./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2988812728 <...> Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. execve("./syz-executor2988812728", ["./syz-executor2988812728"], 0x7fffacca2030 /* 10 vars */) = 0 brk(NULL) = 0x55557e23d000 brk(0x55557e23dd00) = 0x55557e23dd00 arch_prctl(ARCH_SET_FS, 0x55557e23d380) = 0 set_tid_address(0x55557e23d650) = 5841 set_robust_list(0x55557e23d660, 24) = 0 rseq(0x55557e23dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2988812728", 4096) = 28 getrandom("\x40\x77\xbb\xcd\xca\x99\x2d\x1f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e23dd00 brk(0x55557e25ed00) = 0x55557e25ed00 brk(0x55557e25f000) = 0x55557e25f000 mprotect(0x7ffac137a000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached , child_tidptr=0x55557e23d650) = 5842 [pid 5842] set_robust_list(0x55557e23d660, 24) = 0 [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] getrandom("\xee\xa3\x78\x3a\x7a\xf9\x05\x96", 8, GRND_NONBLOCK) = 8 ./strace-static-x86_64: Process 5843 attached [pid 5842] mkdir("./syzkaller.KluIqN", 0700 [pid 5843] set_robust_list(0x55557e23d660, 24 [pid 5841] <... clone resumed>, child_tidptr=0x55557e23d650) = 5843 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... mkdir resumed>) = 0 [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] mkdir("./syzkaller.tlaXSi", 0700 [pid 5842] chmod("./syzkaller.KluIqN", 0777 [pid 5843] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5844 attached [pid 5842] <... chmod resumed>) = 0 [pid 5844] set_robust_list(0x55557e23d660, 24 [pid 5843] chmod("./syzkaller.tlaXSi", 0777 [pid 5842] chdir("./syzkaller.KluIqN" [pid 5841] <... clone resumed>, child_tidptr=0x55557e23d650) = 5844 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] <... chmod resumed>) = 0 [pid 5842] <... chdir resumed>) = 0 [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] mkdir("./syzkaller.I1ruhx", 0700 [pid 5843] chdir("./syzkaller.tlaXSi" [pid 5842] unshare(CLONE_NEWPID./strace-static-x86_64: Process 5845 attached [pid 5844] <... mkdir resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5841] <... clone resumed>, child_tidptr=0x55557e23d650) = 5845 [pid 5845] set_robust_list(0x55557e23d660, 24 [pid 5844] chmod("./syzkaller.I1ruhx", 0777 [pid 5843] unshare(CLONE_NEWPID [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] <... chmod resumed>) = 0 [pid 5845] mkdir("./syzkaller.BQh6rq", 0700 [pid 5844] chdir("./syzkaller.I1ruhx" [pid 5843] <... unshare resumed>) = 0 [pid 5842] <... unshare resumed>) = 0 [pid 5844] <... chdir resumed>) = 0 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached ./strace-static-x86_64: Process 5846 attached [pid 5845] <... mkdir resumed>) = 0 [pid 5844] unshare(CLONE_NEWPID [pid 5841] <... clone resumed>, child_tidptr=0x55557e23d650) = 5846 [pid 5847] set_robust_list(0x55557e23d660, 24./strace-static-x86_64: Process 5848 attached ) = 0 [pid 5846] set_robust_list(0x55557e23d660, 24 [pid 5845] chmod("./syzkaller.BQh6rq", 0777 [pid 5844] <... unshare resumed>) = 0 [pid 5843] <... clone resumed>, child_tidptr=0x55557e23d650) = 5847 [pid 5848] set_robust_list(0x55557e23d660, 24 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5846] <... set_robust_list resumed>) = 0 [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] <... clone resumed>, child_tidptr=0x55557e23d650) = 5848 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5845] <... chmod resumed>) = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] chdir("./syzkaller.BQh6rq" [pid 5848] <... prctl resumed>) = 0 [pid 5846] mkdir("./syzkaller.RaGP8F", 0700 [pid 5845] <... chdir resumed>) = 0 [pid 5848] getppid( [pid 5845] unshare(CLONE_NEWPID [pid 5848] <... getppid resumed>) = 0 [pid 5845] <... unshare resumed>) = 0 [pid 5848] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5847] <... prctl resumed>) = 0 [pid 5847] getppid( [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached [pid 5848] <... prlimit64 resumed>NULL) = 0 [pid 5847] <... getppid resumed>) = 0 [pid 5846] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5850 attached [pid 5847] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5850] set_robust_list(0x55557e23d660, 24 [pid 5849] set_robust_list(0x55557e23d660, 24 [pid 5848] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5847] <... prlimit64 resumed>NULL) = 0 [pid 5846] chmod("./syzkaller.RaGP8F", 0777 [pid 5845] <... clone resumed>, child_tidptr=0x55557e23d650) = 5850 [pid 5844] <... clone resumed>, child_tidptr=0x55557e23d650) = 5849 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... prlimit64 resumed>NULL) = 0 [pid 5847] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5847] <... prlimit64 resumed>NULL) = 0 [pid 5846] <... chmod resumed>) = 0 [pid 5850] <... prctl resumed>) = 0 [pid 5847] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5850] getppid( [pid 5849] <... prctl resumed>) = 0 [pid 5848] <... prlimit64 resumed>NULL) = 0 [pid 5847] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... getppid resumed>) = 0 [pid 5849] getppid( [pid 5848] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5847] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5846] chdir("./syzkaller.RaGP8F" [pid 5850] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5849] <... getppid resumed>) = 0 [pid 5848] <... prlimit64 resumed>NULL) = 0 [pid 5847] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5849] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5848] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5847] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5846] <... chdir resumed>) = 0 [pid 5850] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5849] <... prlimit64 resumed>NULL) = 0 [pid 5848] <... prlimit64 resumed>NULL) = 0 [pid 5847] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5849] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5848] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5847] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5846] unshare(CLONE_NEWPID [pid 5850] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5849] <... prlimit64 resumed>NULL) = 0 [pid 5847] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5850] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5849] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5848] <... prlimit64 resumed>NULL) = 0 [pid 5847] unshare(CLONE_NEWNS [pid 5846] <... unshare resumed>) = 0 [pid 5850] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5849] <... prlimit64 resumed>NULL) = 0 [pid 5848] unshare(CLONE_NEWNS [pid 5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5849] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5847] <... unshare resumed>) = 0 [pid 5846] <... clone resumed>, child_tidptr=0x55557e23d650) = 5851 [pid 5848] <... unshare resumed>) = 0 ./strace-static-x86_64: Process 5851 attached [pid 5850] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5849] <... prlimit64 resumed>NULL) = 0 [pid 5848] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5847] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5851] set_robust_list(0x55557e23d660, 24 [pid 5850] <... prlimit64 resumed>NULL) = 0 [pid 5849] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5850] unshare(CLONE_NEWNS [pid 5849] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] <... unshare resumed>) = 0 [pid 5849] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5848] <... mount resumed>) = 0 [pid 5847] <... mount resumed>) = 0 [pid 5849] <... prlimit64 resumed>NULL) = 0 [pid 5849] unshare(CLONE_NEWNS [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] unshare(CLONE_NEWIPC [pid 5847] unshare(CLONE_NEWIPC [pid 5851] <... prctl resumed>) = 0 [pid 5850] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5851] getppid( [pid 5849] <... unshare resumed>) = 0 [pid 5848] <... unshare resumed>) = 0 [pid 5847] <... unshare resumed>) = 0 [pid 5850] <... mount resumed>) = 0 [pid 5849] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5851] <... getppid resumed>) = 0 [pid 5850] unshare(CLONE_NEWIPC [pid 5848] unshare(CLONE_NEWCGROUP [pid 5847] unshare(CLONE_NEWCGROUP [pid 5851] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5849] <... mount resumed>) = 0 [pid 5850] <... unshare resumed>) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] unshare(CLONE_NEWCGROUP [pid 5849] unshare(CLONE_NEWIPC [pid 5848] <... unshare resumed>) = 0 [pid 5847] <... unshare resumed>) = 0 [pid 