4194304 [pid 5177] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5177] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 5177] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5177] ioctl(8, LOOP_CLR_FD) = 0 [ 50.840839][ T5169] reiserfs: enabling write barrier flush mode [ 50.853824][ T5175] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.881249][ T5169] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. ./strace-static-x86_64: Process 5180 attached [pid 5176] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5177] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5177] close(8 [pid 5180] set_robust_list(0x7f7cb094e9e0, 24 [pid 5164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5164] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5180] ftruncate(-1, 18446744073709551609 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5180] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5164] <... mmap resumed>) = 0x7f7cb090d000 [pid 5180] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] mprotect(0x7f7cb090e000, 131072, PROT_READ|PROT_WRITE [pid 5180] <... futex resumed>) = 0 [pid 5164] <... mprotect resumed>) = 0 [pid 5180] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] clone(child_stack=0x7f7cb092d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5177] <... close resumed>) = 0 [pid 5164] <... clone resumed>, parent_tid=[5181], tls=0x7f7cb092d700, child_tidptr=0x7f7cb092d9d0) = 5181 [pid 5164] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5181 attached [pid 5177] close(7 [ 50.892965][ T5175] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 50.914832][ T5172] REISERFS (device loop2): using ordered data mode [ 50.921400][ T5172] reiserfs: using flush barriers [pid 5164] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5181] set_robust_list(0x7f7cb092d9e0, 24 [pid 5177] <... close resumed>) = 0 [pid 5176] <... write resumed>) = 4194304 [pid 5169] <... mount resumed>) = 0 [pid 5181] <... set_robust_list resumed>) = 0 [pid 5177] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5181] memfd_create("syzkaller", 0 [pid 5177] <... futex resumed>) = 1 [pid 5169] <... openat resumed>) = 4 [pid 5181] <... memfd_create resumed>) = 7 [pid 5177] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] chdir("." [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5169] <... chdir resumed>) = 0 [pid 5181] <... mmap resumed>) = 0x7f7ca850d000 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 0 [pid 5169] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... open resumed>) = 5 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5169] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... open resumed>) = 6 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5169] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5169] ftruncate(6, 33587199 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... ftruncate resumed>) = 0 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5169] sendfile(5, 6, NULL, 281474978811909 [pid 5167] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] munmap(0x7f7ca852e000, 4194304 [pid 5177] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5158] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... munmap resumed>) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5160] <... sendfile resumed>) = 589824 [pid 5176] <... openat resumed>) = 8 [pid 5176] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5176] ioctl(8, LOOP_CLR_FD) = 0 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5176] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [ 50.931910][ T5172] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.948387][ T5175] REISERFS (device loop3): using ordered data mode [ 50.948398][ T5175] reiserfs: using flush barriers [ 50.960936][ T5175] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5176] close(8 [pid 5177] <... open resumed>) = 7 [pid 5176] <... close resumed>) = 0 [pid 5176] close(7 [pid 5177] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5160] creat("./file0", 000 [pid 5158] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... creat resumed>) = 8 [pid 5160] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5158] exit_group(0) = ? [pid 5177] <... futex resumed>) = ? [pid 5177] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5158] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5167] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5002] <... restart_syscall resumed>) = 0 [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5167] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5167] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5182], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5182 [pid 5167] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5176] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [ 50.996069][ T5175] REISERFS (device loop3): checking transaction log (loop3) [ 51.005342][ T5175] REISERFS (device loop3): Using r5 hash to sort names [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5181] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5175] <... mount resumed>) = 0 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5182] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5182] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5182] <... futex resumed>) = 1 [pid 5182] memfd_create("syzkaller", 0) = 7 [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5002] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = 0 [pid 5161] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 1 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./6/binderfs") = 0 [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5175] chdir("./file0") = 0 [pid 5175] ioctl(4, LOOP_CLR_FD) = 0 [pid 5175] close(4) = 0 [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5174] <... futex resumed>) = 0 [pid 5175] mkdir(".", 0777 [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5174] <... futex resumed>) = 0 [pid 5175] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [ 51.038064][ T5172] REISERFS (device loop2): checking transaction log (loop2) [ 51.073822][ T5175] reiserfs: enabling write barrier flush mode [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] <... open resumed>) = 7 [pid 5176] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = 0 [pid 5161] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 1 [pid 5176] creat("./file0", 000) = 8 [pid 5176] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5176] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] <... sendfile resumed>) = 851968 [pid 5162] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] exit_group(0 [pid 5176] <... futex resumed>) = ? [pid 5162] <... futex resumed>) = ? [pid 5161] <... exit_group resumed>) = ? [pid 5176] +++ exited with 0 +++ [pid 5162] +++ exited with 0 +++ [pid 5161] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 4999] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 5182] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5181] <... write resumed>) = 4194304 [pid 5175] <... mount resumed>) = 0 [pid 5172] <... mount resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5181] munmap(0x7f7ca850d000, 4194304 [pid 5175] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] getdents64(3, [pid 5175] <... openat resumed>) = 4 [pid 5172] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5172] chdir("./file0" [pid 5181] <... munmap resumed>) = 0 [pid 5175] chdir("." [pid 5172] <... chdir resumed>) = 0 [pid 4999] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5175] <... chdir resumed>) = 0 [pid 5172] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] <... openat resumed>) = 8 [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... ioctl resumed>) = 0 [pid 5175] <... futex resumed>) = 1 [pid 4999] lstat("./6/binderfs", [pid 5174] <... futex resumed>) = 0 [pid 5181] ioctl(8, LOOP_SET_FD, 7 [pid 5175] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5181] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... close resumed>) = 0 [pid 4999] unlink("./6/binderfs" [pid 5181] ioctl(8, LOOP_CLR_FD [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5174] <... futex resumed>) = 0 [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... ioctl resumed>) = 0 [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5175] <... open resumed>) = 5 [pid 5172] mkdir(".", 0777 [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... futex resumed>) = 1 [pid 5174] <... futex resumed>) = 0 [ 51.083881][ T5172] REISERFS (device loop2): Using r5 hash to sort names [ 51.108164][ T5175] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5172] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5171] <... futex resumed>) = 0 [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5182] <... write resumed>) = 4194304 [pid 5175] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5174] <... futex resumed>) = 0 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = 0 [pid 5182] munmap(0x7f7ca852e000, 4194304 [pid 5181] ioctl(8, LOOP_SET_FD, 7 [pid 5175] <... open resumed>) = 6 [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... munmap resumed>) = 0 [pid 5181] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5182] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5181] close(8 [pid 5175] <... futex resumed>) = 0 [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] lstat("./6/file0", [pid 5182] <... openat resumed>) = 8 [pid 5181] <... close resumed>) = 0 [pid 5182] ioctl(8, LOOP_SET_FD, 7 [pid 5175] ftruncate(6, 33587199 [pid 5174] <... futex resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5182] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5181] close(7 [pid 5175] <... ftruncate resumed>) = 0 [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] ioctl(8, LOOP_CLR_FD [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... ioctl resumed>) = 0 [pid 5174] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... futex resumed>) = 1 [pid 5002] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5174] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] <... futex resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5175] sendfile(5, 6, NULL, 281474978811909 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5181] <... close resumed>) = 0 [pid 5172] <... mount resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] <... umount2 resumed>) = 0 [pid 5182] ioctl(8, LOOP_SET_FD, 7 [pid 5002] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5182] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5002] getdents64(4, [pid 5182] close(8 [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5182] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [ 51.188505][ T5172] reiserfs: enabling write barrier flush mode [ 51.201631][ T5172] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5182] close(7 [pid 5002] rmdir("./6/file0") = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./6") = 0 [pid 5002] mkdir("./7", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5181] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5181] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5181] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 5180] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = 1 [pid 5002] <... close resumed>) = 0 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5164] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5172] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5183 [pid 5172] <... openat resumed>) = 4 [pid 5172] chdir("." [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5183 attached [pid 5180] <... open resumed>) = 7 [pid 5174] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5172] <... chdir resumed>) = 0 [pid 5174] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... futex resumed>) = 0 [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./6/file0", [pid 5183] set_robust_list(0x55555710d5e0, 24 [pid 5180] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... mmap resumed>) = 0x7f7cb092e000 [pid 5172] <... open resumed>) = 5 [pid 5171] <... futex resumed>) = 0 [pid 5165] <... sendfile resumed>) = 1114112 [pid 5183] <... set_robust_list resumed>) = 0 [pid 5180] <... futex resumed>) = 1 [pid 5174] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5183] chdir("./7" [pid 5182] <... close resumed>) = 0 [pid 5180] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] <... mprotect resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] <... futex resumed>) = 0 [pid 5164] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] <... chdir resumed>) = 0 [pid 5174] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5172] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] creat("./file0", 000 [pid 5164] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5184 attached [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5182] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = 0 [pid 5165] <... creat resumed>) = 8 [pid 5164] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5184] set_robust_list(0x7f7cb094e9e0, 24 [pid 5183] <... prctl resumed>) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5174] <... clone resumed>, parent_tid=[5184], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5184 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... futex resumed>) = 0 [pid 5165] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... openat resumed>) = 4 [pid 5184] <... set_robust_list resumed>) = 0 [pid 5183] setpgid(0, 0 [pid 5182] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... open resumed>) = 6 [pid 5167] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... futex resumed>) = 0 [pid 5164] exit_group(0 [pid 4999] fstat(4, [pid 5184] ftruncate(-1, 18446744073709551609 [pid 5183] <... setpgid resumed>) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5181] <... futex resumed>) = ? [pid 5174] <... futex resumed>) = 0 [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = ? [pid 5167] <... futex resumed>) = 0 [pid 5164] <... exit_group resumed>) = ? [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5182] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5181] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5174] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5167] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] +++ exited with 0 +++ [pid 5184] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... openat resumed>) = 3 [pid 5184] <... futex resumed>) = 0 [pid 5183] write(3, "1000", 4 [pid 5184] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] <... write resumed>) = 4 [pid 5164] +++ exited with 0 +++ [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] ftruncate(6, 33587199 [pid 5183] close(3 [pid 5174] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 4999] getdents64(4, [pid 5183] <... close resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5174] <... futex resumed>) = 1 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5183] <... symlink resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 0 [pid 5174] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5172] <... ftruncate resumed>) = 0 [pid 4999] getdents64(4, [pid 5184] memfd_create("syzkaller", 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] <... memfd_create resumed>) = 7 [pid 5183] <... mmap resumed>) = 0x7f7cb894f000 [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5183] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5184] <... mmap resumed>) = 0x7f7ca852e000 [pid 5183] <... mprotect resumed>) = 0 [pid 5172] sendfile(5, 6, NULL, 281474978811909 [pid 5171] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./6/file0" [pid 4998] <... openat resumed>) = 3 [pid 5183] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5183] <... clone resumed>, parent_tid=[5185], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5185 [pid 4998] getdents64(3, [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5183] <... futex resumed>) = 0 [pid 4998] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5185 attached [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5182] <... open resumed>) = 7 [pid 4998] unlink("./6/binderfs" [pid 5185] set_robust_list(0x7f7cb896f9e0, 24 [pid 5182] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... unlink resumed>) = 0 [pid 5185] <... set_robust_list resumed>) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5171] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... futex resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] getuid( [pid 5184] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5182] creat("./file0", 000 [pid 5167] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5185] <... getuid resumed>) = 0 [pid 5182] <... creat resumed>) = 8 [pid 5167] <... futex resumed>) = 0 [pid 5182] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] close(3 [pid 5185] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5185] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] rmdir("./6" [pid 5183] <... futex resumed>) = 0 [pid 5185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4999] <... rmdir resumed>) = 0 [pid 5185] memfd_create("syzkaller", 0 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] mkdir("./7", 0777 [pid 5185] <... memfd_create resumed>) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5185] <... mmap resumed>) = 0x7f7cb054f000 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5184] <... write resumed>) = 4194304 [pid 5171] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] <... sendfile resumed>) = 851968 [pid 4999] <... close resumed>) = 0 [pid 5169] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] exit_group(0 [pid 5171] <... futex resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5182] <... futex resumed>) = ? [pid 5169] <... futex resumed>) = ? [pid 5167] <... exit_group resumed>) = ? [pid 5184] munmap(0x7f7ca852e000, 4194304 [pid 5182] +++ exited with 0 +++ [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5003] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./6/binderfs") = 0 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] <... munmap resumed>) = 0 [pid 5171] <... mmap resumed>) = 0x7f7cb092e000 [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5186 [pid 4998] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5186 attached [pid 5184] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5171] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5186] set_robust_list(0x55555710d5e0, 24 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5184] <... openat resumed>) = 8 [pid 5171] <... mprotect resumed>) = 0 [pid 5186] <... set_robust_list resumed>) = 0 [pid 5184] ioctl(8, LOOP_SET_FD, 7 [pid 5171] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5186] chdir("./7" [pid 5184] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5186] <... chdir resumed>) = 0 [pid 5184] ioctl(8, LOOP_CLR_FD [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5184] <... ioctl resumed>) = 0 [pid 5171] <... clone resumed>, parent_tid=[5187], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5187 [pid 5186] <... prctl resumed>) = 0 [pid 5171] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5184] ioctl(8, LOOP_SET_FD, 7./strace-static-x86_64: Process 5187 attached [pid 5186] <... openat resumed>) = 3 [pid 5184] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5171] <... futex resumed>) = 0 [pid 5187] set_robust_list(0x7f7cb094e9e0, 24 [pid 5186] write(3, "1000", 4 [pid 5184] close(8 [pid 5171] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] <... set_robust_list resumed>) = 0 [pid 5186] <... write resumed>) = 4 [pid 5184] <... close resumed>) = 0 [pid 5187] ftruncate(-1, 18446744073709551609 [pid 5186] close(3 [pid 5184] close(7 [pid 5187] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5186] <... close resumed>) = 0 [pid 5187] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] symlink("/dev/binderfs", "./binderfs" [pid 5187] <... futex resumed>) = 1 [pid 5186] <... symlink resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5187] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5171] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] <... mprotect resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5187] memfd_create("syzkaller", 0 [pid 5186] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5184] <... close resumed>) = 0 [pid 5171] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] <... memfd_create resumed>) = 7 [pid 4998] lstat("./6/file0", [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5186] <... clone resumed>, parent_tid=[5188], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5188 [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... mmap resumed>) = 0x7f7ca852e000 [pid 5186] <... futex resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5188 attached [pid 5188] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5188] getuid() = 0 [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5188] <... futex resumed>) = 1 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5187] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5003] lstat("./6/file0", [pid 4998] <... openat resumed>) = 4 [pid 5184] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] <... futex resumed>) = 1 [pid 5174] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 4 [pid 4998] getdents64(4, [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 4998] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./6/file0" [pid 5185] <... write resumed>) = 4194304 [pid 5185] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5184] <... open resumed>) = 7 [pid 5184] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] <... futex resumed>) = 1 [pid 5184] creat("./file0", 000) = 8 [pid 5184] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5184] <... futex resumed>) = 1 [pid 5184] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5185] <... ioctl resumed>) = 0 [pid 5003] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5185] close(3 [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 5185] <... close resumed>) = 0 [pid 5003] close(4 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5185] mkdir("./file0", 0777 [pid 5003] <... close resumed>) = 0 [pid 4998] close(3 [pid 5185] <... mkdir resumed>) = 0 [pid 5003] rmdir("./6/file0" [pid 4998] <... close resumed>) = 0 [pid 5185] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... rmdir resumed>) = 0 [pid 4998] rmdir("./6" [pid 5003] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 4998] mkdir("./7", 0777 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./6" [pid 4998] <... mkdir resumed>) = 0 [pid 5187] <... write resumed>) = 4194304 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5187] munmap(0x7f7ca852e000, 4194304 [pid 5003] <... rmdir resumed>) = 0 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5003] mkdir("./7", 0777 [pid 4998] <... openat resumed>) = 3 [pid 5003] <... mkdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4998] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 5003] close(3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5175] <... sendfile resumed>) = 655360 [pid 5003] <... close resumed>) = 0 [pid 5175] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] exit_group(0 [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5190 [pid 5184] <... futex resumed>) = ? [pid 5175] <... futex resumed>) = ? [pid 5174] <... exit_group resumed>) = ? [pid 5184] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ [pid 5174] +++ exited with 0 +++ [pid 5187] <... munmap resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5191 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5187] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 8 [pid 5187] ioctl(8, LOOP_SET_FD, 7 [pid 5001] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] ioctl(8, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5187] <... ioctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5187] ioctl(8, LOOP_SET_FD, 7 [pid 5001] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5187] close(8 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] <... close resumed>) = 0 [pid 5001] lstat("./6/binderfs", ./strace-static-x86_64: Process 5191 attached [pid 5187] close(7 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5190 attached [pid 5191] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5190] set_robust_list(0x55555710d5e0, 24 [pid 5191] chdir("./7" [pid 5190] <... set_robust_list resumed>) = 0 [pid 5191] <... chdir resumed>) = 0 [pid 5190] chdir("./7" [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5190] <... chdir resumed>) = 0 [pid 5191] <... prctl resumed>) = 0 [ 51.536799][ T5185] loop4: detected capacity change from 0 to 8192 [ 51.555374][ T5185] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5191] setpgid(0, 0 [pid 5190] <... prctl resumed>) = 0 [pid 5001] unlink("./6/binderfs" [pid 5191] <... setpgid resumed>) = 0 [pid 5190] setpgid(0, 0 [pid 5001] <... unlink resumed>) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5190] <... setpgid resumed>) = 0 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... openat resumed>) = 3 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5191] write(3, "1000", 4 [pid 5190] <... openat resumed>) = 3 [pid 5191] <... write resumed>) = 4 [pid 5190] write(3, "1000", 4 [pid 5191] close(3 [pid 5190] <... write resumed>) = 4 [pid 5191] <... close resumed>) = 0 [pid 5190] close(3 [pid 5191] symlink("/dev/binderfs", "./binderfs" [pid 5190] <... close resumed>) = 0 [ 51.602256][ T5185] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 51.626965][ T5185] REISERFS (device loop4): using ordered data mode [ 51.633753][ T5185] reiserfs: using flush barriers [pid 5191] <... symlink resumed>) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs" [pid 5188] <... write resumed>) = 4194304 [pid 5187] <... close resumed>) = 0 [pid 5188] munmap(0x7f7cb054f000, 4194304 [pid 5187] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... munmap resumed>) = 0 [pid 5187] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5187] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... openat resumed>) = 4 [pid 5187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = 0 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5187] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5171] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... symlink resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5190] <... futex resumed>) = 0 [pid 5191] <... mmap resumed>) = 0x7f7cb894f000 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5191] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5190] <... mmap resumed>) = 0x7f7cb894f000 [pid 5191] <... mprotect resumed>) = 0 [pid 5190] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5191] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5190] <... mprotect resumed>) = 0 [pid 5190] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5191] <... clone resumed>, parent_tid=[5192], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5192 [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... clone resumed>, parent_tid=[5193], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5193 [pid 5191] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... open resumed>) = 7 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5193 attached [pid 5193] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5193] getuid(./strace-static-x86_64: Process 5192 attached ) = 0 [pid 5192] set_robust_list(0x7f7cb896f9e0, 24 [pid 5187] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = 0 [ 51.647586][ T5185] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.651994][ T5188] loop1: detected capacity change from 0 to 8192 [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... set_robust_list resumed>) = 0 [pid 5187] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = 1 [pid 5192] getuid( [pid 5190] <... futex resumed>) = 0 [pid 5187] creat("./file0", 000 [pid 5171] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] memfd_create("syzkaller", 0 [pid 5192] <... getuid resumed>) = 0 [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... creat resumed>) = 8 [pid 5171] <... futex resumed>) = 0 [pid 5193] <... memfd_create resumed>) = 3 [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5187] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5187] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] close(3 [pid 5001] lstat("./6/file0", [pid 5188] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5188] mkdir("./file0", 0777 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] <... mkdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5001] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./6/file0") = 0 [pid 5001] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] close(3) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5001] rmdir("./6" [pid 5192] memfd_create("syzkaller", 0 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./7", 0777 [pid 5192] <... memfd_create resumed>) = 3 [pid 5187] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... mkdir resumed>) = 0 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5193] <... mmap resumed>) = 0x7f7cb054f000 [pid 5192] <... mmap resumed>) = 0x7f7cb054f000 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5195 ./strace-static-x86_64: Process 5195 attached [pid 5195] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5195] chdir("./7") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5195] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5195] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5196], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5196 [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5196] getuid() = 0 [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 1 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5172] <... sendfile resumed>) = 983040 [pid 5172] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] exit_group(0) = ? [pid 5172] <... futex resumed>) = ? [pid 5187] <... futex resumed>) = ? [pid 5172] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./6/binderfs") = 0 [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [ 51.693850][ T5185] REISERFS (device loop4): checking transaction log (loop4) [ 51.702303][ T5185] REISERFS (device loop4): Using r5 hash to sort names [ 51.713102][ T5188] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5185] close(4) = 0 [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5185] mkdir(".", 0777) = -1 EEXIST (File exists) [ 51.786049][ T5188] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 51.808946][ T5188] REISERFS (device loop1): using ordered data mode [ 51.816284][ T5185] reiserfs: enabling write barrier flush mode [ 51.826007][ T5188] reiserfs: using flush barriers [pid 5185] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5000] <... umount2 resumed>) = 0 [ 51.832341][ T5185] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5185] <... openat resumed>) = 4 [pid 5000] lstat("./6/file0", [pid 5185] chdir("." [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... openat resumed>) = 4 [pid 5196] <... write resumed>) = 4194304 [pid 5185] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5000] fstat(4, [pid 5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5183] <... futex resumed>) = 0 [pid 5000] getdents64(4, [pid 5185] <... open resumed>) = 5 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5196] munmap(0x7f7cb054f000, 4194304 [pid 5000] close(4 [pid 5185] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./6/file0" [pid 5185] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... rmdir resumed>) = 0 [pid 5196] <... munmap resumed>) = 0 [pid 5185] <... open resumed>) = 6 [pid 5183] <... futex resumed>) = 0 [pid 5000] getdents64(3, [pid 5192] <... write resumed>) = 4194304 [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] close(3 [pid 5196] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [ 51.858108][ T5188] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5000] rmdir("./6" [pid 5193] <... write resumed>) = 4194304 [pid 5192] munmap(0x7f7cb054f000, 4194304 [pid 5185] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./7", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5193] munmap(0x7f7cb054f000, 4194304 [pid 5192] <... munmap resumed>) = 0 [pid 5185] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5193] <... munmap resumed>) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5192] <... openat resumed>) = 4 [pid 5185] ftruncate(6, 33587199 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5197 ./strace-static-x86_64: Process 5197 attached [pid 5197] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5197] chdir("./7") = 0 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] <... ftruncate resumed>) = 0 [pid 5197] <... openat resumed>) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5197] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5198], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5198 [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... ioctl resumed>) = 0 [pid 5196] close(3) = 0 [pid 5196] mkdir("./file0", 0777) = 0 [pid 5196] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5193] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... ioctl resumed>) = 0 [pid 5193] <... openat resumed>) = 4 [pid 5185] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5198 attached [ 51.908316][ T5196] loop3: detected capacity change from 0 to 8192 [ 51.913348][ T5188] REISERFS (device loop1): checking transaction log (loop1) [ 51.930497][ T5188] REISERFS (device loop1): Using r5 hash to sort names [ 51.939771][ T5192] loop5: detected capacity change from 0 to 8192 [pid 5193] ioctl(4, LOOP_SET_FD, 3 [pid 5192] close(3 [pid 5188] <... mount resumed>) = 0 [pid 5185] sendfile(5, 6, NULL, 281474978811909 [pid 5183] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5198] getuid() = 0 [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... futex resumed>) = 0 [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5198] <... futex resumed>) = 1 [pid 5198] memfd_create("syzkaller", 0) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5193] <... ioctl resumed>) = 0 [pid 5192] <... close resumed>) = 0 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5183] <... futex resumed>) = 0 [pid 5193] close(3 [pid 5192] mkdir("./file0", 0777 [pid 5188] <... openat resumed>) = 3 [pid 5183] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... mkdir resumed>) = 0 [pid 5193] <... close resumed>) = 0 [pid 5193] mkdir("./file0", 0777 [pid 5188] chdir("./file0" [pid 5193] <... mkdir resumed>) = 0 [pid 5188] <... chdir resumed>) = 0 [pid 5193] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5192] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [ 51.949313][ T5196] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.949423][ T5193] loop0: detected capacity change from 0 to 8192 [ 51.971784][ T5196] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 51.986811][ T5196] REISERFS (device loop3): using ordered data mode [ 51.995104][ T5192] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5188] close(4) = 0 [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5188] mkdir(".", 0777 [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5188] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5183] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5202], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5202 [pid 5183] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 51.995504][ T5196] reiserfs: using flush barriers [ 52.018818][ T5188] reiserfs: enabling write barrier flush mode [ 52.025805][ T5193] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.031196][ T5192] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 52.048131][ T5192] REISERFS (device loop5): using ordered data mode [pid 5183] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb090d000 [ 52.055520][ T5192] reiserfs: using flush barriers [ 52.061834][ T5196] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.067412][ T5192] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.078667][ T5196] REISERFS (device loop3): checking transaction log (loop3) [pid 5183] mprotect(0x7f7cb090e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5183] clone(child_stack=0x7f7cb092d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5203], tls=0x7f7cb092d700, child_tidptr=0x7f7cb092d9d0) = 5203 [pid 5183] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 52.103614][ T5193] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 52.113119][ T5193] REISERFS (device loop0): using ordered data mode [ 52.114676][ T5196] REISERFS (device loop3): Using r5 hash to sort names [ 52.119682][ T5193] reiserfs: using flush barriers [ 52.131709][ T5193] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.133854][ T5188] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. ./strace-static-x86_64: Process 5203 attached ./strace-static-x86_64: Process 5202 attached [pid 5183] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5203] set_robust_list(0x7f7cb092d9e0, 24 [pid 5202] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5202] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5202] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] <... set_robust_list resumed>) = 0 [pid 5193] <... mount resumed>) = 0 [pid 5203] memfd_create("syzkaller", 0 [pid 5193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5203] <... memfd_create resumed>) = 7 [pid 5193] <... openat resumed>) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5193] chdir("./file0" [pid 5203] <... mmap resumed>) = 0x7f7ca850d000 [pid 5193] <... chdir resumed>) = 0 [pid 5193] ioctl(4, LOOP_CLR_FD [pid 5196] <... mount resumed>) = 0 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file0") = 0 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] close(4) = 0 [pid 5193] <... ioctl resumed>) = 0 [pid 5192] <... mount resumed>) = 0 [pid 5203] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] close(4 [pid 5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5188] <... mount resumed>) = 0 [pid 5196] <... futex resumed>) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5196] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5196] mkdir(".", 0777 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] <... mkdir resumed>) = -1 EEXIST (File exists) [ 52.148128][ T5193] REISERFS (device loop0): checking transaction log (loop0) [ 52.167698][ T5193] REISERFS (device loop0): Using r5 hash to sort names [ 52.175198][ T5192] REISERFS (device loop5): checking transaction log (loop5) [ 52.184259][ T5192] REISERFS (device loop5): Using r5 hash to sort names [pid 5196] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5198] <... write resumed>) = 4194304 [pid 5193] <... close resumed>) = 0 [pid 5192] <... openat resumed>) = 3 [pid 5188] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5198] munmap(0x7f7cb054f000, 4194304 [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] chdir("./file0" [pid 5188] <... openat resumed>) = 4 [pid 5198] <... munmap resumed>) = 0 [pid 5193] <... futex resumed>) = 1 [pid 5192] <... chdir resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5188] chdir("." [pid 5198] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5193] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5192] ioctl(4, LOOP_CLR_FD [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... chdir resumed>) = 0 [pid 5198] <... openat resumed>) = 4 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5192] <... ioctl resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5193] mkdir(".", 0777 [pid 5192] close(4 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5188] <... futex resumed>) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... write resumed>) = 4194304 [pid 5198] <... ioctl resumed>) = 0 [pid 5193] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5192] <... close resumed>) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5203] munmap(0x7f7ca850d000, 4194304 [pid 5198] close(3 [ 52.234186][ T5196] reiserfs: enabling write barrier flush mode [ 52.255574][ T5198] loop2: detected capacity change from 0 to 8192 [ 52.265257][ T5196] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5193] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... open resumed>) = 5 [pid 5203] <... munmap resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5196] <... mount resumed>) = 0 [pid 5192] <... futex resumed>) = 1 [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5198] mkdir("./file0", 0777 [pid 5196] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5192] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] <... futex resumed>) = 0 [pid 5188] <... futex resumed>) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5203] <... openat resumed>) = 8 [pid 5198] <... mkdir resumed>) = 0 [pid 5196] <... openat resumed>) = 4 [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] ioctl(8, LOOP_SET_FD, 7 [pid 5198] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5196] chdir("." [pid 5192] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = 1 [pid 5188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] <... futex resumed>) = 0 [pid 5203] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5196] <... chdir resumed>) = 0 [pid 5192] mkdir(".", 0777 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] ioctl(8, LOOP_CLR_FD [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5188] <... open resumed>) = 6 [pid 5203] <... ioctl resumed>) = 0 [pid 5196] <... futex resumed>) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5192] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 1 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5188] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] <... futex resumed>) = 0 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] ioctl(8, LOOP_SET_FD, 7 [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5196] <... futex resumed>) = 0 [pid 5203] close(8 [pid 5196] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] <... close resumed>) = 0 [pid 5203] close(7 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] <... futex resumed>) = 0 [ 52.284015][ T5193] reiserfs: enabling write barrier flush mode [ 52.296990][ T5192] reiserfs: enabling write barrier flush mode [ 52.305120][ T5198] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.319525][ T5192] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5186] <... futex resumed>) = 1 [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] ftruncate(6, 33587199) = 0 [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] <... futex resumed>) = 0 [pid 5196] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] <... futex resumed>) = 0 [pid 5186] <... futex resumed>) = 1 [pid 5188] sendfile(5, 6, NULL, 281474978811909 [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... close resumed>) = 0 [pid 5203] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... futex resumed>) = 1 [pid 5203] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5192] <... mount resumed>) = 0 [pid 5193] <... mount resumed>) = 0 [pid 5192] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5193] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5192] <... openat resumed>) = 4 [pid 5193] <... openat resumed>) = 4 [pid 5193] chdir("." [pid 5192] chdir("." [pid 5193] <... chdir resumed>) = 0 [pid 5192] <... chdir resumed>) = 0 [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 1 [pid 5192] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5196] ftruncate(6, 33587199 [pid 5202] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5196] <... ftruncate resumed>) = 0 [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 0 [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] <... open resumed>) = 5 [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... futex resumed>) = 1 [pid 5193] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... futex resumed>) = 1 [pid 5193] ftruncate(6, 33587199) = 0 [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... futex resumed>) = 1 [pid 5193] sendfile(5, 6, NULL, 281474978811909 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 1 [ 52.329344][ T5193] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 52.336337][ T5198] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 52.352435][ T5198] REISERFS (device loop2): using ordered data mode [ 52.360586][ T5198] reiserfs: using flush barriers [ 52.367979][ T5198] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] sendfile(5, 6, NULL, 281474978811909 [pid 5192] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5192] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5192] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5192] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5192] <... futex resumed>) = 0 [pid 5192] ftruncate(6, 33587199 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] <... open resumed>) = 7 [pid 5202] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] <... futex resumed>) = 1 [pid 5202] creat("./file0", 000) = 8 [pid 5202] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5202] <... futex resumed>) = 1 [pid 5202] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5192] <... ftruncate resumed>) = 0 [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5192] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = 1 [pid 5186] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5192] sendfile(5, 6, NULL, 281474978811909 [pid 5191] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5186] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5186] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5186] <... mprotect resumed>) = 0 [pid 5190] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5190] <... futex resumed>) = 0 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5186] <... clone resumed>, parent_tid=[5205], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5205 ./strace-static-x86_64: Process 5205 attached [pid 5198] <... mount resumed>) = 0 [pid 5190] <... mmap resumed>) = 0x7f7cb092e000 [pid 5186] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] set_robust_list(0x7f7cb094e9e0, 24 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5190] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5186] <... futex resumed>) = 0 [pid 5205] <... set_robust_list resumed>) = 0 [pid 5198] <... openat resumed>) = 3 [pid 5190] <... mprotect resumed>) = 0 [pid 5186] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] ftruncate(-1, 18446744073709551609 [pid 5198] chdir("./file0" [pid 5190] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5205] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... chdir resumed>) = 0 [pid 5205] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] ioctl(4, LOOP_CLR_FD [pid 5186] <... futex resumed>) = 0 [pid 5205] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... ioctl resumed>) = 0 [pid 5190] <... clone resumed>, parent_tid=[5206], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5206 [pid 5186] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5206 attached [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5190] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = 0 [pid 5185] <... sendfile resumed>) = 720896 [pid 5206] set_robust_list(0x7f7cb094e9e0, 24 [pid 5205] memfd_create("syzkaller", 0 [pid 5190] <... futex resumed>) = 0 [pid 5186] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5185] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] exit_group(0 [pid 5206] <... set_robust_list resumed>) = 0 [pid 5205] <... memfd_create resumed>) = 7 [pid 5203] <... futex resumed>) = ? [pid 5202] <... futex resumed>) = ? [pid 5190] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] <... futex resumed>) = ? [pid 5183] <... exit_group resumed>) = ? [pid 5206] ftruncate(-1, 18446744073709551609 [pid 5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5203] +++ exited with 0 +++ [pid 5202] +++ exited with 0 +++ [pid 5198] close(4 [pid 5185] +++ exited with 0 +++ [pid 5183] +++ exited with 0 +++ [ 52.385731][ T5198] REISERFS (device loop2): checking transaction