5851] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5850] <... unshare resumed>) = 0 [pid 5849] <... unshare resumed>) = 0 [pid 5848] unshare(CLONE_NEWUTS [pid 5847] unshare(CLONE_NEWUTS [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5847] <... unshare resumed>) = 0 [pid 5851] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5850] unshare(CLONE_NEWUTS [pid 5848] <... unshare resumed>) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... unshare resumed>) = 0 [pid 5848] unshare(CLONE_SYSVSEM [pid 5847] unshare(CLONE_SYSVSEM [pid 5851] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5850] unshare(CLONE_SYSVSEM [pid 5849] unshare(CLONE_NEWCGROUP [pid 5848] <... unshare resumed>) = 0 [pid 5847] <... unshare resumed>) = 0 [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5850] <... unshare resumed>) = 0 [pid 5849] <... unshare resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5851] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5851] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5849] unshare(CLONE_NEWUTS [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5851] <... prlimit64 resumed>NULL) = 0 [pid 5849] <... unshare resumed>) = 0 [pid 5851] unshare(CLONE_NEWNS [pid 5848] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5849] unshare(CLONE_SYSVSEM [pid 5847] <... openat resumed>) = 3 [pid 5851] <... unshare resumed>) = 0 [pid 5849] <... unshare resumed>) = 0 [pid 5851] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5850] write(3, "16777216", 8 [pid 5848] write(3, "16777216", 8 [pid 5851] <... mount resumed>) = 0 [pid 5848] <... write resumed>) = 8 [pid 5847] write(3, "16777216", 8 [pid 5851] unshare(CLONE_NEWIPC [pid 5850] <... write resumed>) = 8 [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5848] close(3 [pid 5847] <... write resumed>) = 8 [pid 5851] <... unshare resumed>) = 0 [pid 5850] close(3 [pid 5848] <... close resumed>) = 0 [pid 5847] close(3 [pid 5850] <... close resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5851] unshare(CLONE_NEWCGROUP [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5849] write(3, "16777216", 8) = 8 [pid 5847] <... close resumed>) = 0 [pid 5849] close(3 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5851] <... unshare resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5847] write(3, "536870912", 9 [pid 5851] unshare(CLONE_NEWUTS [pid 5850] write(3, "536870912", 9 [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5848] <... openat resumed>) = 3 [pid 5847] <... write resumed>) = 9 [pid 5851] <... unshare resumed>) = 0 [pid 5851] unshare(CLONE_SYSVSEM [pid 5850] <... write resumed>) = 9 [pid 5849] <... openat resumed>) = 3 [pid 5848] write(3, "536870912", 9 [pid 5847] close(3 [pid 5851] <... unshare resumed>) = 0 [pid 5850] close(3 [pid 5849] write(3, "536870912", 9 [pid 5847] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5848] <... write resumed>) = 9 [pid 5850] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5849] <... write resumed>) = 9 [pid 5848] close(3 [pid 5847] <... openat resumed>) = 3 [pid 5847] write(3, "1024", 4 [pid 5851] write(3, "16777216", 8 [pid 5850] <... openat resumed>) = 3 [pid 5849] close(3 [pid 5848] <... close resumed>) = 0 [pid 5847] <... write resumed>) = 4 [pid 5851] <... write resumed>) = 8 [pid 5849] <... close resumed>) = 0 [pid 5847] close(3 [pid 5851] close(3 [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5847] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] write(3, "1024", 4 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5850] <... write resumed>) = 4 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5850] close(3 [pid 5849] <... openat resumed>) = 3 [pid 5848] <... openat resumed>) = 3 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 3 [pid 5850] <... close resumed>) = 0 [pid 5849] write(3, "1024", 4 [pid 5848] write(3, "1024", 4 [pid 5851] write(3, "536870912", 9 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5848] <... write resumed>) = 4 [pid 5850] <... openat resumed>) = 3 [pid 5848] close(3 [pid 5847] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 5850] write(3, "8192", 4 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5850] <... write resumed>) = 4 [pid 5849] <... write resumed>) = 4 [pid 5848] <... openat resumed>) = 3 [pid 5850] close(3) = 0 [pid 5851] <... write resumed>) = 9 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5849] close(3 [pid 5847] write(3, "8192", 4 [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 5847] <... write resumed>) = 4 [pid 5851] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5847] close(3 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5850] <... openat resumed>) = 3 [pid 5849] <... openat resumed>) = 3 [pid 5848] write(3, "8192", 4 [pid 5847] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] write(3, "1024", 4 [pid 5848] <... write resumed>) = 4 [pid 5851] write(3, "1024", 4 [pid 5850] <... write resumed>) = 4 [pid 5849] write(3, "8192", 4 [pid 5848] close(3 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5851] <... write resumed>) = 4 [pid 5850] close(3 [pid 5849] <... write resumed>) = 4 [pid 5848] <... close resumed>) = 0 [pid 5851] close(3 [pid 5850] <... close resumed>) = 0 [pid 5849] close(3 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5847] <... openat resumed>) = 3 [pid 5851] <... close resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5847] write(3, "1024", 4 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5848] write(3, "1024", 4 [pid 5847] <... write resumed>) = 4 [pid 5851] write(3, "8192", 4 [pid 5849] <... openat resumed>) = 3 [pid 5847] close(3 [pid 5849] write(3, "1024", 4 [pid 5847] <... close resumed>) = 0 [pid 5851] <... write resumed>) = 4 [pid 5849] <... write resumed>) = 4 [pid 5850] write(3, "1024", 4 [pid 5848] <... write resumed>) = 4 [pid 5850] <... write resumed>) = 4 [pid 5848] close(3) = 0 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] close(3 [pid 5851] close(3 [pid 5850] <... close resumed>) = 0 [pid 5849] close(3 [pid 5848] write(3, "1024", 4 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5851] <... close resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5848] <... write resumed>) = 4 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5848] close(3 [pid 5847] <... openat resumed>) = 3 [pid 5849] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5847] write(3, "1024", 4 [pid 5850] <... openat resumed>) = 3 [pid 5849] write(3, "1024", 4 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... write resumed>) = 4 [pid 5849] <... write resumed>) = 4 [pid 5847] close(3 [pid 5849] close(3 [pid 5847] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5849] <... close resumed>) = 0 [pid 5848] write(3, "1024 1048576 500 1024", 21 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5851] write(3, "1024", 4) = 4 [pid 5849] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5848] <... write resumed>) = 21 [pid 5847] <... openat resumed>) = 3 [pid 5851] close(3 [pid 5850] write(3, "1024 1048576 500 1024", 21 [pid 5849] <... openat resumed>) = 3 [pid 5848] close(3 [pid 5851] <... close resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5850] <... write resumed>) = 21 [pid 5848] <... close resumed>) = 0 [pid 5847] write(3, "1024 1048576 500 1024", 21 [pid 5849] write(3, "1024 1048576 500 1024", 21 [pid 5848] getpid( [pid 5847] <... write resumed>) = 21 [pid 5851] <... openat resumed>) = 3 [pid 5850] close(3 [pid 5849] <... write resumed>) = 21 [pid 5848] <... getpid resumed>) = 1 [pid 5847] close(3 [pid 5851] write(3, "1024", 4 [pid 5850] <... close resumed>) = 0 [pid 5849] close(3 [pid 5848] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5847] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5848] <... capget resumed>{effective=1< [pid 5849] getpid( [pid 5848] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5849] <... getpid resumed>) = 1 [pid 5848] <... capset resumed>) = 0 [pid 5847] <... getpid resumed>) = 1 [pid 5849] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5848] unshare(CLONE_NEWNET [pid 5847] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5851] <... write resumed>) = 4 [pid 5850] getpid( [pid 5849] <... capget resumed>{effective=1< [pid 5850] <... getpid resumed>) = 1 [pid 5847] <... capget resumed>{effective=1<) = 0 [pid 5850] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5850] <... capget