log (loop2) [ 52.414146][ T5198] REISERFS (device loop2): Using r5 hash to sort names [pid 5206] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5205] <... mmap resumed>) = 0x7f7ca852e000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5206] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5206] memfd_create("syzkaller", 0 [pid 5190] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... memfd_create resumed>) = 7 [pid 5190] <... futex resumed>) = 0 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5190] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5206] <... mmap resumed>) = 0x7f7ca852e000 [pid 5198] <... close resumed>) = 0 [pid 5195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] <... futex resumed>) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5198] <... futex resumed>) = 1 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5002] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... mmap resumed>) = 0x7f7cb092e000 [pid 5191] <... mmap resumed>) = 0x7f7cb092e000 [pid 5002] <... openat resumed>) = 3 [pid 5198] mkdir(".", 0777 [pid 5197] <... futex resumed>) = 0 [pid 5195] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5191] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5002] fstat(3, [pid 5198] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5195] <... mprotect resumed>) = 0 [pid 5191] <... mprotect resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5195] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5191] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5195] <... clone resumed>, parent_tid=[5207], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5207 [pid 5191] <... clone resumed>, parent_tid=[5208], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5208 [pid 5002] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5002] lstat("./7/binderfs", [pid 5195] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./7/binderfs") = 0 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5207] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5207] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5195] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5207] <... futex resumed>) = 1 [pid 5207] memfd_create("syzkaller", 0) = 7 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 ./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5208] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5208] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] memfd_create("syzkaller", 0 [pid 5191] <... futex resumed>) = 0 [pid 5208] <... memfd_create resumed>) = 7 [pid 5191] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5205] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [ 52.479611][ T5198] reiserfs: enabling write barrier flush mode [ 52.501606][ T5198] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5206] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5198] <... mount resumed>) = 0 [pid 5198] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 5208] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5207] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5198] <... openat resumed>) = 4 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] chdir("." [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5198] <... chdir resumed>) = 0 [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5002] fstat(4, [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5197] <... futex resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] <... open resumed>) = 5 [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./7/file0" [pid 5198] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5198] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... open resumed>) = 6 [pid 5197] <... futex resumed>) = 0 [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] ftruncate(6, 33587199 [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... rmdir resumed>) = 0 [pid 5205] <... write resumed>) = 4194304 [pid 5198] <... ftruncate resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5002] getdents64(3, [pid 5205] munmap(0x7f7ca852e000, 4194304 [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./7") = 0 [pid 5205] <... munmap resumed>) = 0 [pid 5198] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5002] mkdir("./8", 0777 [pid 5205] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5198] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5205] <... openat resumed>) = 8 [pid 5198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] <... futex resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5209 ./strace-static-x86_64: Process 5209 attached [pid 5209] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5209] chdir("./8") = 0 [pid 5197] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] sendfile(5, 6, NULL, 281474978811909 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5206] <... write resumed>) = 4194304 [pid 5205] ioctl(8, LOOP_SET_FD, 7 [pid 5209] <... prctl resumed>) = 0 [pid 5205] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5209] setpgid(0, 0 [pid 5205] ioctl(8, LOOP_CLR_FD [pid 5209] <... setpgid resumed>) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5205] <... ioctl resumed>) = 0 [pid 5209] <... openat resumed>) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3 [pid 5208] <... write resumed>) = 4194304 [pid 5206] munmap(0x7f7ca852e000, 4194304 [pid 5208] munmap(0x7f7ca852e000, 4194304 [pid 5206] <... munmap resumed>) = 0 [pid 5205] ioctl(8, LOOP_SET_FD, 7 [pid 5209] <... close resumed>) = 0 [pid 5208] <... munmap resumed>) = 0 [pid 5205] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5209] symlink("/dev/binderfs", "./binderfs" [pid 5208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5205] close(8 [pid 5209] <... symlink resumed>) = 0 [pid 5208] <... openat resumed>) = 8 [pid 5205] <... close resumed>) = 0 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] ioctl(8, LOOP_SET_FD, 7 [pid 5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5205] close(7 [pid 5209] <... futex resumed>) = 0 [pid 5208] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] <... write resumed>) = 4194304 [pid 5206] <... openat resumed>) = 8 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5207] munmap(0x7f7ca852e000, 4194304 [pid 5209] <... mmap resumed>) = 0x7f7cb894f000 [pid 5207] <... munmap resumed>) = 0 [pid 5197] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5209] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5208] ioctl(8, LOOP_CLR_FD [pid 5207] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5197] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... mprotect resumed>) = 0 [pid 5208] <... ioctl resumed>) = 0 [pid 5207] <... openat resumed>) = 8 [pid 5197] <... futex resumed>) = 0 [pid 5209] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5207] ioctl(8, LOOP_SET_FD, 7 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5207] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5197] <... mmap resumed>) = 0x7f7cb092e000 [pid 5209] <... clone resumed>, parent_tid=[5210], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5210 [pid 5207] ioctl(8, LOOP_CLR_FD [pid 5197] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5210 attached [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... ioctl resumed>) = 0 [pid 5206] ioctl(8, LOOP_SET_FD, 7 [pid 5197] <... mprotect resumed>) = 0 [pid 5210] set_robust_list(0x7f7cb896f9e0, 24 [pid 5209] <... futex resumed>) = 0 [pid 5208] ioctl(8, LOOP_SET_FD, 7 [pid 5206] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5197] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5210] <... set_robust_list resumed>) = 0 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5206] ioctl(8, LOOP_CLR_FD [pid 5210] getuid( [pid 5208] close(8 [pid 5206] <... ioctl resumed>) = 0 [pid 5197] <... clone resumed>, parent_tid=[5211], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5211 [pid 5208] <... close resumed>) = 0 [pid 5207] ioctl(8, LOOP_SET_FD, 7 [pid 5197] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] close(8) = 0 [pid 5207] close(7./strace-static-x86_64: Process 5211 attached [pid 5210] <... getuid resumed>) = 0 [pid 5208] close(7 [pid 5205] <... close resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5211] set_robust_list(0x7f7cb094e9e0, 24 [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] ioctl(8, LOOP_SET_FD, 7 [pid 5205] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5211] <... set_robust_list resumed>) = 0 [pid 5210] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5206] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5205] <... futex resumed>) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5211] ftruncate(-1, 18446744073709551609 [pid 5210] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... close resumed>) = 0 [pid 5206] close(8 [pid 5205] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5207] <... close resumed>) = 0 [pid 5206] <... close resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] <... futex resumed>) = 0 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5211] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] memfd_create("syzkaller", 0 [pid 5206] close(7 [pid 5205] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5186] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5195] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... futex resumed>) = 1 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5208] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5208] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] <... memfd_create resumed>) = 3 [pid 5191] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5211] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5211] memfd_create("syzkaller", 0 [pid 5210] <... mmap resumed>) = 0x7f7cb054f000 [pid 5197] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5211] <... memfd_create resumed>) = 7 [pid 5207] <... open resumed>) = 7 [pid 5205] <... open resumed>) = 7 [pid 5197] <... futex resumed>) = 0 [pid 5188] <... sendfile resumed>) = 983040 [pid 5197] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5195] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... futex resumed>) = 1 [pid 5207] creat("./file0", 000) = 8 [pid 5207] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = 1 [pid 5207] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... futex resumed>) = 0 [pid 5205] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5205] <... futex resumed>) = 0 [pid 5186] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 0 [pid 5186] <... futex resumed>) = 1 [pid 5205] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] creat("./file0", 000) = 8 [pid 5186] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] <... futex resumed>) = 0 [pid 5186] exit_group(0 [pid 5205] <... futex resumed>) = ? [pid 5186] <... exit_group resumed>) = ? [pid 5205] +++ exited with 0 +++ [pid 5188] +++ exited with 0 +++ [pid 5186] +++ exited with 0 +++ [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5191] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5191] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] fstat(3, [pid 5191] <... mmap resumed>) = 0x7f7ca890d000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5191] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE [pid 4999] getdents64(3, [pid 5191] <... mprotect resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5191] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5191] <... clone resumed>, parent_tid=[5212], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5212 [pid 4999] lstat("./7/binderfs", [pid 5191] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5191] <... futex resumed>) = 0 [pid 4999] unlink("./7/binderfs" [pid 5191] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5212 attached [pid 5212] set_robust_list(0x7f7ca892d9e0, 24) = 0 [pid 5212] creat("./file0", 000) = 8 [pid 5212] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5212] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] <... close resumed>) = 0 [pid 5206] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5190] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... sendfile resumed>) = 983040 [pid 5196] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5196] <... futex resumed>) = 0 [pid 5196] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5195] exit_group(0 [pid 5207] <... futex resumed>) = ? [pid 5196] <... futex resumed>) = ? [pid 5195] <... exit_group resumed>) = ? [pid 5207] +++ exited with 0 +++ [pid 5196] +++ exited with 0 +++ [pid 5195] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5001] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./7/binderfs") = 0 [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... open resumed>) = 7 [pid 5206] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5206] creat("./file0", 000 [pid 5190] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... creat resumed>) = 8 [pid 5190] <... futex resumed>) = 0 [pid 5206] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... open resumed>) = 7 [pid 5208] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5211] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5192] <... sendfile resumed>) = 1114112 [pid 5192] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5192] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] exit_group(0 [pid 5212] <... futex resumed>) = ? [pid 5208] <... futex resumed>) = ? [pid 5192] <... futex resumed>) = ? [pid 5191] <... exit_group resumed>) = ? [pid 5212] +++ exited with 0 +++ [pid 5192] +++ exited with 0 +++ [pid 5208] +++ exited with 0 +++ [pid 5193] <... sendfile resumed>) = 1114112 [pid 5191] +++ exited with 0 +++ [pid 5193] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] exit_group(0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5206] <... futex resumed>) = ? [pid 5193] <... futex resumed>) = ? [pid 5190] <... exit_group resumed>) = ? [pid 5206] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 5190] +++ exited with 0 +++ [pid 5003] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5003] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 4998] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./7/file0", [pid 4998] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./7/binderfs", [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./7/binderfs" [pid 4999] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./7/binderfs", [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(4, [pid 4998] unlink("./7/binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./7/file0") = 0 [pid 4999] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./7") = 0 [pid 4999] mkdir("./8", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5211] <... write resumed>) = 4194304 [pid 5210] <... write resumed>) = 4194304 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5211] munmap(0x7f7ca852e000, 4194304 [pid 5210] munmap(0x7f7cb054f000, 4194304 [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5213 ./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] <... munmap resumed>) = 0 [pid 5001] lstat("./7/file0", [pid 5210] <... munmap resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5213] chdir("./8" [pid 5211] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5210] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] <... openat resumed>) = 8 [pid 5210] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] ioctl(8, LOOP_SET_FD, 7 [pid 5001] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5211] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5210] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 4 [pid 5211] ioctl(8, LOOP_CLR_FD [pid 5001] fstat(4, [pid 5213] <... chdir resumed>) = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] setpgid(0, 0) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5213] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5211] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5213] <... mprotect resumed>) = 0 [pid 5213] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5001] getdents64(4, [pid 5213] <... clone resumed>, parent_tid=[5214], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5214 [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] getdents64(4, [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5211] ioctl(8, LOOP_SET_FD, 7 [pid 5001] close(4) = 0 [pid 5211] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5001] rmdir("./7/file0" [pid 5211] close(8./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5211] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5211] close(7 [pid 5214] getuid() = 0 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] <... futex resumed>) = 1 [pid 5214] memfd_create("syzkaller", 0) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./7") = 0 [pid 5001] mkdir("./8", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5215 ./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5215] chdir("./8") = 0 [pid 5210] <... ioctl resumed>) = 0 [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5210] close(3 [pid 5215] <... prctl resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5215] setpgid(0, 0 [pid 5210] mkdir("./file0", 0777 [pid 5215] <... setpgid resumed>) = 0 [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5210] <... mkdir resumed>) = 0 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5210] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 4998] fstat(4, [pid 5215] <... openat resumed>) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5215] write(3, "1000", 4 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./7/file0" [pid 5215] <... write resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5215] close(3 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./7" [pid 5215] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5215] symlink("/dev/binderfs", "./binderfs" [pid 4998] mkdir("./8", 0777 [pid 5215] <... symlink resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [ 53.023172][ T5210] loop4: detected capacity change from 0 to 8192 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5215] <... futex resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5217 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5215] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5215] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5211] <... close resumed>) = 0 [pid 5215] <... clone resumed>, parent_tid=[5218], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5218 [pid 5211] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5211] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5197] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5218] getuid(./strace-static-x86_64: Process 5217 attached ) = 0 [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5217] set_robust_list(0x55555710d5e0, 24 [pid 5215] <... futex resumed>) = 0 [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 53.084892][ T5210] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5217] chdir("./8" [pid 5218] <... mmap resumed>) = 0x7f7cb054f000 [pid 5217] <... chdir resumed>) = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] <... open resumed>) = 7 [pid 5217] setpgid(0, 0 [pid 5211] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... umount2 resumed>) = 0 [pid 5217] <... setpgid resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5197] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5211] <... futex resumed>) = 1 [pid 5217] write(3, "1000", 4) = 4 [pid 5211] creat("./file0", 000 [pid 5217] close(3) = 0 [pid 5211] <... creat resumed>) = 8 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5211] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5211] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5211] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5219], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5219 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 5198] <... sendfile resumed>) = 1048576 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] exit_group(0) = ? [pid 5198] <... futex resumed>) = ? [pid 5211] <... futex resumed>) = ? [pid 5198] +++ exited with 0 +++ [pid 5211] +++ exited with 0 +++ [pid 5197] +++ exited with 0 +++ [pid 5003] getdents64(4, [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5000] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./7/binderfs") = 0 [ 53.127005][ T5210] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 53.137508][ T5210] REISERFS (device loop4): using ordered data mode [ 53.145239][ T5210] reiserfs: using flush barriers [ 53.158675][ T5210] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./7/file0") = 0 [pid 5003] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] close(3./strace-static-x86_64: Process 5219 attached ) = 0 [pid 5003] rmdir("./7") = 0 [pid 5219] set_robust_list(0x7f7cb896f9e0, 24 [pid 5003] mkdir("./8", 0777 [pid 5219] <... set_robust_list resumed>) = 0 [pid 5219] getuid( [pid 5003] <... mkdir resumed>) = 0 [pid 5219] <... getuid resumed>) = 0 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5218] <... write resumed>) = 4194304 [pid 5218] munmap(0x7f7cb054f000, 4194304 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... openat resumed>) = 3 [pid 5217] <... futex resumed>) = 0 [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5219] memfd_create("syzkaller", 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5219] <... memfd_create resumed>) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5218] <... munmap resumed>) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5218] <... ioctl resumed>) = 0 [pid 5218] close(3) = 0 [pid 5218] mkdir("./file0", 0777) = 0 [pid 5218] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5220 ./strace-static-x86_64: Process 5220 attached [pid 5220] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5220] chdir("./8") = 0 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5220] setpgid(0, 0) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5220] write(3, "1000", 4) = 4 [pid 5220] close(3) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5220] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5220] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5222], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5222 [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... write resumed>) = 4194304 [pid 5214] munmap(0x7f7cb054f000, 4194304./strace-static-x86_64: Process 5222 attached [pid 5222] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5222] getuid() = 0 [ 53.225389][ T5218] loop3: detected capacity change from 0 to 8192 [ 53.239253][ T5218] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.253580][ T5210] REISERFS (device loop4): checking transaction log (loop4) [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5214] <... munmap resumed>) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5222] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5222] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5222] memfd_create("syzkaller", 0) = 3 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./7/file0") = 0 [pid 5000] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./7") = 0 [pid 5000] mkdir("./8", 0777) = 0 [ 53.288044][ T5218] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 53.289677][ T5214] loop1: detected capacity change from 0 to 8192 [ 53.316685][ T5210] REISERFS (device loop4): Using r5 hash to sort names [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5214] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5214] close(3) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5214] mkdir("./file0", 0777 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5214] <... mkdir resumed>) = 0 [pid 5000] close(3 [pid 5214] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5224 [pid 5210] <... mount resumed>) = 0 [pid 5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5210] chdir("./file0") = 0 [pid 5210] ioctl(4, LOOP_CLR_FD) = 0 [pid 5210] close(4) = 0 [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = 0 [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5210] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5210] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, ""./strace-static-x86_64: Process 5224 attached [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5224] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5224] chdir("./8") = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] <... write resumed>) = 4194304 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 53.333251][ T5218] REISERFS (device loop3): using ordered data mode [ 53.340511][ T5210] reiserfs: enabling write barrier flush mode [ 53.347455][ T5214] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.366342][ T5218] reiserfs: using flush barriers [ 53.372448][ T5218] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5219] munmap(0x7f7cb054f000, 4194304 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5219] <... munmap resumed>) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3 [pid 5224] <... mmap resumed>) = 0x7f7cb894f000 [ 53.389365][ T5218] REISERFS (device loop3): checking transaction log (loop3) [ 53.391185][ T5210] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 53.396900][ T5214] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 53.415154][ T5214] REISERFS (device loop1): using ordered data mode [ 53.417371][ T5219] loop0: detected capacity change from 0 to 8192 [ 53.422067][ T5214] reiserfs: using flush barriers [pid 5224] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5210] <... mount resumed>) = 0 [pid 5219] <... ioctl resumed>) = 0 [pid 5219] close(3) = 0 [pid 5224] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5210] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5218] <... mount resumed>) = 0 [pid 5219] mkdir("./file0", 0777) = 0 [pid 5219] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5210] <... openat resumed>) = 4 [pid 5224] <... clone resumed>, parent_tid=[5225], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5225 [pid 5218] <... openat resumed>) = 3 [pid 5210] chdir("."