resumed>{effective=1<) = 3 [pid 5850] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5849] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5851] write(3, "1024 1048576 500 1024", 21 [pid 5849] <... capset resumed>) = 0 [pid 5847] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5851] <... write resumed>) = 21 [pid 5851] close(3) = 0 [pid 5851] getpid() = 1 [pid 5851] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5849] unshare(CLONE_NEWNET [pid 5847] <... capset resumed>) = 0 [pid 5847] unshare(CLONE_NEWNET [pid 5851] <... unshare resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "0 65535", 7) = 7 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "100000", 6) = 6 [pid 5851] close(3) = 0 [pid 5851] mkdir("./syz-tmp", 0777) = 0 [pid 5851] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 5851] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 5851] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5851] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5851] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 5851] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 5851] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 5848] <... unshare resumed>) = 0 [pid 5851] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5851] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5851] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5848] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5847] <... unshare resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] <... openat resumed>) = 3 [pid 5851] <... mount resumed>) = 0 [pid 5848] write(3, "0 65535", 7) = 7 [pid 5848] close(3) = 0 [pid 5851] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 5848] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5849] <... unshare resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5848] write(3, "100000", 6 [pid 5847] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5848] <... write resumed>) = 6 [pid 5848] close(3 [pid 5847] <... openat resumed>) = 3 [pid 5851] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] <... close resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5851] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5849] write(3, "0 65535", 7 [pid 5848] mkdir("./syz-tmp", 0777 [pid 5847] write(3, "0 65535", 7 [pid 5851] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] <... write resumed>) = 7 [pid 5848] <... mkdir resumed>) = 0 [pid 5849] close(3 [pid 5848] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5849] <... close resumed>) = 0 [pid 5848] <... mount resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5851] <... mount resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5847] <... write resumed>) = 7 [pid 5849] write(3, "100000", 6 [pid 5847] close(3 [pid 5850] <... unshare resumed>) = 0 [pid 5849] <... write resumed>) = 6 [pid 5849] close(3 [pid 5848] mkdir("./syz-tmp/newroot", 0777 [pid 5851] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5850] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5849] mkdir("./syz-tmp", 0777 [pid 5847] <... openat resumed>) = 3 [pid 5851] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] <... openat resumed>) = 3 [pid 5847] write(3, "100000", 6 [pid 5848] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5847] <... write resumed>) = 6 [pid 5850] write(3, "0 65535", 7 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5847] close(3 [pid 5850] <... write resumed>) = 7 [pid 5849] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5851] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5850] close(3 [pid 5848] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5847] mkdir("./syz-tmp", 0777 [pid 5850] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5848] <... mount resumed>) = 0 [pid 5851] mkdir("./syz-tmp/pivot", 0777 [pid 5850] <... openat resumed>) = 3 [pid 5849] <... mount resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] write(3, "100000", 6 [pid 5849] mkdir("./syz-tmp/newroot", 0777 [pid 5848] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5847] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5851] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5850] <... write resumed>) = 6 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5849] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5847] <... mount resumed>) = 0 [pid 5850] close(3 [pid 5848] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5851] <... pivot_root resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... mount resumed>) = 0 [pid 5847] mkdir("./syz-tmp/newroot", 0777 [pid 5849] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5850] mkdir("./syz-tmp", 0777) = 0 [pid 5849] <... mount resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] <... mkdir resumed>) = 0 [pid 5851] chdir("/" [pid 5850] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5849] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5848] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5847] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5851] <... chdir resumed>) = 0 [pid 5850] <... mount resumed>) = 0 [pid 5851] umount2("./pivot", MNT_DETACH [pid 5849] <... mkdir resumed>) = 0 [pid 5848] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] <... mount resumed>) = 0 [pid 5850] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5848] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5847] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5851] chroot("./newroot" [pid 5850] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5847] <... mkdir resumed>) = 0 [pid 5851] <... chroot resumed>) = 0 [pid 5851] chdir("/" [pid 5850] <... mkdir resumed>) = 0 [pid 5849] <... mount resumed>) = 0 [pid 5848] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5851] <... chdir resumed>) = 0 [pid 5850] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5847] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5851] mkdir("/dev/gadgetfs", 0777 [pid 5850] <... mount resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5849] <... mkdir resumed>) = 0 [pid 5851] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5848] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] <... mount resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5851] <... mount resumed>) = 0 [pid 5850] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5848] <... mount resumed>) = 0 [pid 5847] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5851] mkdir("/dev/binderfs", 0777 [pid 5849] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5848] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] <... mkdir resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5848] <... mount resumed>) = 0 [pid 5851] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5849] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] <... mount resumed>) = 0 [pid 5849] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5848] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5849] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5848] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5847] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5850] <... mkdir resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5847] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 5850] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5849] <... mount resumed>) = 0 [pid 5847] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5850] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] <... mount resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5850] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5847] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5847] <... mount resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5850] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] <... mount resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5847] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] <... mount resumed>) = 0 [pid 5849] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5847] <... mount resumed>) = 0 [pid 5849] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5848] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5849] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] <... mount resumed>) = 0 [pid 5848] mkdir("./syz-tmp/pivot", 0777 [pid 5850] <... mount resumed>) = 0 [pid 5847] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5850] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5847] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5850] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5851] <... mount resumed>) = -1 ENODEV (No such device) [pid 5849] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5848] <... pivot_root resumed>) = 0 [pid 5847] <... mount resumed>) = 0 [pid 5851] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5850] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] <... mkdir resumed>) = 0 [pid 5850] <... mount resumed>) = 0 [pid 5851] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5848] chdir("/" [pid 5847] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5851] mkdir("./0", 0777 [pid 5850] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5849] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5848] <... chdir resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] mkdir("./syz-tmp/pivot", 0777 [pid 5848] umount2("./pivot", MNT_DETACH [pid 5847] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5850] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5849] <... mkdir resumed>) = 0 [pid 5847] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5850] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5851] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5850] mkdir("./syz-tmp/pivot", 0777 [pid 5849] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5848] <... umount2 resumed>) = 0 [pid 5847] mkdir("./syz-tmp/pivot", 0777 [pid 5851] close(3 [pid 5850] <... mkdir resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] <... pivot_root resumed>) = 0 [pid 5848] chroot("./newroot" [pid 5847] <... mkdir resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] chdir("/" [pid 5847] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5850] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5849] <... chdir resumed>) = 0 [pid 5849] umount2("./pivot", MNT_DETACH [pid 5847] <... pivot_root resumed>) = 0 [pid 5847] chdir("/"./strace-static-x86_64: Process 5859 attached [pid 5851] <... clone resumed>, child_tidptr=0x55557e23d650) = 2 [pid 5850] <... pivot_root resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... chroot resumed>) = 0 [pid 5859] set_robust_list(0x55557e23d660, 24 [pid 5849] chroot("./newroot" [pid 5847] <... chdir resumed>) = 0 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5850] chdir("/" [pid 5849] <... chroot resumed>) = 0 [pid 5848] chdir("/" [pid 5847] umount2("./pivot", MNT_DETACH [pid 5859] chdir("./0" [pid 5850] <... chdir resumed>) = 0 [pid 5849] chdir("/" [pid 5848] <... chdir resumed>) = 0 [pid 5859] <... chdir resumed>) = 0 [pid 5850] umount2("./pivot", MNT_DETACH [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... chdir resumed>) = 0 [pid 5848] mkdir("/dev/gadgetfs", 0777 [pid 5847] <... umount2 resumed>) = 0 [pid 5859] <... prctl resumed>) = 0 [pid 5849] mkdir("/dev/gadgetfs", 0777 [pid 5848] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5848] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5850] <... umount2 resumed>) = 0 [pid 5849] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5848] <... mount resumed>) = 0 [pid 5859] setpgid(0, 0 [pid 5850] chroot("./newroot" [pid 5849] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5847] chroot("./newroot" [pid 5859] <... setpgid resumed>) = 0 [pid 5847] <... chroot resumed>) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... chroot resumed>) = 0 [pid 5849] <... mount resumed>) = 0 [pid 5848] mkdir("/dev/binderfs", 0777 [pid 5847] chdir("/" [pid 5850] chdir("/" [pid 5849] mkdir("/dev/binderfs", 0777 [pid 5848] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5847] <... chdir resumed>) = 0 [pid 5859] <... openat resumed>) = 3 [pid 5850] <... chdir resumed>) = 0 [pid 5849] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5848] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5847] mkdir("/dev/gadgetfs", 0777 [pid 5859] write(3, "1000", 4 [pid 5850] mkdir("/dev/gadgetfs", 0777 [pid 5849] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5847] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5859] <... write resumed>) = 4 [pid 5850] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5859] close(3 [pid 5850] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5859] <... close resumed>) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... mount resumed>) = 0 [pid 5847] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5859] <... symlink resumed>) = 0 [pid 5850] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5847] <... mount resumed>) = 0 [pid 5847] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 5847] mount("binder", "/dev/binderfs", "binder", 0, NULLexecuting program [pid 5859] write(1, "executing program\n", 18 [pid 5850] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5859] <... write resumed>) = 18 [pid 5859] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5859] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0)) = 0 [pid 5859] memfd_create("syzkaller", 0) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5859] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5859] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] <... mount resumed>) = -1 ENODEV (No such device) [pid 5859] close(3 [pid 5848] <... mount resumed>) = -1 ENODEV (No such device) [pid 5849] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5859] <... close resumed>) = 0 [pid 5859] close(4) = 0 [pid 5849] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5859] mkdir("./file0", 0777) = 0 [pid 5849] mkdir("./0", 0777 [pid 5848] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5859] mount("/dev/loop4", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] mkdir("./0", 0777 [pid 5859] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5848] <... mkdir resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5848] <... openat resumed>) = 3 [pid 5849] close(3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5849] <... close resumed>) = 0 [pid 5848] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] close(3) = 0 ./strace-static-x86_64: Process 5864 attached [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached [pid 5850] <... mount resumed>) = -1 ENODEV (No such device) [pid 5864] set_robust_list(0x55557e23d660, 24 [pid 5850] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5864] <... set_robust_list resumed>) = 0 [pid 5865] set_robust_list(0x55557e23d660, 24 [pid 5864] chdir("./0" [pid 5850] mkdir("./0", 0777 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5864] <... chdir resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x55557e23d650) = 2 [pid 5865] chdir("./0" [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] <... clone resumed>, child_tidptr=0x55557e23d650) = 2 [pid 5865] <... chdir resumed>) = 0 [pid 5864] <... prctl resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] setpgid(0, 0 [pid 5850] <... openat resumed>) = 3 [pid 5865] <... prctl resumed>) = 0 [pid 5864] <... setpgid resumed>) = 0 [pid 5865] setpgid(0, 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5865] <... setpgid resumed>) = 0 [pid 5850] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5864] <... openat resumed>) = 3 [pid 5850] close(3) = 0 [pid 5865] <... openat resumed>) = 3 [pid 5864] write(3, "1000", 4 [pid 5859] close(3 [pid 5847] <... mount resumed>) = -1 ENODEV (No such device) [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5864] <... write resumed>) = 4 [pid 5859] <... close resumed>) = 0 [pid 5847] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5865] write(3, "1000", 4 [pid 5864] close(3) = 0 [pid 5859] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5865] <... write resumed>) = 4 [pid 5864] symlink("/dev/binderfs", "./binderfs" [pid 5865] close(3 [pid 5864] <... symlink resumed>) = 0 [pid 5859] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5847] mkdir("./0", 0777 [pid 5865] <... close resumed>) = 0 [pid 5864] write(1, "executing program\n", 18 [pid 5859] bind(-1, NULL, 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5859] <... bind resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5866 attached [ 85.557904][ T5859] loop4: detected capacity change from 0 to 256 [pid 5865] symlink("/dev/binderfs", "./binderfs" [pid 5859] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)executing program [pid 5865] <... symlink resumed>) = 0 [pid 5864] <... write resumed>) = 18 executing program [pid 5859] <... socket