./strace-static-x86_64: Process 5225 attached [pid 5225] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] chdir("./file0" [pid 5210] <... chdir resumed>) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5222] <... write resumed>) = 4194304 [pid 5218] <... chdir resumed>) = 0 [pid 5214] <... mount resumed>) = 0 [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] munmap(0x7f7cb054f000, 4194304 [pid 5218] ioctl(4, LOOP_CLR_FD [pid 5214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5210] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5222] <... munmap resumed>) = 0 [pid 5218] <... ioctl resumed>) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5210] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] close(4 [pid 5214] chdir("./file0" [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5214] <... chdir resumed>) = 0 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] ioctl(4, LOOP_CLR_FD [pid 5210] <... open resumed>) = 5 [pid 5222] <... openat resumed>) = 4 [pid 5218] <... futex resumed>) = 1 [pid 5214] <... ioctl resumed>) = 0 [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [ 53.435307][ T5214] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.451913][ T5218] REISERFS (device loop3): Using r5 hash to sort names [ 53.459634][ T5214] REISERFS (device loop1): checking transaction log (loop1) [ 53.468601][ T5214] REISERFS (device loop1): Using r5 hash to sort names [ 53.477036][ T5219] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5218] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] close(4 [pid 5210] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5222] <... ioctl resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5225] getuid( [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... getuid resumed>) = 0 [pid 5215] <... futex resumed>) = 1 [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5225] memfd_create("syzkaller", 0 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... memfd_create resumed>) = 3 [pid 5222] close(3 [pid 5218] <... futex resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5210] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... close resumed>) = 0 [pid 5218] mkdir(".", 0777 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5222] mkdir("./file0", 0777 [pid 5218] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... mkdir resumed>) = 0 [pid 5218] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5214] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... open resumed>) = 6 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5222] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5225] <... mmap resumed>) = 0x7f7cb054f000 [ 53.488896][ T5222] loop5: detected capacity change from 0 to 8192 [ 53.496525][ T5219] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 53.506391][ T5219] REISERFS (device loop0): using ordered data mode [ 53.512901][ T5219] reiserfs: using flush barriers [ 53.518817][ T5219] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] mkdir(".", 0777 [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5218] <... mount resumed>) = 0 [pid 5214] <... mkdir resumed>) = -1 EEXIST (File exists) [ 53.523982][ T5218] reiserfs: enabling write barrier flush mode [ 53.544097][ T5219] REISERFS (device loop0): checking transaction log (loop0) [ 53.551646][ T5218] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 53.562067][ T5222] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5210] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] <... futex resumed>) = 0 [pid 5225] <... write resumed>) = 4194304 [pid 5218] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5214] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5219] <... mount resumed>) = 0 [pid 5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5219] chdir("./file0") = 0 [pid 5219] ioctl(4, LOOP_CLR_FD) = 0 [pid 5219] close(4 [pid 5225] munmap(0x7f7cb054f000, 4194304 [pid 5219] <... close resumed>) = 0 [pid 5218] <... openat resumed>) = 4 [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... munmap resumed>) = 0 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] chdir("." [pid 5210] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5225] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5219] <... futex resumed>) = 1 [pid 5218] <... chdir resumed>) = 0 [pid 5217] <... futex resumed>) = 0 [pid 5210] ftruncate(6, 33587199 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... openat resumed>) = 4 [ 53.584623][ T5219] REISERFS (device loop0): Using r5 hash to sort names [ 53.588062][ T5222] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 53.600985][ T5214] reiserfs: enabling write barrier flush mode [ 53.610296][ T5222] REISERFS (device loop5): using ordered data mode [ 53.617127][ T5222] reiserfs: using flush barriers [ 53.624359][ T5222] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5219] mkdir(".", 0777 [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 5219] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5218] <... futex resumed>) = 1 [pid 5210] <... ftruncate resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5210] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5218] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5209] <... futex resumed>) = 0 [pid 5218] <... open resumed>) = 5 [pid 5209] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... ioctl resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5225] close(3 [pid 5218] <... futex resumed>) = 1 [pid 5209] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] <... close resumed>) = 0 [pid 5218] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] mkdir("./file0", 0777 [pid 5215] <... futex resumed>) = 0 [pid 5210] <... futex resumed>) = 0 [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] sendfile(5, 6, NULL, 281474978811909 [pid 5225] <... mkdir resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 1 [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5225] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5218] <... open resumed>) = 6 [pid 5214] <... mount resumed>) = 0 [pid 5219] <... mount resumed>) = 0 [pid 5219] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5219] <... openat resumed>) = 4 [pid 5218] <... futex resumed>) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5214] <... openat resumed>) = 4 [pid 5222] <... mount resumed>) = 0 [pid 5219] chdir("." [pid 5218] ftruncate(6, 33587199 [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] chdir("." [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5219] <... chdir resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [ 53.631200][ T5225] loop2: detected capacity change from 0 to 8192 [ 53.644944][ T5222] REISERFS (device loop5): checking transaction log (loop5) [ 53.647452][ T5214] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 53.656364][ T5222] REISERFS (device loop5): Using r5 hash to sort names [ 53.663390][ T5219] reiserfs: enabling write barrier flush mode [ 53.680083][ T5219] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... ftruncate resumed>) = 0 [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5218] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] <... futex resumed>) = 0 [pid 5218] sendfile(5, 6, NULL, 281474978811909 [pid 5215] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... chdir resumed>) = 0 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] <... openat resumed>) = 3 [pid 5222] chdir("./file0") = 0 [pid 5222] ioctl(4, LOOP_CLR_FD) = 0 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... open resumed>) = 5 [pid 5219] <... open resumed>) = 5 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5214] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] close(4 [pid 5219] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... open resumed>) = 6 [pid 5222] <... close resumed>) = 0 [pid 5209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5222] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 5222] mkdir(".", 0777 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5222] <... mkdir resumed>) = -1 EEXIST (File exists) [ 53.692850][ T5225] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.706087][ T5225] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 53.722001][ T5225] REISERFS (device loop2): using ordered data mode [ 53.728858][ T5225] reiserfs: using flush barriers [pid 5222] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5219] <... open resumed>) = 6 [pid 5215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5215] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5215] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5229], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5229 [pid 5215] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... mount resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5214] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... mmap resumed>) = 0x7f7cb092e000 [pid 5217] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5219] ftruncate(6, 33587199 [pid 5214] ftruncate(6, 33587199 [pid 5209] <... mprotect resumed>) = 0 [pid 5222] <... openat resumed>) = 4 [pid 5222] chdir(".") = 0 [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5209] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... futex resumed>) = 1 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... ftruncate resumed>) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] <... ftruncate resumed>) = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... futex resumed>) = 1 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... clone resumed>, parent_tid=[5230], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5230 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] ftruncate(6, 33587199./strace-static-x86_64: Process 5229 attached [pid 5229] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5229] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5229] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = 0 [pid 5215] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5229] <... futex resumed>) = 1 [pid 5229] memfd_create("syzkaller", 0) = 7 [pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5209] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5230 attached [pid 5230] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5230] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5222] <... ftruncate resumed>) = 0 [pid 5217] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] sendfile(5, 6, NULL, 281474978811909 [pid 5217] <... futex resumed>) = 0 [pid 5214] sendfile(5, 6, NULL, 281474978811909 [pid 5213] <... futex resumed>) = 0 [pid 5230] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] <... mount resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5217] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] chdir("./file0") = 0 [pid 5225] ioctl(4, LOOP_CLR_FD) = 0 [pid 5222] sendfile(5, 6, NULL, 281474978811909 [pid 5209] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] close(4 [pid 5209] <... futex resumed>) = 1 [pid 5225] <... close resumed>) = 0 [pid 5209] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... futex resumed>) = 1 [pid 5225] mkdir(".", 0777) = -1 EEXIST (File exists) [ 53.734576][ T5225] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.739892][ T5222] reiserfs: enabling write barrier flush mode [ 53.758057][ T5225] REISERFS (device loop2): checking transaction log (loop2) [ 53.762515][ T5222] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 53.780098][ T5225] REISERFS (device loop2): Using r5 hash to sort names [pid 5225] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5230] <... futex resumed>) = 0 [pid 5230] memfd_create("syzkaller", 0) = 7 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5217] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5217] <... mmap resumed>) = 0x7f7cb092e000 [pid 5213] <... mmap resumed>) = 0x7f7cb092e000 [pid 5220] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5217] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5213] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5220] <... mprotect resumed>) = 0 [pid 5217] <... mprotect resumed>) = 0 [pid 5220] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5217] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5213] <... mprotect resumed>) = 0 [pid 5220] <... clone resumed>, parent_tid=[5231], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5231 [pid 5220] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5217] <... clone resumed>, parent_tid=[5232], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5232 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... clone resumed>, parent_tid=[5233], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5233 [pid 5217] <... futex resumed>) = 0 [pid 5213] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5232] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5231 attached [pid 5232] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] set_robust_list(0x7f7cb094e9e0, 24 [pid 5217] <... futex resumed>) = 0 [pid 5232] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... set_robust_list resumed>) = 0 [pid 5217] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] ftruncate(-1, 18446744073709551609 [pid 5217] <... futex resumed>) = 0 [pid 5232] memfd_create("syzkaller", 0 [pid 5231] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... mount resumed>) = 0 [pid 5217] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5232] <... memfd_create resumed>) = 7 [pid 5231] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5231] <... futex resumed>) = 1 [pid 5225] <... openat resumed>) = 4 [pid 5220] <... futex resumed>) = 0 [ 53.811843][ T5225] reiserfs: enabling write barrier flush mode [ 53.824559][ T5225] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. ./strace-static-x86_64: Process 5233 attached [pid 5232] <... mmap resumed>) = 0x7f7ca852e000 [pid 5231] memfd_create("syzkaller", 0 [pid 5225] chdir("." [pid 5220] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] set_robust_list(0x7f7cb094e9e0, 24 [pid 5231] <... memfd_create resumed>) = 7 [pid 5225] <... chdir resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5231] <... mmap resumed>) = 0x7f7ca852e000 [pid 5225] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5233] <... set_robust_list resumed>) = 0 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] ftruncate(-1, 18446744073709551609 [pid 5225] <... open resumed>) = 5 [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5233] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... futex resumed>) = 1 [pid 5225] <... open resumed>) = 6 [pid 5213] <... futex resumed>) = 0 [pid 5233] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5233] memfd_create("syzkaller", 0 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5233] <... memfd_create resumed>) = 7 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] ftruncate(6, 33587199 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... mmap resumed>) = 0x7f7ca852e000 [pid 5225] <... ftruncate resumed>) = 0 [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5225] sendfile(5, 6, NULL, 281474978811909 [pid 5224] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5232] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5224] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5224] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5233] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5229] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5224] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5234], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5234 [pid 5224] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5234 attached [pid 5234] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5234] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5234] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5234] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5234] memfd_create("syzkaller", 0 [pid 5224] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5234] <... memfd_create resumed>) = 7 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5232] <... write resumed>) = 4194304 [pid 5232] munmap(0x7f7ca852e000, 4194304 [pid 5230] <... write resumed>) = 4194304 [pid 5230] munmap(0x7f7ca852e000, 4194304 [pid 5231] <... write resumed>) = 4194304 [pid 5229] <... write resumed>) = 4194304 [pid 5231] munmap(0x7f7ca852e000, 4194304 [pid 5230] <... munmap resumed>) = 0 [pid 5231] <... munmap resumed>) = 0 [pid 5232] <... munmap resumed>) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5234] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5232] <... openat resumed>) = 8 [pid 5232] ioctl(8, LOOP_SET_FD, 7 [pid 5230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5232] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5231] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5230] <... openat resumed>) = 8 [pid 5229] munmap(0x7f7ca852e000, 4194304 [pid 5233] <... write resumed>) = 4194304 [pid 5232] ioctl(8, LOOP_CLR_FD [pid 5231] <... openat resumed>) = 8 [pid 5230] ioctl(8, LOOP_SET_FD, 7 [pid 5232] <... ioctl resumed>) = 0 [pid 5230] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5229] <... munmap resumed>) = 0 [pid 5231] ioctl(8, LOOP_SET_FD, 7 [pid 5233] munmap(0x7f7ca852e000, 4194304 [pid 5231] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5230] ioctl(8, LOOP_CLR_FD [pid 5229] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5231] ioctl(8, LOOP_CLR_FD [pid 5230] <... ioctl resumed>) = 0 [pid 5232] ioctl(8, LOOP_SET_FD, 7 [pid 5231] <... ioctl resumed>) = 0 [pid 5229] <... openat resumed>) = 8 [pid 5233] <... munmap resumed>) = 0 [pid 5232] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5229] ioctl(8, LOOP_SET_FD, 7 [pid 5233] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5232] close(8 [pid 5229] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5234] <... write resumed>) = 4194304 [pid 5233] <... openat resumed>) = 8 [pid 5232] <... close resumed>) = 0 [pid 5230] ioctl(8, LOOP_SET_FD, 7 [pid 5229] ioctl(8, LOOP_CLR_FD [pid 5234] munmap(0x7f7ca852e000, 4194304 [pid 5233] ioctl(8, LOOP_SET_FD, 7 [pid 5232] close(7 [pid 5231] ioctl(8, LOOP_SET_FD, 7 [pid 5230] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5229] <... ioctl resumed>) = 0 [pid 5233] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5231] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5233] ioctl(8, LOOP_CLR_FD [pid 5231] close(8 [pid 5234] <... munmap resumed>) = 0 [pid 5233] <... ioctl resumed>) = 0 [pid 5231] <... close resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5231] close(7 [pid 5230] close(8 [pid 5234] <... openat resumed>) = 8 [pid 5230] <... close resumed>) = 0 [pid 5229] ioctl(8, LOOP_SET_FD, 7 [pid 5234] ioctl(8, LOOP_SET_FD, 7 [pid 5233] ioctl(8, LOOP_SET_FD, 7 [pid 5230] close(7 [pid 5229] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5234] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5233] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5229] close(8 [pid 5234] ioctl(8, LOOP_CLR_FD [pid 5233] close(8 [pid 5229] <... close resumed>) = 0 [pid 5234] <... ioctl resumed>) = 0 [pid 5233] <... close resumed>) = 0 [pid 5229] close(7 [pid 5233] close(7 [pid 5229] <... close resumed>) = 0 [pid 5233] <... close resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5234] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5234] close(8 [pid 5233] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... close resumed>) = 0 [pid 5230] <... close resumed>) = 0 [pid 5229] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 1 [pid 5231] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5233] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... futex resumed>) = 1 [pid 5230] <... futex resumed>) = 1 [pid 5229] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... futex resumed>) = 0 [pid 5217] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... close resumed>) = 0 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5234] close(7 [pid 5232] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5220] <... futex resumed>) = 0 [pid 5217] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... close resumed>) = 0 [pid 5233] <... futex resumed>) = 0 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5230] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 1 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5213] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5234] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... open resumed>) = 7 [pid 5232] <... open resumed>) = 7 [pid 5231] <... open resumed>) = 7 [pid 5229] <... open resumed>) = 7 [pid 5217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] <... sendfile resumed>) = 983040 [pid 5234] <... futex resumed>) = 1 [pid 5233] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5217] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] <... futex resumed>) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5231] <... futex resumed>) = 1 [pid 5229] <... futex resumed>) = 1 [pid 5224] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 0 [pid 5217] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5233] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] creat("./file0", 000 [pid 5231] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] <... futex resumed>) = 0 [pid 5220] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5232] <... creat resumed>) = 8 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] <... futex resumed>) = 0 [pid 5232] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] creat("./file0", 000 [pid 5229] creat("./file0", 000 [pid 5220] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] creat("./file0", 000 [pid 5213] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = 1 [pid 5231] <... creat resumed>) = 8 [pid 5229] <... creat resumed>) = 8 [pid 5217] <... futex resumed>) = 0 [pid 5214] <... creat resumed>) = 8 [pid 5232] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 1 [pid 5229] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5231] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] exit_group(0 [pid 5233] <... futex