resumed>) = 3 [pid 5850] <... clone resumed>, child_tidptr=0x55557e23d650) = 2 [pid 5847] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5864] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5847] <... openat resumed>) = 3 [pid 5864] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5865] write(1, "executing program\n", 18 [pid 5864] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5847] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5865] <... write resumed>) = 18 [pid 5859] memfd_create("syzkaller", 0 [pid 5866] set_robust_list(0x55557e23d660, 24 [pid 5865] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5859] <... memfd_create resumed>) = 4 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5865] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] close(3 [pid 5866] chdir("./0" [pid 5865] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5864] <... ioprio_set resumed>) = 0 [pid 5859] <... mmap resumed>) = 0x7ffab8e00000 [pid 5847] <... close resumed>) = 0 [pid 5866] <... chdir resumed>) = 0 [pid 5865] <... ioprio_set resumed>) = 0 [pid 5864] memfd_create("syzkaller", 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] memfd_create("syzkaller", 0 [pid 5866] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5867 attached [pid 5865] <... memfd_create resumed>) = 3 [pid 5864] <... memfd_create resumed>) = 3 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5867] set_robust_list(0x55557e23d660, 24 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... clone resumed>, child_tidptr=0x55557e23d650) = 2 [pid 5865] <... mmap resumed>) = 0x7ffab8e00000 [pid 5864] <... mmap resumed>) = 0x7ffab8e00000 [pid 5867] <... set_robust_list resumed>) = 0 [pid 5866] <... openat resumed>) = 3 [pid 5865] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5864] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5867] chdir("./0" [pid 5866] write(3, "1000", 4 [pid 5865] <... write resumed>) = 131072 [pid 5864] <... write resumed>) = 131072 [pid 5866] <... write resumed>) = 4 [pid 5867] <... chdir resumed>) = 0 [pid 5866] close(3 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5866] <... close resumed>) = 0 [pid 5867] <... prctl resumed>) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs" [pid 5867] setpgid(0, 0 [pid 5865] munmap(0x7ffab8e00000, 138412032 [pid 5864] munmap(0x7ffab8e00000, 138412032 [pid 5867] <... setpgid resumed>) = 0 [pid 5866] <... symlink resumed>) = 0 [pid 5864] <... munmap resumed>) = 0 [pid 5865] <... munmap resumed>) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5864] ioctl(4, LOOP_SET_FD, 3 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5866] write(1, "executing program\n", 18 [pid 5859] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152executing program [pid 5864] <... ioctl resumed>) = 0 [pid 5867] <... openat resumed>) = 3 [pid 5866] <... write resumed>) = 18 [pid 5865] <... openat resumed>) = 4 [pid 5867] write(3, "1000", 4 [pid 5866] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5867] <... write resumed>) = 4 [pid 5866] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5867] close(3 [pid 5866] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5867] <... close resumed>) = 0 [pid 5865] ioctl(4, LOOP_SET_FD, 3 [pid 5864] close(3 [pid 5867] symlink("/dev/binderfs", "./binderfs" [pid 5866] <... ioprio_set resumed>) = 0 [pid 5864] <... close resumed>) = 0 [pid 5867] <... symlink resumed>) = 0 [pid 5866] memfd_create("syzkaller", 0 executing program [pid 5867] write(1, "executing program\n", 18 [pid 5866] <... memfd_create resumed>) = 3 [pid 5867] <... write resumed>) = 18 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5867] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5866] <... mmap resumed>) = 0x7ffab8e00000 [pid 5867] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5864] close(4) = 0 [pid 5864] mkdir("./file0", 0777 [pid 5867] <... ioprio_set resumed>) = 0 [pid 5866] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5864] <... mkdir resumed>) = 0 [pid 5864] mount("/dev/loop2", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5864] ioctl(3, LOOP_CLR_FD) = 0 [pid 5864] close(3) = 0 [pid 5867] memfd_create("syzkaller", 0 [pid 5866] <... write resumed>) = 131072 [pid 5865] <... ioctl resumed>) = 0 [pid 5859] <... write resumed>) = 2097152 [pid 5867] <... memfd_create resumed>) = 3 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5859] munmap(0x7ffab8e00000, 138412032 [pid 5866] munmap(0x7ffab8e00000, 138412032 [pid 5867] <... mmap resumed>) = 0x7ffab8e00000 [pid 5865] close(3 [pid 5864] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5865] <... close resumed>) = 0 [pid 5864] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5865] close(4 [pid 5864] bind(-1, NULL, 0 [pid 5865] <... close resumed>) = 0 [pid 5864] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] mkdir("./file0", 0777 [pid 5864] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5865] <... mkdir resumed>) = 0 [pid 5864] <... socket resumed>) = 3 [pid 5864] memfd_create("syzkaller", 0 [pid 5865] mount("/dev/loop0", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5865] ioctl(3, LOOP_CLR_FD) = 0 [pid 5865] close(3 [pid 5867] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5864] <... memfd_create resumed>) = 4 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5867] <... write resumed>) = 131072 [pid 5866] <... munmap resumed>) = 0 [pid 5865] <... close resumed>) = 0 [pid 5864] <... mmap resumed>) = 0x7ffab8e00000 [pid 5859] <... munmap resumed>) = 0 [pid 5867] munmap(0x7ffab8e00000, 138412032 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5867] <... munmap resumed>) = 0 [pid 5866] <... openat resumed>) = 4 [pid 5865] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5859] <... openat resumed>) = 5 [ 85.659123][ T5864] loop2: detected capacity change from 0 to 256 [ 85.680754][ T5865] loop0: detected capacity change from 0 to 256 [pid 5866] ioctl(4, LOOP_SET_FD, 3 [pid 5865] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5859] ioctl(5, LOOP_SET_FD, 4 [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5865] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5865] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 5865] memfd_create("syzkaller", 0) = 4 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5867] <... ioctl resumed>) = 0 [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [pid 5867] mkdir("./file0", 0777 [pid 5866] <... ioctl resumed>) = 0 [pid 5866] close(3) = 0 [pid 5867] <... mkdir resumed>) = 0 [pid 5864] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5867] mount("/dev/loop1", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0 [pid 5866] close(4) = 0 [pid 5866] mkdir("./file0", 0777 [pid 5867] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5866] <... mkdir resumed>) = 0 [pid 5866] mount("/dev/loop3", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5866] ioctl(3, LOOP_CLR_FD [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5859] <... ioctl resumed>) = 0 [pid 5867] <... openat resumed>) = 3 [pid 5867] ioctl(3, LOOP_CLR_FD [ 85.750233][ T5867] loop1: detected capacity change from 0 to 256 [ 85.755733][ T5866] loop3: detected capacity change from 0 to 256 [ 85.758473][ T5859] loop4: detected capacity change from 0 to 4096 [pid 5859] close(4 [pid 5867] <... ioctl resumed>) = 0 [pid 5859] <... close resumed>) = 0 [pid 5867] close(3 [pid 5859] close(5 [pid 5866] <... ioctl resumed>) = 0 [pid 5866] close(3 [pid 5867] <... close resumed>) = 0 [pid 5866] <... close resumed>) = 0 [pid 5859] <... close resumed>) = 0 [pid 5859] mkdir("./bus", 0777) = 0 [pid 5859] mount("/dev/loop4", "./bus", "ntfs3", 0, "" [pid 5866] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [pid 5866] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5866] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5867] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5866] memfd_create("syzkaller", 0 [pid 5867] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5866] <... memfd_create resumed>) = 4 [pid 5867] bind(-1, NULL, 0 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5867] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5867] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5866] <... mmap resumed>) = 0x7ffab8e00000 [pid 5867] memfd_create("syzkaller", 0) = 4 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5864] <... write resumed>) = 2097152 [pid 5867] <... mmap resumed>) = 0x7ffab8e00000 [pid 5865] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5864] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 5 [pid 5864] ioctl(5, LOOP_SET_FD, 4 [pid 5865] <... write resumed>) = 2097152 [pid 5867] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5864] <... ioctl resumed>) = 0 [pid 5866] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5865] munmap(0x7ffab8e00000, 138412032 [pid 5864] close(4 [pid 5859] <... mount resumed>) = 0 [pid 5864] <... close resumed>) = 0 [pid 5859] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5864] close(5 [pid 5859] <... openat resumed>) = 4 [pid 5864] <... close resumed>) = 0 [pid 5859] chdir("./bus" [pid 5864] mkdir("./bus", 0777 [pid 5859] <... chdir resumed>) = 0 [pid 5864] <... mkdir resumed>) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5859] memfd_create("syzkaller", 0) = 5 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5859] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5864] mount("/dev/loop2", "./bus", "ntfs3", 0, "" [pid 5859] <... write resumed>) = 32768 [pid 5859] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5859] close(5) = 0 [pid 5859] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5859] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5859] getpid() = 2 [ 85.884984][ T5864] loop2: detected capacity change from 0 to 4096 [pid 5859] sched_setaffinity(0, 0, NULL) = -1 EINVAL (Invalid argument) [pid 5859] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [pid 5865] <... munmap resumed>) = 0 [pid 5859] <... openat resumed>) = 5 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5859] read(5, [pid 5865] ioctl(5, LOOP_SET_FD, 4 [pid 5867] <... write resumed>) = 2097152 [pid 5866] <... write resumed>) = 2097152 [pid 5865] <... ioctl resumed>) = 0 [pid 5867] munmap(0x7ffab8e00000, 138412032 [pid 5865] close(4) = 0 [pid 5866] munmap(0x7ffab8e00000, 138412032 [pid 5865] close(5) = 0 [pid 5865] mkdir("./bus", 0777) = 0 [pid 5867] <... munmap resumed>) = 0 [pid 5865] mount("/dev/loop0", "./bus", "ntfs3", 0, "" [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 5 [pid 5867] ioctl(5, LOOP_SET_FD, 4 [pid 5866] <... munmap resumed>) = 0 [ 85.960510][ T5865] loop0: detected capacity change from 0 to 4096 [pid 5867] <... ioctl resumed>) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5865] <... mount resumed>) = 0 [pid 5867] close(4 [pid 5866] <... openat resumed>) = 5 [pid 5865] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5867] <... close resumed>) = 0 [pid 5866] ioctl(5, LOOP_SET_FD, 4 [pid 5865] <... openat resumed>) = 4 [pid 5867] close(5) = 0 [pid 5865] chdir("./bus" [pid 5864] <... mount resumed>) = 0 [pid 5867] mkdir("./bus", 0777 [pid 5865] <... chdir resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5867] <... mkdir resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5864] <... openat resumed>) = 4 [pid 5867] mount("/dev/loop1", "./bus", "ntfs3", 0, "" [pid 5865] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5864] chdir("./bus") = 0 [ 86.021043][ T5867] loop1: detected capacity change from 0 to 4096 [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5864] memfd_create("syzkaller", 0 [pid 5865] memfd_create("syzkaller", 0) = 5 [pid 5864] <... memfd_create resumed>) = 5 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5864] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5864] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5864] close(5 [pid 5865] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5864] <... close resumed>) = 0 [pid 5864] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5864] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5864] getpid() = 2 [pid 5864] sched_setaffinity(0, 0, NULL) = -1 EINVAL (Invalid argument) [pid 5864] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY) = 5 [pid 5864] read(5, [pid 5865] <... write resumed>) = 32768 [pid 5865] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5865] close(5) = 0 [pid 5865] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5865] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5865] getpid() = 2 [pid 5865] sched_setaffinity(0, 0, NULL) = -1 EINVAL (Invalid argument) [pid 5865] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY) = 5 [pid 5865] read(5, [pid 5866] <... ioctl resumed>) = 0 [pid 5866] close(4) = 0 [ 86.082774][ T5866] loop3: detected capacity change from 0 to 4096 [pid 5866] close(5) = 0 [pid 5866] mkdir("./bus", 0777) = 0 [pid 5866] mount("/dev/loop3", "./bus", "ntfs3", 0, "" [pid 5867] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 4 [pid 5867] chdir("./bus") = 0 [pid 5866] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5867] memfd_create("syzkaller", 0 [pid 5866] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 4 [pid 5866] chdir("./bus") = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5866] memfd_create("syzkaller", 0 [pid 5867] <... memfd_create resumed>) = 5 [pid 5866] <... memfd_create resumed>) = 5 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5866] <... mmap resumed>) = 0x7ffab8e00000 [pid 5867] <... mmap resumed>) = 0x7ffab8e00000 [pid 5867] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5866] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5867] <... write resumed>) = 32768 [pid 5866] <... write resumed>) = 32768 [pid 5866] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5867] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5866] close(5 [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5866] <... close resumed>) = 0 [pid 5867] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5866] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5866] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5866] getpid() = 2 [pid 5867] close(5 [pid 5866] sched_setaffinity(0, 0, NULL [pid 5867] <... close resumed>) = 0 [pid 5867] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5867] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5867] getpid() = 2 [pid 5867] sched_setaffinity(0, 0, NULL) = -1 EINVAL (Invalid argument) [pid 5866] <... sched_setaffinity resumed>) = -1 EINVAL (Invalid argument) [pid 5867] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [pid 5866] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [pid 5867] <... openat resumed>) = 5 [pid 5866] <... openat resumed>) = 5 [pid 5867] read(5, [pid 5866] read(5, [pid 5867] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5867] sched_setaffinity(0, 4294967031, [1 28 34 ...]) = 0 [pid 5867] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY) = -1 EBADF (Bad file descriptor) [pid 5867] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5867] truncate(NULL, 9) = -1 EFAULT (Bad address) [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [pid 5867] close(5) = 0 [pid 5867] close(6) = -1 EBADF (Bad file descriptor) [pid 5867] close(7) = -1 EBADF (Bad file descriptor) [pid 5867] close(8) = -1 EBADF (Bad file descriptor) [pid 5867] close(9) = -1 EBADF (Bad file descriptor) [pid 5867] close(10) = -1 EBADF (Bad file descriptor) [pid 5867] close(11) = -1 EBADF (Bad file descriptor) [pid 5867] close(12) = -1 EBADF (Bad file descriptor) [pid 5867] close(13) = -1 EBADF (Bad file descriptor) [pid 5867] close(14) = -1 EBADF (Bad file descriptor) [pid 5867] close(15) = -1 EBADF (Bad file descriptor) [pid 5867] close(16) = -1 EBADF (Bad file descriptor) [pid 5867] close(17) = -1 EBADF (Bad file descriptor) [pid 5867] close(18) = -1 EBADF (Bad file descriptor) [pid 5867] close(19) = -1 EBADF (Bad file descriptor) [pid 5867] close(20 [pid 5859] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5867] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5867] close(21) = -1 EBADF (Bad file descriptor) [pid 5867] close(22) = -1 EBADF (Bad file descriptor) [pid 5867] close(23) = -1 EBADF (Bad file descriptor) [pid 5867] close(24) = -1 EBADF (Bad file descriptor) [pid 5867] close(25) = -1 EBADF (Bad file descriptor) [pid 5867] close(26) = -1 EBADF (Bad file descriptor) [pid 5867] close(27) = -1 EBADF (Bad file descriptor) [pid 5867] close(28) = -1 EBADF (Bad file descriptor) [pid 5867] close(29) = -1 EBADF (Bad file descriptor) [pid 5867] exit_group(0) = ? [pid 5867] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5847] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5847] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5859] sched_setaffinity(0, 4294967031, [1 28 34 ...]) = 0 [pid 5859] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5847] <... umount2 resumed>) = 0 [pid 5859] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5859] truncate(NULL, 9) = -1 EFAULT (Bad address) [pid 5859] close(3 [pid 5847] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5859] <... close resumed>) = 0 [pid 5859] close(4 [pid 5866] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5859] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] close(5) = 0 [pid 5859] close(6) = -1 EBADF (Bad file descriptor) [pid 5859] close(7) = -1 EBADF (Bad file descriptor) [pid 5859] close(8) = -1 EBADF (Bad file descriptor) [pid 5859] close(9 [pid 5847] newfstatat(AT_FDCWD, "./0/bus", [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] close(10 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] close(11) = -1 EBADF (Bad file descriptor) [pid 5859] close(12) = -1 EBADF (Bad file descriptor) [pid 5859] close(13) = -1 EBADF (Bad file descriptor) [pid 5859] close(14) = -1 EBADF (Bad file descriptor) [pid 5859] close(15) = -1 EBADF (Bad file descriptor) [pid 5859] close(16) = -1 EBADF (Bad file descriptor) [pid 5859] close(17) = -1 EBADF (Bad file descriptor) [pid 5859] close(18) = -1 EBADF (Bad file descriptor) [pid 5859] close(19) = -1 EBADF (Bad file descriptor) [pid 5859] close(20) = -1 EBADF (Bad file descriptor) [pid 5866] sched_setaffinity(0, 4294967031, [1 28 34 ...] [pid 5859] close(21 [pid 5847] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5866] <... sched_setaffinity resumed>) = 0 [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5859] close(22 [pid 5847] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5866] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... openat resumed>) = 4 [pid 5866] rename(NULL, NULL [pid 5859] close(23 [pid 5847] newfstatat(4, "", [pid 5866] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5866] truncate(NULL, 9 [pid 5859] close(24 [pid 5847] getdents64(4, [pid 5866] <... truncate resumed>) = -1 EFAULT (Bad address) [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5866] close(3 [pid 5859] close(25 [pid 5847] getdents64(4, [pid 5866] <... close resumed>) = 0 [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5866] close(4 [pid 5859] close(26 [pid 5847] close(4 [pid 5866] <... close resumed>) = 0 [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... close resumed>) = 0 [pid 5866] close(5 [pid 5859] close(27 [pid 5847] rmdir("./0/bus" [pid 5866] <... close resumed>) = 0 [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... rmdir resumed>) = 0 [pid 5866] close(6 [pid 5859] close(28 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(7 [pid 5859] close(29 [pid 5847] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(8) = -1 EBADF (Bad file descriptor) [pid 5859] exit_group(0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] close(9 [pid 5859] <... exit_group resumed>) = ? [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 5866] close(10 [pid 5859] +++ exited with 0 +++ [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5847] getdents64(4, [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5847] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5866] close(11) = -1 EBADF (Bad file descriptor) [pid 5847] getdents64(4, [pid 5866] close(12) = -1 EBADF (Bad file descriptor) [pid 5847] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5866] close(13 [pid 5851] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] close(4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... close resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] rmdir("./0/file0" [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(14 [pid 5851] <... openat resumed>) = 3 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... rmdir resumed>) = 0 [pid 5851] newfstatat(3, "", [pid 5866] close(15 [pid 5847] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] close(16) = -1 EBADF (Bad file descriptor) [pid 5866] close(17) = -1 EBADF (Bad file descriptor) [pid 5851] getdents64(3, [pid 5847] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5851] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5866] close(18 [pid 5851] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(19 [pid 5847] unlink("./0/binderfs" [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(20) = -1 EBADF (Bad file descriptor) [pid 5866] close(21 [pid 5851] <... umount2 resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 5851] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(3, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5851] newfstatat(AT_FDCWD, "./0/bus", [pid 5847] close(3 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... close resumed>) = 0 [pid 5866] close(22 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] rmdir("./0" [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5866] close(23) = -1 EBADF (Bad file descriptor) [pid 5866] close(24 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] mkdir("./1", 0777 [pid 5851] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(25 [pid 5847] <... mkdir resumed>) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(26 [pid 5851] <... openat resumed>) = 4 [pid 5847] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] newfstatat(4, "", [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(27 [pid 5865] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(28) = -1 EBADF (Bad file descriptor) [pid 5851] getdents64(4, [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5866] close(29) = -1 EBADF (Bad file descriptor) [pid 5866] exit_group(0) = ? [pid 5866] +++ exited with 0 +++ [pid 5865] sched_setaffinity(0, 4294967031, [1 28 34 ...] [pid 5851] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5847] <... ioctl resumed>) = 0 [pid 5865] <... sched_setaffinity resumed>) = 0 [pid 5851] getdents64(4, [pid 5847] close(3 [pid 5865] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5851] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5865] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5865] rename(NULL, NULL [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5865] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5865] truncate(NULL, 9) = -1 EFAULT (Bad address) [pid 5865] close(3 [pid 5851] close(4) = 0 [pid 5851] rmdir("./0/bus") = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5864] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5864] sched_setaffinity(0, 4294967031, [1 28 34 ...] [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5865] <... close resumed>) = 0 [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] close(4 [pid 5850] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5865] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5851] newfstatat(4, "", [pid 5865] close(5 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5865] <... close resumed>) = 0 [pid 5851] getdents64(4, [pid 5850] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5865] close(6 [pid 5850] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5865] close(7 [pid 5851] getdents64(4, [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5865] close(8 [pid 5851] close(4 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... sched_setaffinity resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5865] close(9 [pid 5864] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5851] rmdir("./0/file0" [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] close(10 [pid 5864] rename(NULL, NULL [pid 5851] <... rmdir resumed>) = 0 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5851] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] close(11 [pid 5864] truncate(NULL, 9 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... clone resumed>, child_tidptr=0x55557e23d650) = 3 [pid 5851] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... truncate resumed>) = -1 EFAULT (Bad address) ./strace-static-x86_64: Process 5872 attached [pid 5865] close(12 [pid 5864] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] unlink("./0/binderfs" [pid 5865] close(13 [pid 5872] set_robust_list(0x55557e23d660, 24 [pid 5851] <... unlink resumed>) = 0 [pid 5872] <... set_robust_list resumed>) = 0 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = 0 [pid 5851] getdents64(3, [pid 5850] <... umount2 resumed>) = 0 [pid 5865] close(14 [pid 5864] close(4 [pid 5851] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = 0 [pid 5872] chdir("./1" [pid 