resumed>) = ? [pid 5214] <... futex resumed>) = ? [pid 5213] <... exit_group resumed>) = ? [pid 5233] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 4999] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./8/binderfs") = 0 [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5234] <... open resumed>) = 7 [pid 5225] <... sendfile resumed>) = 983040 [pid 5234] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... futex resumed>) = 1 [pid 5225] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5234] creat("./file0", 000 [pid 5225] <... futex resumed>) = 0 [pid 5224] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... creat resumed>) = 8 [pid 5234] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5234] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] exit_group(0 [pid 5222] <... sendfile resumed>) = 1048576 [pid 5219] <... sendfile resumed>) = 1048576 [pid 5218] <... sendfile resumed>) = 1245184 [pid 5209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5234] <... futex resumed>) = ? [pid 5225] <... futex resumed>) = ? [pid 5224] <... exit_group resumed>) = ? [pid 5222] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] exit_group(0 [pid 5215] exit_group(0 [pid 5209] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] +++ exited with 0 +++ [pid 5232] <... futex resumed>) = ? [pid 5229] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = ? [pid 5217] <... exit_group resumed>) = ? [pid 5215] <... exit_group resumed>) = ? [pid 5232] +++ exited with 0 +++ [pid 5229] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [pid 5224] +++ exited with 0 +++ [pid 5222] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] +++ exited with 0 +++ [pid 5218] <... futex resumed>) = ? [pid 5217] +++ exited with 0 +++ [pid 5209] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5230] <... open resumed>) = 7 [pid 5220] exit_group(0 [pid 5231] <... futex resumed>) = ? [pid 5220] <... exit_group resumed>) = ? [pid 5231] +++ exited with 0 +++ [pid 5230] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] +++ exited with 0 +++ [pid 5215] +++ exited with 0 +++ [pid 5230] <... futex resumed>) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5222] <... futex resumed>) = ? [pid 5230] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] <... sendfile resumed>) = 1245184 [pid 5209] <... mmap resumed>) = 0x7f7ca890d000 [pid 5222] +++ exited with 0 +++ [pid 5220] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5210] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5000] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... restart_syscall resumed>) = 0 [pid 5209] <... mprotect resumed>) = 0 [pid 5210] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5210] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5235 attached [pid 5003] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] set_robust_list(0x7f7ca892d9e0, 24 [pid 5209] <... clone resumed>, parent_tid=[5235], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5235 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] <... set_robust_list resumed>) = 0 [pid 5209] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./8/file0", [pid 4998] <... openat resumed>) = 3 [pid 5235] creat("./file0", 000 [pid 5209] <... futex resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, [pid 5235] <... creat resumed>) = 8 [pid 5209] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 5235] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5235] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] exit_group(0 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5001] fstat(3, [pid 5000] lstat("./8/binderfs", [pid 4999] <... openat resumed>) = 4 [pid 4998] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] <... futex resumed>) = ? [pid 5210] <... futex resumed>) = ? [pid 5209] <... exit_group resumed>) = ? [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] fstat(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] +++ exited with 0 +++ [pid 5230] <... futex resumed>) = ? [pid 5210] +++ exited with 0 +++ [pid 5003] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5000] unlink("./8/binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./8/binderfs", [pid 5230] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] <... unlink resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] lstat("./8/binderfs", [pid 5001] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] unlink("./8/binderfs" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 4998] <... unlink resumed>) = 0 [pid 5003] unlink("./8/binderfs" [pid 5001] lstat("./8/binderfs", [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(4 [pid 5002] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./8/binderfs" [pid 4999] <... close resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] rmdir("./8/file0" [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5002] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./8") = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] mkdir("./9", 0777 [pid 5002] fstat(3, [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5236 ./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5002] getdents64(3, [pid 5236] chdir("./9") = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... prctl resumed>) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./8/binderfs", [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./8/binderfs") = 0 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5236] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5237], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5237 [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5237 attached [pid 5237] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5237] getuid() = 0 [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5237] <... futex resumed>) = 1 [pid 5237] memfd_create("syzkaller", 0) = 3 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5237] munmap(0x7f7cb054f000, 4194304 [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5237] <... munmap resumed>) = 0 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./8/file0", [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./8/file0", [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./8/file0", [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 4 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5003] getdents64(4, [pid 5002] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] fstat(4, [pid 5000] getdents64(4, [pid 5003] close(4 [pid 5000] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] close(4 [pid 5003] rmdir("./8/file0" [pid 5002] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] rmdir("./8/file0" [pid 5237] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(4, [pid 5003] close(3 [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 5002] close(4 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./8" [pid 5002] <... close resumed>) = 0 [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] rmdir("./8/file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5003] mkdir("./9", 0777 [pid 5237] <... openat resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./8" [pid 5237] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] getdents64(3, [pid 5001] lstat("./8/file0", [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] mkdir("./9", 0777 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 5002] rmdir("./8" [pid 5001] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5239 [pid 5002] mkdir("./9", 0777 [pid 5001] fstat(4, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] getdents64(4, [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5240 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] getdents64(4, [pid 5002] close(3 [pid 5001] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5001] rmdir("./8/file0" [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5241 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, ./strace-static-x86_64: Process 5241 attached ./strace-static-x86_64: Process 5240 attached ./strace-static-x86_64: Process 5239 attached [pid 5237] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5241] set_robust_list(0x55555710d5e0, 24 [pid 5240] set_robust_list(0x55555710d5e0, 24 [pid 5239] set_robust_list(0x55555710d5e0, 24 [pid 5237] close(3 [pid 5001] close(3 [pid 5241] <... set_robust_list resumed>) = 0 [pid 5240] <... set_robust_list resumed>) = 0 [pid 5239] <... set_robust_list resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5241] chdir("./9" [pid 5240] chdir("./9" [pid 5239] chdir("./9" [pid 5237] mkdir("./file0", 0777 [pid 5001] rmdir("./8" [pid 4998] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5241] <... chdir resumed>) = 0 [pid 5240] <... chdir resumed>) = 0 [pid 5239] <... chdir resumed>) = 0 [pid 5237] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5237] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5001] mkdir("./9", 0777 [pid 4998] close(4 [pid 5241] <... prctl resumed>) = 0 [pid 5240] <... prctl resumed>) = 0 [pid 5239] <... prctl resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5241] setpgid(0, 0 [pid 5240] setpgid(0, 0 [pid 5239] setpgid(0, 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5241] <... setpgid resumed>) = 0 [pid 5240] <... setpgid resumed>) = 0 [pid 5239] <... setpgid resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] rmdir("./8/file0" [pid 5241] <... openat resumed>) = 3 [pid 5240] <... openat resumed>) = 3 [pid 5239] <... openat resumed>) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5241] write(3, "1000", 4 [pid 5240] write(3, "1000", 4 [pid 5239] write(3, "1000", 4 [pid 5001] close(3 [pid 5241] <... write resumed>) = 4 [pid 5240] <... write resumed>) = 4 [pid 5239] <... write resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5241] close(3 [pid 5240] close(3 [pid 5239] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] getdents64(3, [pid 5241] <... close resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5239] <... close resumed>) = 0 [pid 5241] symlink("/dev/binderfs", "./binderfs" [pid 5240] symlink("/dev/binderfs", "./binderfs" [pid 5239] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5243 ./strace-static-x86_64: Process 5243 attached [pid 5241] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5243] set_robust_list(0x55555710d5e0, 24 [pid 4998] close(3 [pid 5243] <... set_robust_list resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5243] chdir("./9" [pid 4998] rmdir("./8" [pid 5243] <... chdir resumed>) = 0 [pid 5240] <... symlink resumed>) = 0 [pid 5239] <... symlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] mkdir("./9", 0777 [pid 5243] <... prctl resumed>) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5243] setpgid(0, 0 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5243] <... setpgid resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5241] <... mmap resumed>) = 0x7f7cb894f000 [pid 5240] <... mmap resumed>) = 0x7f7cb894f000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5243] <... openat resumed>) = 3 [pid 5241] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5240] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5239] <... mmap resumed>) = 0x7f7cb894f000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5243] write(3, "1000", 4 [pid 4998] close(3 [pid 5243] <... write resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5243] close(3 [ 54.581897][ T5237] loop1: detected capacity change from 0 to 8192 [ 54.617796][ T5237] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] <... close resumed>) = 0 [pid 5241] <... mprotect resumed>) = 0 [pid 5240] <... mprotect resumed>) = 0 [pid 5239] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5243] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5244 [pid 5243] <... symlink resumed>) = 0 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5243] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5245], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5245 [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5245 attached ./strace-static-x86_64: Process 5244 attached [pid 5241] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5240] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5239] <... mprotect resumed>) = 0 [pid 5239] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5240] <... clone resumed>, parent_tid=[5247], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5247 [pid 5241] <... clone resumed>, parent_tid=[5246], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5246 [pid 5245] set_robust_list(0x7f7cb896f9e0, 24 [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... clone resumed>, parent_tid=[5248], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5248 [pid 5244] set_robust_list(0x55555710d5e0, 24 [pid 5241] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5247 attached ./strace-static-x86_64: Process 5246 attached [pid 5245] <... set_robust_list resumed>) = 0 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] getuid( [pid 5244] chdir("./9" [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... getuid resumed>) = 0 [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... chdir resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] memfd_create("syzkaller", 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5243] <... futex resumed>) = 0 [pid 5244] <... prctl resumed>) = 0 [pid 5245] <... memfd_create resumed>) = 3 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5247] set_robust_list(0x7f7cb896f9e0, 24 [pid 5246] set_robust_list(0x7f7cb896f9e0, 24./strace-static-x86_64: Process 5248 attached [pid 5244] setpgid(0, 0 [pid 5246] <... set_robust_list resumed>) = 0 [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] <... setpgid resumed>) = 0 [pid 5248] set_robust_list(0x7f7cb896f9e0, 24 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5246] getuid( [pid 5245] <... mmap resumed>) = 0x7f7cb054f000 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] getuid( [pid 5246] <... getuid resumed>) = 0 [pid 5244] write(3, "1000", 4 [pid 5247] <... getuid resumed>) = 0 [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... write resumed>) = 4 [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 1 [pid 5244] close(3 [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5247] <... futex resumed>) = 1 [pid 5246] memfd_create("syzkaller", 0 [pid 5244] <... close resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] <... memfd_create resumed>) = 3 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] <... symlink resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0 [pid 5246] <... mmap resumed>) = 0x7f7cb054f000 [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5247] <... memfd_create resumed>) = 3 [pid 5244] <... futex resumed>) = 0 [ 54.636457][ T5237] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 54.646795][ T5237] REISERFS (device loop1): using ordered data mode [ 54.655943][ T5237] reiserfs: using flush barriers [ 54.665650][ T5237] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5247] <... mmap resumed>) = 0x7f7cb054f000 [pid 5244] <... mmap resumed>) = 0x7f7cb894f000 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5244] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5248] getuid( [pid 5244] <... mprotect resumed>) = 0 [pid 5248] <... getuid resumed>) = 0 [pid 5244] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... clone resumed>, parent_tid=[5249], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5249 [pid 5239] <... futex resumed>) = 0 [pid 5248] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5249 attached [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5244] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5249] set_robust_list(0x7f7cb896f9e0, 24 [pid 5248] memfd_create("syzkaller", 0 [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] <... set_robust_list resumed>) = 0 [pid 5248] <... memfd_create resumed>) = 3 [pid 5249] getuid( [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5249] <... getuid resumed>) = 0 [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... mmap resumed>) = 0x7f7cb054f000 [pid 5249] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5237] <... mount resumed>) = 0 [pid 5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5237] chdir("./file0") = 0 [pid 5237] ioctl(4, LOOP_CLR_FD) = 0 [ 54.682810][ T5237] REISERFS (device loop1): checking transaction log (loop1) [ 54.704624][ T5237] REISERFS (device loop1): Using r5 hash to sort names [pid 5237] close(4 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5237] <... close resumed>) = 0 [pid 5245] <... write resumed>) = 4194304 [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] munmap(0x7f7cb054f000, 4194304 [pid 5237] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5245] <... munmap resumed>) = 0 [pid 5237] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5237] mkdir(".", 0777 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] <... openat resumed>) = 4 [pid 5237] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5245] ioctl(4, LOOP_SET_FD, 3 [pid 5237] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5245] <... ioctl resumed>) = 0 [pid 5245] close(3) = 0 [pid 5245] mkdir("./file0", 0777) = 0 [pid 5245] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5249] <... write resumed>) = 4194304 [pid 5249] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5246] <... write resumed>) = 4194304 [ 54.783174][ T5245] loop3: detected capacity change from 0 to 8192 [ 54.796412][ T5237] reiserfs: enabling write barrier flush mode [ 54.805681][ T5237] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5249] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5248] <... write resumed>) = 4194304 [pid 5247] <... write resumed>) = 4194304 [pid 5246] munmap(0x7f7cb054f000, 4194304 [pid 5237] <... mount resumed>) = 0 [pid 5248] munmap(0x7f7cb054f000, 4194304 [pid 5246] <... munmap resumed>) = 0 [pid 5248] <... munmap resumed>) = 0 [pid 5247] munmap(0x7f7cb054f000, 4194304) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5246] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5237] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5249] <... openat resumed>) = 4 [pid 5237] <... openat resumed>) = 4 [pid 5237] chdir("." [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5237] <... chdir resumed>) = 0 [ 54.832222][ T5245] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.841317][ T5248] loop5: detected capacity change from 0 to 8192 [ 54.845494][ T5245] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 54.851798][ T5246] loop4: detected capacity change from 0 to 8192 [ 54.861288][ T5245] REISERFS (device loop3): using ordered data mode [ 54.868087][ T5249] loop0: detected capacity change from 0 to 8192 [pid 5249] <... ioctl resumed>) = 0 [pid 5249] close(3) = 0 [pid 5249] mkdir("./file0", 0777) = 0 [pid 5249] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5237] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] <... ioctl resumed>) = 0 [pid 5246] close(3) = 0 [pid 5246] mkdir("./file0", 0777) = 0 [pid 5246] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5248] <... ioctl resumed>) = 0 [pid 5248] close(3) = 0 [pid 5248] mkdir("./file0", 0777) = 0 [pid 5248] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5247] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5236] <... futex resumed>) = 0 [pid 5247] <... ioctl resumed>) = 0 [pid 5247] close(3) = 0 [pid 5247] mkdir("./file0", 0777) = 0 [pid 5247] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... futex resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... open resumed>) = 5 [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5236] <... futex resumed>) = 0 [pid 5237] <... open resumed>) = 6 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5237] ftruncate(6, 33587199 [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 54.874012][ T5245] reiserfs: using flush barriers [ 54.885183][ T5247] loop2: detected capacity change from 0 to 8192 [ 54.886287][ T5245] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.898448][ T5246] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.908023][ T5245] REISERFS (device loop3): checking transaction log (loop3) [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... mount resumed>) = 0 [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] <... ftruncate resumed>) = 0 [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5236] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5255], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5255 [pid 5236] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 54.920796][ T5248] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.928583][ T5245] REISERFS (device loop3): Using r5 hash to sort names [ 54.940825][ T5249] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.962869][ T5246] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [pid 5236] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... openat resumed>) = 3 [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] chdir("./file0" [pid 5237] <... futex resumed>) = 0 [pid 5245] <... chdir resumed>) = 0 [pid 5237] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] ioctl(4, LOOP_CLR_FD) = 0 [pid 5245] close(4) = 0 [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5245] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 5245] mkdir(".", 0777 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5245] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... futex resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5237] ftruncate(-1, 18446744073709551609 [ 54.969101][ T5247] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.972238][ T5246] REISERFS (device loop4): using ordered data mode [ 54.991490][ T5246] reiserfs: using flush barriers [ 54.997342][ T5246] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.002532][ T5245] reiserfs: enabling write barrier flush mode [ 55.013894][ T5246] REISERFS (device loop4): checking transaction log (loop4) [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5255 attached [pid 5237] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5237] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5237] memfd_create("syzkaller", 0 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5255] set_robust_list(0x7f7cb094e9e0, 24 [pid 5237] <... memfd_create resumed>) = 7 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5255] <... set_robust_list resumed>) = 0 [pid 5237] <... mmap resumed>) = 0x7f7ca852e000 [ 55.026993][ T5248] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 55.029910][ T5246] REISERFS (device loop4): Using r5 hash to sort names [ 55.036140][ T5248] REISERFS (device loop5): using ordered data mode [ 55.049515][ T5248] reiserfs: using flush barriers [ 55.055208][ T5249] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 55.064459][ T5248] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5255] sendfile(5, 6, NULL, 281474978811909 [pid 5237] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5246] <... mount resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5246] chdir("./file0") = 0 [pid 5246] ioctl(4, LOOP_CLR_FD) = 0 [ 55.080631][ T5249] REISERFS (device loop0): using ordered data mode [ 55.087432][ T5248] REISERFS (device loop5): checking transaction log (loop5) [ 55.094883][ T5249] reiserfs: using flush barriers [ 55.100547][ T5248] REISERFS (device loop5): Using r5 hash to sort names [ 55.108367][ T5245] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 55.119519][ T5247] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [pid 5248] <... mount resumed>) = 0 [pid 5246] close(4 [pid 5245] <... mount resumed>) = 0 [pid 5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5246] <... close resumed>) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5248] chdir("./file0" [pid 5246] <... futex resumed>) = 1 [pid 5245] <... openat resumed>) = 4 [pid 5241] <... futex resumed>) = 0 [pid 5248] <... chdir resumed>) = 0 [pid 5246] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] chdir("." [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] ioctl(4, LOOP_CLR_FD [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... chdir resumed>) = 0 [pid 5246] mkdir(".", 0777) = -1 EEXIST (File exists) [ 55.126379][ T5249] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.128731][ T5247] REISERFS (device loop2): using ordered data mode [ 55.151512][ T5247] reiserfs: using flush barriers [pid 5246] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5248] <... ioctl resumed>) = 0 [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5248] close(4 [pid 5245] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5248] <... close resumed>) = 0 [pid 5245] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... write resumed>) = 4194304 [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 5237] munmap(0x7f7ca852e000, 4194304 [pid 5248] <... futex resumed>) = 1 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 0 [pid 5237] <... munmap resumed>) = 0 [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] mkdir(".", 0777 [pid 5245] <... open resumed>) = 5 [pid 5239] <... futex resumed>) = 0 [pid 5248] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5248] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 5237] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5237] ioctl(8, LOOP_CLR_FD) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5245] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5237] ioctl(8, LOOP_SET_FD, 7 [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5245] <... futex resumed>) = 0 [ 55.172544][ T5247] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.176417][ T5246] reiserfs: enabling write barrier flush mode [ 55.202501][ T5247] REISERFS (device loop2): checking transaction log (loop2) [ 55.206815][ T5249] REISERFS (device loop0): checking transaction log (loop0) [ 55.221181][ T5248] reiserfs: enabling write barrier flush mode [pid 5237] close(8 [pid 5245] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] <... close resumed>) = 0 [pid 5237] close(7 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5245] ftruncate(6, 33587199 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... ftruncate resumed>) = 0 [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5243] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... mount resumed>) = 0 [pid 5245] sendfile(5, 6, NULL, 281474978811909 [pid 5243] <... futex resumed>) = 0 [pid 5246] <... mount resumed>) = 0 [pid 5243] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] <... mount resumed>) = 0 [pid 5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5246] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5247] <... openat resumed>) = 3 [pid 5246] <... openat resumed>) = 4 [pid 5249] <... openat resumed>) = 3 [pid 5247] chdir("./file0" [pid 5246] chdir("." [pid 5249] chdir("./file0" [pid 5247] <... chdir resumed>) = 0 [pid 5246] <... chdir resumed>) = 0 [pid 5249] <... chdir resumed>) = 0 [pid 5247] ioctl(4, LOOP_CLR_FD [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... close resumed>) = 0 [pid 5249] ioctl(4, LOOP_CLR_FD [pid 5247] <... ioctl resumed>) = 0 [pid 5246] <... futex resumed>) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5249] <... ioctl resumed>) = 0 [pid 5247] close(4 [pid 5246] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] close(4 [pid 5247] <... close resumed>) = 0 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5241] <... futex resumed>) = 0 [pid 5249] <... close resumed>) = 0 [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 1 [pid 5246] <... open resumed>) = 5 [pid 5240] <... futex resumed>) = 0 [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 1 [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = 0 [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5236] <... futex resumed>) = 0 [pid 5249] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 1 [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] mkdir(".", 0777 [pid 5246] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... futex resumed>) = 0 [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] mkdir(".", 0777 [pid 5247] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5241] <... futex resumed>) = 0 [pid 5249] <... mkdir resumed>) = -1 EEXIST (File exists) [ 55.228896][ T5246] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 55.249633][ T5249] REISERFS (device loop0): Using r5 hash to sort names [ 55.256639][ T5247] REISERFS (device loop2): Using r5 hash to sort names [ 55.279049][ T5247] reiserfs: enabling write barrier flush mode [pid 5247] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5246] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5246] <... open resumed>) = 6 [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5246] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5241] <... futex resumed>) = 0 [pid 5246] ftruncate(6, 33587199 [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] <... ftruncate resumed>) = 0 [pid 5248] <... mount resumed>) = 0 [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5237] <... open resumed>) = 7 [pid 5255] <... sendfile resumed>) = 524288 [pid 5248] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5246] <... futex resumed>) = 1 [pid 5243] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 55.281609][ T5248] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 55.286401][ T5249] reiserfs: enabling write barrier flush mode [ 55.308331][ T5247] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5255] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... openat resumed>) = 4 [pid 5246] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... futex resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5236] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] chdir("." [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5237] creat("./file0", 000 [pid 5236] <... futex resumed>) = 0 [pid 5248] <... chdir resumed>) = 0 [pid 5243] <... mmap resumed>) = 0x7f7cb092e000 [pid 5237] <... creat resumed>) = 8 [pid 5236] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5237] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] <... futex resumed>) = 0 [pid 5249] <... mount resumed>) = 0 [pid 5248] <... futex resumed>) = 1 [pid 5246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... mprotect resumed>) = 0 [pid 5241] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5236] exit_group(0 [pid 5249] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5248] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] <... mount resumed>) = 0 [pid 5246] sendfile(5, 6, NULL, 281474978811909 [pid 5243] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5241] <... futex resumed>) = 0 [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... exit_group resumed>) = ? [pid 5255] +++ exited with 0 +++ [pid 5249] <... openat resumed>) = 4 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5241] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5256 attached [pid 5249] chdir("." [pid 5248] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5247] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5243] <... clone resumed>, parent_tid=[5256], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5256 [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] set_robust_list(0x7f7cb094e9e0, 24 [pid 5249] <... chdir resumed>) = 0 [pid 5247] <... openat resumed>) = 4 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] chdir("." [pid 5256] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5249] <... futex resumed>) = 1 [pid 5247] <... chdir resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 5237] +++ exited with 0 +++ [pid 5236] +++ exited with 0 +++ [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5249] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... open resumed>) = 5 [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5256] ftruncate(-1, 18446744073709551609 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5256] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5248] <... futex resumed>) = 1 [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5256] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... open resumed>) = 5 [pid 5248] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... futex resumed>) = 0 [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 0 [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5243] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 0 [pid 4999] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] memfd_create("syzkaller", 0 [pid 5249] <... futex resumed>) = 1 [pid 5248] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5247] <... open resumed>) = 5 [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] <... memfd_create resumed>) = 7 [pid 5249] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... open resumed>) = 6 [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5256] <... mmap resumed>) = 0x7f7ca852e000 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5248] <... futex resumed>) = 1 [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5249] <... open resumed>) = 6 [pid 5248] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... futex resumed>) = 0 [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(3, [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5248] ftruncate(6, 33587199 [pid 5247] <... open resumed>) = 6 [pid 5244] <... futex resumed>) = 0 [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] getdents64(3, [pid 5249] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... ftruncate resumed>) = 0 [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 4999] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] ftruncate(6, 33587199 [pid 5248] <... futex resumed>) = 1 [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5248] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] lstat("./9/binderfs", [pid 5249] <... ftruncate resumed>) = 0 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] sendfile(5, 6, NULL, 281474978811909 [pid 5247] ftruncate(6, 33587199 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] unlink("./9/binderfs" [pid 5249] <... futex resumed>) = 1 [pid 5247] <... ftruncate resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5249] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5249] sendfile(5, 6, NULL, 281474978811909 [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... futex resumed>) = 0 [pid 5247] sendfile(5, 6, NULL, 281474978811909 [pid 5240] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 55.336976][ T5249] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5256] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5241] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5241] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5241] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5257], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5257 [pid 5241] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5257 attached [pid 5241] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] set_robust_list(0x7f7cb094e9e0, 24 [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5239] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = 0 [pid 5257] <... set_robust_list resumed>) = 0 [pid 5244] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] ftruncate(-1, 18446744073709551609 [pid 5244] <... futex resumed>) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4999] lstat("./9/file0", [pid 5257] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... mmap resumed>) = 0x7f7cb092e000 [pid 5240] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... mmap resumed>) = 0x7f7cb092e000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5257] <... futex resumed>) = 1 [pid 5244] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5241] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5239] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... mprotect resumed>) = 0 [pid 5241] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5241] <... futex resumed>) = 0 [pid 5240] <... mmap resumed>) = 0x7f7cb092e000 [pid 5239] <... mprotect resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] memfd_create("syzkaller", 0 [pid 5241] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5239] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... openat resumed>) = 4 [pid 5257] <... memfd_create resumed>) = 7 [pid 5244] <... clone resumed>, parent_tid=[5258], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5258 [pid 5240] <... mprotect resumed>) = 0 [pid 4999] fstat(4, [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5257] <... mmap resumed>) = 0x7f7ca852e000 [pid 5244] <... futex resumed>) = 0 [pid 5239] <... clone resumed>, parent_tid=[5259], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5259 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5259 attached [pid 5244] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... clone resumed>, parent_tid=[5260], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5260 [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5240] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 5240] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5240] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] close(4) = 0 [pid 4999] rmdir("./9/file0") = 0 [pid 4999] getdents64(3, [pid 5239] <... futex resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5259] set_robust_list(0x7f7cb094e9e0, 24 [pid 5239] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 5258 attached [pid 4999] rmdir("./9" [pid 5258] set_robust_list(0x7f7cb094e9e0, 24 [pid 4999] <... rmdir resumed>) = 0 [pid 5258] <... set_robust_list resumed>) = 0 [pid 4999] mkdir("./10", 0777 [pid 5259] <... set_robust_list resumed>) = 0 [pid 5258] ftruncate(-1, 18446744073709551609 [pid 4999] <... mkdir resumed>) = 0 [pid 5258] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5260 attached [pid 5259] ftruncate(-1, 18446744073709551609 [pid 5258] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... openat resumed>) = 3 [pid 5260] set_robust_list(0x7f7cb094e9e0, 24 [pid 5258] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5260] <... set_robust_list resumed>) = 0 [pid 5258] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5260] ftruncate(-1, 18446744073709551609 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 4999] close(3 [pid 5260] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5258] memfd_create("syzkaller", 0 [pid 5244] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] <... close resumed>) = 0 [pid 5260] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... memfd_create resumed>) = 7 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5260] <... futex resumed>) = 1 [pid 5259] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] <... futex resumed>) = 0 [pid 5260] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... mmap resumed>) = 0x7f7ca852e000 [pid 5240] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5261 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... futex resumed>) = 1 [pid 5240] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5260] memfd_create("syzkaller", 0 [pid 5240] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] <... memfd_create resumed>) = 7 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5239] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] memfd_create("syzkaller", 0 [pid 5239] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5261 attached [pid 5259] <... memfd_create resumed>) = 7 [pid 5257] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5256] <... write resumed>) = 4194304 [pid 5239] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5261] set_robust_list(0x55555710d5e0, 24 [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5256] munmap(0x7f7ca852e000, 4194304 [pid 5259] <... mmap resumed>) = 0x7f7ca852e000 [pid 5256] <... munmap resumed>) = 0 [pid 5261] <... set_robust_list resumed>) = 0 [pid 5261] chdir("./10") = 0 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5261] setpgid(0, 0) = 0 [pid 5256] <... openat resumed>) = 8 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5256] ioctl(8, LOOP_SET_FD, 7 [pid 5261] write(3, "1000", 4) = 4 [pid 5256] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5261] close(3 [pid 5256] ioctl(8, LOOP_CLR_FD [pid 5261] <... close resumed>) = 0 [pid 5256] <... ioctl resumed>) = 0 [pid 5261] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5261] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5256] ioctl(8, LOOP_SET_FD, 7 [pid 5261] <... mprotect resumed>) = 0 [pid 5256] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5256] close(8 [pid 5261] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5256] <... close resumed>) = 0 [pid 5256] close(7 [pid 5260] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5261] <... clone resumed>, parent_tid=[5262], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5262 [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5262 attached [pid 5262] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5262] getuid() = 0 [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] <... futex resumed>) = 0 [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5262] memfd_create("syzkaller", 0) = 3 [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [pid 5259] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5257] <... write resumed>) = 4194304 [pid 5256] <... close resumed>) = 0 [pid 5256] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] munmap(0x7f7ca852e000, 4194304 [pid 5258] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5257] <... munmap resumed>) = 0 [pid 5256] <... open resumed>) = 7 [pid 5257] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 5256] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] ioctl(8, LOOP_SET_FD, 7 [pid 5256] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5256] creat("./file0", 000 [pid 5243] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... write resumed>) = 4194304 [pid 5257] ioctl(8, LOOP_CLR_FD [pid 5256] <... creat resumed>) = 8 [pid 5245] <... sendfile resumed>) = 851968 [pid 5260] munmap(0x7f7ca852e000, 4194304 [pid 5257] <... ioctl resumed>) = 0 [pid 5256] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... munmap resumed>) = 0 [pid 5256] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5243] exit_group(0) = ? [pid 5256] +++ exited with 0 +++ [pid 5245] +++ exited with 0 +++ [pid 5243] +++ exited with 0 +++ [pid 5257] ioctl(8, LOOP_SET_FD, 7 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5257] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5257] close(8 [pid 5001] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... close resumed>) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5257] close(7 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5260] <... openat resumed>) = 8 [pid 5001] <... openat resumed>) = 3 [pid 5260] ioctl(8, LOOP_SET_FD, 7 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5260] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5001] getdents64(3, [pid 5260] ioctl(8, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5260] <... ioctl resumed>) = 0 [pid 5001] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./9/binderfs") = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5260] close(8 [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5260] <... close resumed>) = 0 [pid 5257] <... close resumed>) = 0 [pid 5260] close(7 [pid 5257] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5241] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... close resumed>) = 0 [pid 5260] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5240] <... futex resumed>) = 0 [pid 5240] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5240] <... futex resumed>) = 0 [pid 5240] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... open resumed>) = 7 [pid 5262] <... write resumed>) = 4194304 [pid 5260] <... open resumed>) = 7 [pid 5257] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] munmap(0x7f7cb054f000, 4194304 [pid 5260] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5262] <... munmap resumed>) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5259] <... write resumed>) = 4194304 [pid 5258] <... write resumed>) = 4194304 [pid 5257] <... futex resumed>) = 1 [pid 5241] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... futex resumed>) = 0 [pid 5262] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5260] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] munmap(0x7f7ca852e000, 4194304 [pid 5258] munmap(0x7f7ca852e000, 4194304 [pid 5257] creat("./file0", 000 [pid 5241] <... futex resumed>) = 0 [pid 5240] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... openat resumed>) = 4 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... munmap resumed>) = 0 [pid 5258] <... munmap resumed>) = 0 [pid 5257] <... creat resumed>) = 8 [pid 5247] <... sendfile resumed>) = 851968 [pid 5241] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... futex resumed>) = 0 [pid 5262] ioctl(4, LOOP_SET_FD, 3 [pid 5260] creat("./file0", 000 [pid 5259] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5258] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5257] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... ioctl resumed>) = 0 [pid 5260] <... creat resumed>) = 8 [pid 5259] <... openat resumed>) = 8 [pid 5258] <... openat resumed>) = 8 [pid 5257] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5262] close(3 [pid 5260] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] ioctl(8, LOOP_SET_FD, 7 [pid 5258] ioctl(8, LOOP_SET_FD, 7 [pid 5257] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] <... close resumed>) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5259] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5258] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5240] <... futex resumed>) = 0 [pid 5262] mkdir("./file0", 0777 [pid 5260] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] ioctl(8, LOOP_CLR_FD [pid 5258] ioctl(8, LOOP_CLR_FD [pid 5240] exit_group(0 [pid 5262] <... mkdir resumed>) = 0 [pid 5260] <... futex resumed>) = ? [pid 5259] <... ioctl resumed>) = 0 [pid 5258] <... ioctl resumed>) = 0 [pid 5247] <... futex resumed>) = ? [pid 5240] <... exit_group resumed>) = ? [pid 5262] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5260] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5001] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 5000] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] ioctl(8, LOOP_SET_FD, 7 [pid 5258] ioctl(8, LOOP_SET_FD, 7 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5258] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5001] getdents64(4, [pid 5000] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./9/file0") = 0 [pid 5001] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./9") = 0 [pid 5001] mkdir("./10", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5259] close(8 [pid 5258] close(8 [pid 5001] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5264 [ 55.828329][ T5262] loop1: detected capacity change from 0 to 8192 [ 55.852021][ T5262] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.866040][ T5262] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [pid 5259] <... close resumed>) = 0 [pid 5258] <... close resumed>) = 0 [pid 5246] <... sendfile resumed>) = 1048576 [pid 5000] fstat(3, [pid 5246] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5246] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5264 attached [pid 5264] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5259] close(7 [pid 5258] close(7 [pid 5241] exit_group(0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5264] chdir("./10") = 0 [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5264] setpgid(0, 0) = 0 [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5264] write(3, "1000", 4) = 4 [pid 5264] close(3) = 0 [pid 5264] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] <... close resumed>) = 0 [pid 5257] <... futex resumed>) = ? [pid 5246] <... futex resumed>) = ? [pid 5241] <... exit_group resumed>) = ? [pid 5000] getdents64(3, [pid 5264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5258] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] +++ exited with 0 +++ [pid 5246] +++ exited with 0 +++ [pid 5264] <... mmap resumed>) = 0x7f7cb894f000 [pid 5241] +++ exited with 0 +++ [pid 5264] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5258] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [ 55.876067][ T5262] REISERFS (device loop1): using ordered data mode [ 55.883468][ T5262] reiserfs: using flush barriers [ 55.890180][ T5262] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.920421][ T5262] REISERFS (device loop1): checking transaction log (loop1) [pid 5000] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5264] <... mprotect resumed>) = 0 [pid 5258] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5265], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5265 [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5244] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] unlink("./9/binderfs" [pid 5000] lstat("./9/binderfs", [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5265 attached [pid 5262] <... mount resumed>) = 0 [pid 5259] <... close resumed>) = 0 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] unlink("./9/binderfs" [pid 5265] set_robust_list(0x7f7cb896f9e0, 24 [pid 5262] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5259] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... unlink resumed>) = 0 [pid 5265] <... set_robust_list resumed>) = 0 [pid 5262] <... openat resumed>) = 3 [pid 5259] <... futex resumed>) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5265] getuid( [pid 5262] chdir("./file0" [pid 5259] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... getuid resumed>) = 0 [pid 5262] <... chdir resumed>) = 0 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5239] <... futex resumed>) = 0 [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] ioctl(4, LOOP_CLR_FD [pid 5259] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5239] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5262] <... ioctl resumed>) = 0 [pid 5265] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] close(4) = 0 [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5262] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5262] mkdir(".", 0777 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5262] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5262] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5265] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5259] <... open resumed>) = 7 [pid 5265] memfd_create("syzkaller", 0 [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] <... memfd_create resumed>) = 3 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 [ 55.930934][ T5262] REISERFS (device loop1): Using r5 hash to sort names [ 55.964275][ T5262] reiserfs: enabling write barrier flush mode [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7ca890d000 [pid 5248] <... sendfile resumed>) = 1310720 [pid 5244] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE [pid 5239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] <... mprotect resumed>) = 0 [pid 5239] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5239] <... futex resumed>) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] <... clone resumed>, parent_tid=[5266], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5266 [pid 5239] <... mmap resumed>) = 0x7f7ca890d000 [pid 5258] <... open resumed>) = 7 [pid 5248] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE [pid 5259] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 5239] <... mprotect resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5248] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5259] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] <... clone resumed>, parent_tid=[5267], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5267 [pid 5239] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5266 attached [pid 5266] set_robust_list(0x7f7ca892d9e0, 24) = 0 [pid 5266] creat("./file0", 000 [pid 5249] <... sendfile resumed>) = 1245184 [pid 5266] <... creat resumed>) = 8 [pid 5249] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5267 attached [pid 5266] <... futex resumed>) = 1 [pid 5249] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... futex resumed>) = 0 [pid 5267] set_robust_list(0x7f7ca892d9e0, 24 [pid 5266] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] exit_group(0 [pid 5267] <... set_robust_list resumed>) = 0 [pid 5266] <... futex resumed>) = ? [pid 5258] <... futex resumed>) = ? [pid 5249] <... futex resumed>) = ? [pid 5244] <... exit_group resumed>) = ? [pid 5267] creat("./file0", 000 [pid 5266] +++ exited with 0 +++ [pid 5249] +++ exited with 0 +++ [pid 5267] <... creat resumed>) = 8 [pid 5267] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] +++ exited with 0 +++ [pid 5244] +++ exited with 0 +++ [pid 5267] <... futex resumed>) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5267] futex(0x7f7cb8a49808, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5267] <... futex resumed>) = ? [pid 5259] <... futex resumed>) = ? [pid 5248] <... futex resumed>) = ? [pid 5239] <... exit_group resumed>) = ? [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5267] +++ exited with 0 +++ [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5259] +++ exited with 0 +++ [pid 5248] +++ exited with 0 +++ [pid 5239] +++ exited with 0 +++ [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4998] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... restart_syscall resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, [pid 4998] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 4998] lstat("./9/binderfs", [pid 5003] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5262] <... mount resumed>) = 0 [pid 5003] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./9/binderfs" [pid 5262] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5262] <... openat resumed>) = 4 [pid 5003] lstat("./9/binderfs", [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] chdir("." [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5262] <... chdir resumed>) = 0 [pid 5003] unlink("./9/binderfs" [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... unlink resumed>) = 0 [pid 5262] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... open resumed>) = 5 [pid 5261] <... futex resumed>) = 0 [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [ 55.997678][ T5262] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... open resumed>) = 6 [pid 5261] <... futex resumed>) = 0 [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5262] ftruncate(6, 33587199 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... ftruncate resumed>) = 0 [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5262] sendfile(5, 6, NULL, 281474978811909 [pid 5261] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./9/file0", [pid 5000] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 5002] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5002] fstat(4, [pid 5000] getdents64(4, 0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5000] rmdir("./9/file0" [pid 5002] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] getdents64(4, [pid 5000] getdents64(3, [pid 5002] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5000] close(3 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./9/file0" [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./9") = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] mkdir("./10", 0777 [pid 5002] getdents64(3, 0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./9" [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] mkdir("./10", 0777 [pid 5000] close(3) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... mkdir resumed>) = 0 [pid 5261] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5261] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5268 [pid 5261] <... mprotect resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5261] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5002] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5268 attached [pid 5268] set_robust_list(0x55555710d5e0, 24 [pid 5261] <... clone resumed>, parent_tid=[5269], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5269 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5268] <... set_robust_list resumed>) = 0 [pid 5261] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] close(3 [pid 5261] <... futex resumed>) = 0 [pid 5261] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5268] chdir("./10" [pid 5002] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5270 [pid 5268] <... chdir resumed>) = 0 [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5268] setpgid(0, 0 [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5269 attached [pid 5268] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5269] set_robust_list(0x7f7cb094e9e0, 24 [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5269] <... set_robust_list resumed>) = 0 [pid 5268] <... openat resumed>) = 3 [pid 5269] ftruncate(-1, 18446744073709551609 [pid 5268] write(3, "1000", 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5270 attached [pid 4998] getdents64(4, [pid 5269] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... write resumed>) = 4 [pid 5268] close(3 [pid 5269] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... close resumed>) = 0 [pid 5270] set_robust_list(0x55555710d5e0, 24 [pid 5269] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5270] <... set_robust_list resumed>) = 0 [pid 5261] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] getdents64(4, [pid 5270] chdir("./10" [pid 5269] memfd_create("syzkaller", 0 [pid 5268] symlink("/dev/binderfs", "./binderfs" [pid 5265] <... write resumed>) = 4194304 [pid 5261] <... futex resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5270] <... chdir resumed>) = 0 [pid 5269] <... memfd_create resumed>) = 7 [pid 5268] <... symlink resumed>) = 0 [pid 5261] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4998] close(4 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... close resumed>) = 0 [pid 5270] <... prctl resumed>) = 0 [pid 5269] <... mmap resumed>) = 0x7f7ca852e000 [pid 5268] <... futex resumed>) = 0 [pid 4998] rmdir("./9/file0" [pid 5270] setpgid(0, 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5270] <... setpgid resumed>) = 0 [pid 5268] <... mmap resumed>) = 0x7f7cb894f000 [pid 4998] getdents64(3, [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5268] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5265] munmap(0x7f7cb054f000, 4194304 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5270] <... openat resumed>) = 3 [pid 5268] <... mprotect resumed>) = 0 [pid 5265] <... munmap resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] close(3 [pid 5270] write(3, "1000", 4 [pid 5268] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5270] <... write resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./9" [pid 5270] close(3 [pid 5268] <... clone resumed>, parent_tid=[5271], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5271 [pid 5265] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] lstat("./9/file0", [pid 4998] <... rmdir resumed>) = 0 [pid 5270] <... close resumed>) = 0 [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... openat resumed>) = 4 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] mkdir("./10", 0777./strace-static-x86_64: Process 5271 attached [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5268] <... futex resumed>) = 0 [pid 5265] ioctl(4, LOOP_SET_FD, 3 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... mkdir resumed>) = 0 [pid 5271] set_robust_list(0x7f7cb896f9e0, 24 [pid 5270] <... symlink resumed>) = 0 [pid 5269] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5271] <... set_robust_list resumed>) = 0 [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5271] getuid( [pid 5270] <... futex resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5271] <... getuid resumed>) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5265] <... ioctl resumed>) = 0 [pid 5003] fstat(4, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... mmap resumed>) = 0x7f7cb894f000 [pid 5265] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5271] <... futex resumed>) = 1 [pid 5270] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5268] <... futex resumed>) = 0 [pid 5265] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 5271] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] <... mprotect resumed>) = 0 [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5268] <... futex resumed>) = 0 [pid 5265] <... mkdir resumed>) = 0 [pid 5003] getdents64(4, [pid 5271] memfd_create("syzkaller", 0 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] mount("/dev/loop3", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5003] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5272 [pid 5271] <... memfd_create resumed>) = 3 [pid 5270] <... clone resumed>, parent_tid=[5273], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5273 [pid 5003] close(4./strace-static-x86_64: Process 5273 attached [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... close resumed>) = 0 [pid 5273] set_robust_list(0x7f7cb896f9e0, 24 [pid 5271] <... mmap resumed>) = 0x7f7cb054f000 [pid 5270] <... futex resumed>) = 0 [pid 5003] rmdir("./9/file0"./strace-static-x86_64: Process 5272 attached [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5272] chdir("./10") = 0 [pid 5272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5272] setpgid(0, 0) = 0 [pid 5272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 56.191202][ T5265] loop3: detected capacity change from 0 to 8192 [pid 5003] <... rmdir resumed>) = 0 [pid 5273] <... set_robust_list resumed>) = 0 [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5272] write(3, "1000", 4 [pid 5003] getdents64(3, [pid 5273] getuid( [pid 5003] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5273] <... getuid resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5273] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... write resumed>) = 4 [pid 5003] rmdir("./9" [pid 5272] close(3 [pid 5273] <... futex resumed>) = 1 [pid 5272] <... close resumed>) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5272] symlink("/dev/binderfs", "./binderfs" [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] mkdir("./10", 0777 [pid 5273] memfd_create("syzkaller", 0 [pid 5272] <... symlink resumed>) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5273] <... memfd_create resumed>) = 3 [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] <... openat resumed>) = 3 [pid 5273] <... mmap resumed>) = 0x7f7cb054f000 [pid 5272] <... futex resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5272] <... mmap resumed>) = 0x7f7cb894f000 [pid 5003] close(3 [pid 5272] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE [pid 5003] <... close resumed>) = 0 [pid 5272] <... mprotect resumed>) = 0 [pid 5272] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5275], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5275 [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5269] <... write resumed>) = 4194304 [pid 5003] <... clone resumed>, child_tidptr=0x55555710d5d0) = 5276 [pid 5269] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5269] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 5269] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5275 attached [pid 5269] ioctl(8, LOOP_CLR_FD) = 0 [pid 5275] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5275] getuid() = 0 [pid 5269] ioctl(8, LOOP_SET_FD, 7 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5272] <... futex resumed>) = 0 [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 56.234145][ T5265] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.260301][ T5265] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 56.270600][ T5265] REISERFS (device loop3): using ordered data mode [ 56.277416][ T5265] reiserfs: using flush barriers [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5275] <... futex resumed>) = 1 [pid 5275] memfd_create("syzkaller", 0 [pid 5269] close(8) = 0 [pid 5269] close(7 [pid 5275] <... memfd_create resumed>) = 3 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 ./strace-static-x86_64: Process 5276 attached [pid 5276] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5276] chdir("./10") = 0 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5276] setpgid(0, 0) = 0 [pid 5265] <... mount resumed>) = 0 [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5276] <... openat resumed>) = 3 [pid 5276] write(3, "1000", 4 [pid 5265] <... openat resumed>) = 3 [pid 5276] <... write resumed>) = 4 [pid 5273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5271] <... write resumed>) = 4194304 [pid 5265] chdir("./file0" [pid 5276] close(3) = 0 [pid 5276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5276] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5276] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5277], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5277 [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5277 attached [pid 5271] munmap(0x7f7cb054f000, 4194304 [pid 5265] <... chdir resumed>) = 0 [pid 5271] <... munmap resumed>) = 0 [pid 5265] ioctl(4, LOOP_CLR_FD [pid 5271] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5265] <... ioctl resumed>) = 0 [pid 5271] <... openat resumed>) = 4 [ 56.285743][ T5265] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.302811][ T5265] REISERFS (device loop3): checking transaction log (loop3) [ 56.310961][ T5265] REISERFS (device loop3): Using r5 hash to sort names [pid 5265] close(4 [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5265] <... close resumed>) = 0 [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5265] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... futex resumed>) = 0 [pid 5277] set_robust_list(0x7f7cb896f9e0, 24 [pid 5269] <... close resumed>) = 0 [pid 5265] mkdir(".", 0777 [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5277] <... set_robust_list resumed>) = 0 [pid 5265] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5277] getuid( [pid 5269] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5277] <... getuid resumed>) = 0 [pid 5273] <... write resumed>) = 4194304 [pid 5269] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5275] <... write resumed>) = 4194304 [pid 5273] munmap(0x7f7cb054f000, 4194304 [pid 5271] <... ioctl resumed>) = 0 [pid 5261] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] munmap(0x7f7cb054f000, 4194304 [pid 5273] <... munmap resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5275] <... munmap resumed>) = 0 [pid 5273] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5271] close(3 [pid 5269] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5275] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5273] <... openat resumed>) = 4 [pid 5275] <... openat resumed>) = 4 [ 56.366937][ T5271] loop2: detected capacity change from 0 to 8192 [ 56.387445][ T5265] reiserfs: enabling write barrier flush mode [ 56.404383][ T5265] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5273] ioctl(4, LOOP_SET_FD, 3 [pid 5271] <... close resumed>) = 0 [pid 5277] memfd_create("syzkaller", 0 [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] ioctl(4, LOOP_SET_FD, 3 [pid 5271] mkdir("./file0", 0777 [pid 5261] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... memfd_create resumed>) = 3 [pid 5276] <... futex resumed>) = 0 [pid 5275] <... ioctl resumed>) = 0 [pid 5273] <... ioctl resumed>) = 0 [pid 5271] <... mkdir resumed>) = 0 [pid 5269] <... open resumed>) = 7 [pid 5265] <... mount resumed>) = 0 [pid 5277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5275] close(3 [pid 5271] mount("/dev/loop2", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5277] <... mmap resumed>) = 0x7f7cb054f000 [pid 5275] <... close resumed>) = 0 [pid 5273] close(3 [pid 5269] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5275] mkdir("./file0", 0777 [pid 5273] <... close resumed>) = 0 [pid 5275] <... mkdir resumed>) = 0 [pid 5273] mkdir("./file0", 0777 [pid 5275] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5273] <... mkdir resumed>) = 0 [pid 5273] mount("/dev/loop4", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5265] <... openat resumed>) = 4 [pid 5269] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5265] chdir("." [pid 5261] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... chdir resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] creat("./file0", 000 [pid 5265] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5262] <... sendfile resumed>) = 786432 [pid 5265] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5269] <... creat resumed>) = 8 [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [ 56.405624][ T5273] loop4: detected capacity change from 0 to 8192 [ 56.423082][ T5275] loop0: detected capacity change from 0 to 8192 [ 56.434920][ T5271] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.449958][ T5271] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 56.460597][ T5271] REISERFS (device loop2): using ordered data mode [pid 5262] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5265] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] <... futex resumed>) = 0 [pid 5261] exit_group(0 [pid 5265] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] <... exit_group resumed>) = ? [pid 5277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5269] <... futex resumed>) = ? [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] +++ exited with 0 +++ [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] +++ exited with 0 +++ [pid 5261] +++ exited with 0 +++ [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 56.460613][ T5275] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.467450][ T5271] reiserfs: using flush barriers [ 56.480379][ T5273] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.485964][ T5271] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 4999] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./10/binderfs", [pid 5264] <... futex resumed>) = 1 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5265] <... futex resumed>) = 0 [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 4999] unlink("./10/binderfs" [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5265] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... futex resumed>) = 0 [pid 5265] ftruncate(6, 33587199 [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... mount resumed>) = 0 [pid 5265] <... ftruncate resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... openat resumed>) = 3 [pid 5265] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5271] chdir("./file0" [pid 5265] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] <... chdir resumed>) = 0 [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] ioctl(4, LOOP_CLR_FD [ 56.516384][ T5271] REISERFS (device loop2): checking transaction log (loop2) [ 56.525102][ T5271] REISERFS (device loop2): Using r5 hash to sort names [ 56.533527][ T5273] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 56.536484][ T5275] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 56.552517][ T5275] REISERFS (device loop0): using ordered data mode [ 56.559516][ T5275] reiserfs: using flush barriers [pid 5265] sendfile(5, 6, NULL, 281474978811909 [pid 5277] <... write resumed>) = 4194304 [pid 5277] munmap(0x7f7cb054f000, 4194304 [pid 5271] <... ioctl resumed>) = 0 [pid 5271] close(4) = 0 [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5277] <... munmap resumed>) = 0 [pid 5277] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5277] ioctl(4, LOOP_SET_FD, 3 [pid 5271] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5271] mkdir(".", 0777 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5271] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5275] <... mount resumed>) = 0 [ 56.565302][ T5275] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.574984][ T5273] REISERFS (device loop4): using ordered data mode [ 56.593882][ T5275] REISERFS (device loop0): checking transaction log (loop0) [ 56.602722][ T5275] REISERFS (device loop0): Using r5 hash to sort names [ 56.603664][ T5277] loop5: detected capacity change from 0 to 8192 [pid 5271] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5264] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5275] <... openat resumed>) = 3 [pid 5277] <... ioctl resumed>) = 0 [pid 5275] chdir("./file0" [pid 5264] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... umount2 resumed>) = 0 [pid 5277] close(3 [pid 5275] <... chdir resumed>) = 0 [pid 5271] <... mount resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5277] <... close resumed>) = 0 [pid 5277] mkdir("./file0", 0777) = 0 [pid 5277] mount("/dev/loop5", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, "" [pid 5275] ioctl(4, LOOP_CLR_FD) = 0 [pid 5275] close(4) = 0 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5272] <... futex resumed>) = 0 [pid 5271] <... openat resumed>) = 4 [pid 5264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] chdir("." [pid 5264] <... mmap resumed>) = 0x7f7cb092e000 [ 56.610450][ T5273] reiserfs: using flush barriers [ 56.621507][ T5271] reiserfs: enabling write barrier flush mode [ 56.633810][ T5271] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 56.643271][ T5273] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.660900][ T5273] REISERFS (device loop4): checking transaction log (loop4) [pid 4999] lstat("./10/file0", [pid 5275] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = 1 [pid 5271] <... chdir resumed>) = 0 [pid 5264] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5275] mkdir(".", 0777 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... mprotect resumed>) = 0 [pid 5275] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5271] <... futex resumed>) = 1 [pid 5264] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5275] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5271] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... futex resumed>) = 0 [pid 5264] <... clone resumed>, parent_tid=[5282], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5282 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] <... futex resumed>) = 0 [pid 5264] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = 1 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5282 attached [pid 5271] <... open resumed>) = 5 [pid 4999] <... openat resumed>) = 4 [pid 5282] set_robust_list(0x7f7cb094e9e0, 24) = 0 [pid 5282] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5282] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5282] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... futex resumed>) = 0 [pid 5282] memfd_create("syzkaller", 0 [pid 5264] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5282] <... memfd_create resumed>) = 7 [ 56.672099][ T5277] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.679538][ T5275] reiserfs: enabling write barrier flush mode [ 56.696740][ T5277] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 56.706548][ T5277] REISERFS (device loop5): using ordered data mode [ 56.707330][ T5273] REISERFS (device loop4): Using r5 hash to sort names [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] fstat(4, [pid 5271] <... futex resumed>) = 1 [pid 5268] <... futex resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5271] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] getdents64(4, [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... futex resumed>) = 0 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... getdents64 resumed>0x555557116660 /* 2 entries */, 32768) = 48 [pid 5271] <... open resumed>) = 6 [pid 4999] getdents64(4, [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... getdents64 resumed>0x555557116660 /* 0 entries */, 32768) = 0 [pid 5271] <... futex resumed>) = 1 [pid 5268] <... futex resumed>) = 0 [pid 4999] close(4 [pid 5271] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... close resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rmdir("./10/file0" [pid 5271] ftruncate(6, 33587199 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5271] <... ftruncate resumed>) = 0 [pid 4999] <... getdents64 resumed>0x55555710e620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./10") = 0 [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] <... futex resumed>) = 0 [pid 4999] mkdir("./11", 0777 [pid 5268] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] sendfile(5, 6, NULL, 281474978811909 [pid 5268] <... futex resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5268] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5282] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555710d5d0) = 5283 [ 56.713076][ T5277] reiserfs: using flush barriers [ 56.725092][ T5277] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 ./strace-static-x86_64: Process 5283 attached [pid 5283] set_robust_list(0x55555710d5e0, 24) = 0 [pid 5283] chdir("./11") = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5283] write(3, "1000", 4) = 4 [pid 5283] close(3) = 0 [pid 5283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5283] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb894f000 [pid 5283] mprotect(0x7f7cb8950000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] clone(child_stack=0x7f7cb896f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5284], tls=0x7f7cb896f700, child_tidptr=0x7f7cb896f9d0) = 5284 [pid 5283] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5284 attached [pid 5284] set_robust_list(0x7f7cb896f9e0, 24) = 0 [pid 5284] getuid() = 0 [pid 5284] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5283] <... futex resumed>) = 0 [pid 5268] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5268] <... futex resumed>) = 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5268] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5268] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5284] memfd_create("syzkaller", 0 [pid 5268] <... clone resumed>, parent_tid=[5285], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5285 [pid 5268] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] <... memfd_create resumed>) = 3 [pid 5268] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7cb054f000 ./strace-static-x86_64: Process 5285 attached [pid 5273] <... mount resumed>) = 0 [pid 5273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5285] set_robust_list(0x7f7cb094e9e0, 24 [pid 5273] <... openat resumed>) = 3 [pid 5285] <... set_robust_list resumed>) = 0 [pid 5273] chdir("./file0" [pid 5285] ftruncate(-1, 18446744073709551609 [pid 5273] <... chdir resumed>) = 0 [pid 5285] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5273] ioctl(4, LOOP_CLR_FD [pid 5285] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] <... ioctl resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5285] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] close(4 [pid 5268] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] <... close resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5268] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5285] memfd_create("syzkaller", 0 [pid 5273] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... memfd_create resumed>) = 7 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5285] <... mmap resumed>) = 0x7f7ca852e000 [pid 5273] mkdir(".", 0777 [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [ 56.799995][ T5275] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 56.826821][ T5277] REISERFS (device loop5): checking transaction log (loop5) [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5273] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5270] <... futex resumed>) = 0 [pid 5273] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5275] <... mount resumed>) = 0 [pid 5282] <... write resumed>) = 4194304 [pid 5275] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5282] munmap(0x7f7ca852e000, 4194304 [pid 5275] <... openat resumed>) = 4 [pid 5282] <... munmap resumed>) = 0 [pid 5275] chdir("." [pid 5273] <... mount resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5275] <... chdir resumed>) = 0 [pid 5273] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5282] <... openat resumed>) = 8 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] ioctl(8, LOOP_SET_FD, 7 [pid 5275] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5282] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5273] <... openat resumed>) = 4 [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] ioctl(8, LOOP_CLR_FD [pid 5275] <... open resumed>) = 5 [pid 5273] chdir("." [pid 5282] <... ioctl resumed>) = 0 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] <... chdir resumed>) = 0 [pid 5272] <... futex resumed>) = 0 [pid 5275] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5282] ioctl(8, LOOP_SET_FD, 7 [ 56.857886][ T5273] reiserfs: enabling write barrier flush mode [ 56.876775][ T5273] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 56.882881][ T5277] REISERFS (device loop5): Using r5 hash to sort names [pid 5275] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5273] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] <... open resumed>) = 6 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5282] close(8 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... close resumed>) = 0 [pid 5282] close(7 [pid 5275] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... open resumed>) = 5 [pid 5272] <... futex resumed>) = 0 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... mount resumed>) = 0 [pid 5277] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5277] chdir("./file0") = 0 [pid 5277] ioctl(4, LOOP_CLR_FD) = 0 [pid 5277] close(4 [pid 5275] ftruncate(6, 33587199 [pid 5273] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... close resumed>) = 0 [pid 5277] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = 0 [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5275] <... ftruncate resumed>) = 0 [pid 5277] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] mkdir(".", 0777 [pid 5275] <... futex resumed>) = 1 [pid 5273] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] <... futex resumed>) = 0 [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5275] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... futex resumed>) = 0 [pid 5284] <... write resumed>) = 4194304 [pid 5277] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5272] <... futex resumed>) = 0 [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5275] sendfile(5, 6, NULL, 281474978811909 [pid 5273] <... open resumed>) = 6 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] munmap(0x7f7cb054f000, 4194304 [pid 5273] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] ftruncate(6, 33587199 [pid 5270] <... futex resumed>) = 0 [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... munmap resumed>) = 0 [pid 5284] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5273] <... ftruncate resumed>) = 0 [pid 5273] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5273] sendfile(5, 6, NULL, 281474978811909 [pid 5270] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... close resumed>) = 0 [pid 5282] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = 0 [pid 5264] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 1 [pid 5282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5272] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5272] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5272] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5286], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5286 [pid 5272] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] <... ioctl resumed>) = 0 [pid 5272] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] close(3) = 0 [pid 5284] mkdir("./file0", 0777) = 0 [pid 5284] mount("/dev/loop1", "./file0", "reiserfs", MS_RDONLY|MS_DIRSYNC|MS_REC|MS_SILENT|MS_RELATIME|MS_STRICTATIME, ""./strace-static-x86_64: Process 5286 attached [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5270] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 56.935027][ T5277] reiserfs: enabling write barrier flush mode [ 56.948001][ T5284] loop1: detected capacity change from 0 to 8192 [ 56.964755][ T5277] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5286] set_robust_list(0x7f7cb094e9e0, 24 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7cb092e000 [pid 5286] <... set_robust_list resumed>) = 0 [pid 5270] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5286] ftruncate(-1, 18446744073709551609 [pid 5285] <... write resumed>) = 4194304 [pid 5282] <... open resumed>) = 7 [pid 5277] <... mount resumed>) = 0 [pid 5270] <... mprotect resumed>) = 0 [pid 5286] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5285] munmap(0x7f7ca852e000, 4194304 [pid 5282] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5270] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5286] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... munmap resumed>) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5277] <... openat resumed>) = 4 [pid 5286] <... futex resumed>) = 1 [pid 5285] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5282] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] chdir("." [pid 5270] <... clone resumed>, parent_tid=[5288], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5288 [pid 5286] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... openat resumed>) = 8 [pid 5277] <... chdir resumed>) = 0 [pid 5270] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] ioctl(8, LOOP_SET_FD, 7 [pid 5277] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... futex resumed>) = 0 [pid 5285] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5277] <... futex resumed>) = 1 [pid 5270] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] ioctl(8, LOOP_CLR_FD [pid 5277] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] <... ioctl resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5264] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5285] ioctl(8, LOOP_SET_FD, 7 [pid 5282] creat("./file0", 000 [pid 5276] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = 0 [pid 5264] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5282] <... creat resumed>) = 8 [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = 0 [pid 5285] close(8 [pid 5282] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = 0 [pid 5276] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 1 [pid 5286] memfd_create("syzkaller", 0 [pid 5285] <... close resumed>) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5277] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5264] <... futex resumed>) = 0 [pid 5285] close(7 [pid 5282] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] <... open resumed>) = 5 ./strace-static-x86_64: Process 5288 attached [pid 5286] <... memfd_create resumed>) = 7 [pid 5285] <... close resumed>) = 0 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 57.020131][ T5284] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.053829][ T5284] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 57.063151][ T5284] REISERFS (device loop1): using ordered data mode [pid 5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5288] set_robust_list(0x7f7cb094e9e0, 24 [pid 5285] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] <... sendfile resumed>) = 655360 [pid 5288] <... set_robust_list resumed>) = 0 [pid 5285] <... futex resumed>) = 1 [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5270] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... futex resumed>) = 0 [pid 5265] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] exit_group(0 [pid 5288] ftruncate(-1, 18446744073709551609 [pid 5285] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] <... futex resumed>) = ? [pid 5277] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... futex resumed>) = 0 [pid 5268] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = ? [pid 5264] <... exit_group resumed>) = ? [pid 5288] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] +++ exited with 0 +++ [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... futex resumed>) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5268] <... futex resumed>) = 0 [pid 5265] +++ exited with 0 +++ [pid 5264] +++ exited with 0 +++ [pid 5288] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5277] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5270] <... mmap resumed>) = 0x7f7cb090d000 [pid 5268] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5277] <... open resumed>) = 6 [pid 5270] mprotect(0x7f7cb090e000, 131072, PROT_READ|PROT_WRITE [pid 5288] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... mprotect resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5270] clone(child_stack=0x7f7cb092d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5277] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] <... clone resumed>, parent_tid=[5289], tls=0x7f7cb092d700, child_tidptr=0x7f7cb092d9d0) = 5289 [pid 5270] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5286] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5276] <... futex resumed>) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] ftruncate(6, 33587199 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5277] <... ftruncate resumed>) = 0 [pid 5001] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5277] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5277] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5277] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] <... openat resumed>) = 3 [pid 5276] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] fstat(3, [pid 5276] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] sendfile(5, 6, NULL, 281474978811909 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./10/binderfs") = 0 [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5286] <... write resumed>) = 4194304 [ 57.069859][ T5284] reiserfs: using flush barriers [ 57.075597][ T5284] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.092856][ T5284] REISERFS (device loop1): checking transaction log (loop1) [ 57.103116][ T5284] REISERFS (device loop1): Using r5 hash to sort names [pid 5286] munmap(0x7f7ca852e000, 4194304) = 0 [pid 5286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 8 [pid 5286] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5286] ioctl(8, LOOP_CLR_FD) = 0 [pid 5284] <... mount resumed>) = 0 [pid 5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5286] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5286] close(8) = 0 [pid 5286] close(7 [pid 5268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5268] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7ca890d000 [pid 5268] mprotect(0x7f7ca890e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5268] clone(child_stack=0x7f7ca892d3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5285] <... open resumed>) = 7 [pid 5276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5268] <... clone resumed>, parent_tid=[5290], tls=0x7f7ca892d700, child_tidptr=0x7f7ca892d9d0) = 5290 [pid 5276] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] futex(0x7f7cb8a49808, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5268] futex(0x7f7cb8a4980c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5285] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] <... mmap resumed>) = 0x7f7cb092e000 [pid 5285] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] mprotect(0x7f7cb092f000, 131072, PROT_READ|PROT_WRITE [pid 5284] <... openat resumed>) = 3 [pid 5284] chdir("./file0" [pid 5276] <... mprotect resumed>) = 0 [pid 5284] <... chdir resumed>) = 0 [pid 5276] clone(child_stack=0x7f7cb094e3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5284] ioctl(4, LOOP_CLR_FD) = 0 [pid 5284] close(4 [pid 5276] <... clone resumed>, parent_tid=[5291], tls=0x7f7cb094e700, child_tidptr=0x7f7cb094e9d0) = 5291 [pid 5284] <... close resumed>) = 0 [pid 5276] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5276] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5284] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5284] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, ""./strace-static-x86_64: Process 5289 attached [pid 5271] <... sendfile resumed>) = 720896 [pid 5271] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5290 attached [pid 5290] set_robust_list(0x7f7ca892d9e0, 24) = 0 [pid 5290] creat("./file0", 000) = 8 [pid 5290] futex(0x7f7cb8a4980c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... futex resumed>) = 0 [pid 5271] <... futex resumed>) = 0 [pid 5268] exit_group(0 [pid 5285] <... futex resumed>) = ? [pid 5268] <... exit_group resumed>) = ? [pid 5285] +++ exited with 0 +++ [pid 5290] <... futex resumed>) = ? [pid 5271] +++ exited with 0 +++ [pid 5289] set_robust_list(0x7f7cb092d9e0, 24 [pid 5286] <... close resumed>) = 0 [pid 5290] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5286] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5272] <... futex resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5272] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5272] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] <... openat resumed>) = 3 [pid 5286] <... futex resumed>) = 1 [pid 5000] fstat(3, [pid 5286] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x55555710e620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./10/binderfs") = 0 [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5291 attached [pid 5289] <... set_robust_list resumed>) = 0 [pid 5291] set_robust_list(0x7f7cb094e9e0, 24 [pid 5289] memfd_create("syzkaller", 0) = 7 [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5289] <... mmap resumed>) = 0x7f7ca850d000 [pid 5291] ftruncate(-1, 18446744073709551609) = -1 EINVAL (Invalid argument) [pid 5286] <... open resumed>) = 7 [pid 5275] <... sendfile resumed>) = 393216 [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5275] <... futex resumed>) = 0 [pid 5291] <... futex resumed>) = 0 [pid 5276] futex(0x7f7cb8a497f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] <... futex resumed>) = 0 [pid 5291] memfd_create("syzkaller", 0 [pid 5276] futex(0x7f7cb8a497fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] <... memfd_create resumed>) = 7 [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7ca852e000 [pid 5286] futex(0x7f7cb8a497fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = 0 [pid 5272] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = 1 [pid 5275] creat("./file0", 000 [pid 5272] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5286] <... futex resumed>) = 1 [pid 5286] futex(0x7f7cb8a497f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] <... creat resumed>) = 8 [pid 5284] <... mount resumed>) = 0 [pid 5284] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 5275] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] futex(0x7f7cb8a497e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] <... futex resumed>) = 0 [pid 5272] exit_group(0 [pid 5286] <... futex resumed>) = ? [pid 5275] <... futex resumed>) = ? [pid 5272] <... exit_group resumed>) = ? [pid 5286] +++ exited with 0 +++ [pid 5275] +++ exited with 0 +++ [pid 5272] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5272, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5284] <... openat resumed>) = 4 [pid 5284] chdir("." [pid 4998] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... openat resumed>) = 3 [pid 5283] <... futex resumed>) = 0 [pid 4998] fstat(3, [pid 5283] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5284] <... futex resumed>) = 1 [pid 4998] <... getdents64 resumed>0x55555710e620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5284] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./10/binderfs" [pid 5284] <... open resumed>) = 5 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7f7cb8a497ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 1 [pid 5284] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6 [pid 5284] futex(0x7f7cb8a497ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f7cb8a497e8, FUTEX_WAKE_PRIVATE, 1000000)