5865] close(15 [pid 5864] close(5 [pid 5851] close(3 [pid 5872] <... chdir resumed>) = 0 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5864] close(6 [pid 5865] close(17 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] close(7 [pid 5872] <... prctl resumed>) = 0 [pid 5851] rmdir("./0" [pid 5865] close(18 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] close(8 [pid 5851] <... rmdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5872] setpgid(0, 0 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] newfstatat(AT_FDCWD, "./0/bus", [pid 5865] close(19 [pid 5864] close(9 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5865] close(20 [pid 5864] close(10 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] close(21 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] close(11 [pid 5865] close(22 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] close(23 [pid 5864] close(12 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] close(24 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] close(13 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5865] close(25 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5865] close(26 [pid 5864] close(14 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... openat resumed>) = 4 [pid 5865] close(27 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] newfstatat(4, "", [pid 5865] close(28 [pid 5864] close(15 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5865] close(29 [pid 5864] close(16 [pid 5865] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] getdents64(4, [pid 5865] exit_group(0 [pid 5864] close(17 [pid 5865] <... exit_group resumed>) = ? [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5872] <... setpgid resumed>) = 0 [pid 5865] +++ exited with 0 +++ [pid 5864] close(18 [pid 5851] mkdir("./1", 0777 [pid 5850] getdents64(4, [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5864] close(19 [pid 5850] close(4 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5872] <... openat resumed>) = 3 [pid 5864] close(20 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] rmdir("./0/bus" [pid 5872] write(3, "1000", 4 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] <... openat resumed>) = 3 [pid 5850] <... rmdir resumed>) = 0 [pid 5872] <... write resumed>) = 4 [pid 5864] close(21 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... restart_syscall resumed>) = 0 [pid 5872] close(3 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5851] <... ioctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5872] <... close resumed>) = 0 [pid 5864] close(22 [pid 5851] close(3 [pid 5850] newfstatat(AT_FDCWD, "./0/file0", [pid 5872] symlink("/dev/binderfs", "./binderfs" [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] close(23) = -1 EBADF (Bad file descriptor) [pid 5864] close(24) = -1 EBADF (Bad file descriptor) [pid 5848] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] close(25 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5864] close(26 [pid 5848] <... openat resumed>) = 3 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] newfstatat(3, "", [pid 5864] close(27 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] getdents64(3, [pid 5864] close(28 [pid 5848] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] close(29) = -1 EBADF (Bad file descriptor) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5864] exit_group(0 [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] <... exit_group resumed>) = ? [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] +++ exited with 0 +++ [pid 5850] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5872] <... symlink resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5850] getdents64(4, 0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5850] rmdir("./0/file0") = 0 [pid 5849] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5849] <... openat resumed>) = 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] newfstatat(3, "", [pid 5850] unlink("./0/binderfs" [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5849] getdents64(3, [pid 5850] getdents64(3, [pid 5849] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5850] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5849] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(3) = 0 [pid 5850] rmdir("./0") = 0 [pid 5850] mkdir("./1", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5872] write(1, "executing program\n", 18 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5872] <... write resumed>) = 18 [pid 5851] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5872] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5848] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5872] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./0/bus") = 0 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5849] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(4, [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5849] newfstatat(AT_FDCWD, "./0/bus", [pid 5848] getdents64(4, [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5849] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] rmdir("./0/file0" [pid 5849] <... openat resumed>) = 4 [pid 5848] <... rmdir resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 5848] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0)) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5873 attached [pid 5872] memfd_create("syzkaller", 0 [pid 5851] <... clone resumed>, child_tidptr=0x55557e23d650) = 3 [pid 5850] <... close resumed>) = 0 [pid 5849] getdents64(4, [pid 5873] set_robust_list(0x55557e23d660, 24 [pid 5872] <... memfd_create resumed>) = 3 [pid 5849] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5848] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5873] <... set_robust_list resumed>) = 0 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5873] chdir("./1" [pid 5849] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5848] unlink("./0/binderfs" [pid 5873] <... chdir resumed>) = 0 [pid 5872] <... mmap resumed>) = 0x7ffab8e00000 [pid 5849] close(4 [pid 5848] <... unlink resumed>) = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... close resumed>) = 0 [pid 5873] <... prctl resumed>) = 0 [pid 5849] rmdir("./0/bus" [pid 5873] setpgid(0, 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 5873] <... setpgid resumed>) = 0 [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5873] <... openat resumed>) = 3 [pid 5849] newfstatat(AT_FDCWD, "./0/file0", [pid 5848] close(3 [pid 5873] write(3, "1000", 4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... close resumed>) = 0 [pid 5873] <... write resumed>) = 4 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] rmdir("./0" [pid 5873] close(3 [pid 5848] <... rmdir resumed>) = 0 executing program [pid 5873] <... close resumed>) = 0 [pid 5872] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] mkdir("./1", 0777 [pid 5873] symlink("/dev/binderfs", "./binderfs" [pid 5849] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... mkdir resumed>) = 0 [pid 5873] <... symlink resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5873] write(1, "executing program\n", 18 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5873] <... write resumed>) = 18 [pid 5872] <... write resumed>) = 131072 [pid 5849] newfstatat(4, "", [pid 5848] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5874 attached [pid 5873] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5850] <... clone resumed>, child_tidptr=0x55557e23d650) = 3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5874] set_robust_list(0x55557e23d660, 24 [pid 5873] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5872] munmap(0x7ffab8e00000, 138412032 [pid 5849] getdents64(4, [pid 5874] <... set_robust_list resumed>) = 0 [pid 5873] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5849] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5848] <... ioctl resumed>) = 0 [pid 5874] chdir("./1" [pid 5873] <... ioprio_set resumed>) = 0 [pid 5872] <... munmap resumed>) = 0 [pid 5849] getdents64(4, [pid 5848] close(3 [pid 5874] <... chdir resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5849] close(4 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] <... close resumed>) = 0 [pid 5873] <... mmap resumed>) = 0x7ffab8e00000 [pid 5874] <... prctl resumed>) = 0 [pid 5849] rmdir("./0/file0" [pid 5874] setpgid(0, 0 [pid 5849] <... rmdir resumed>) = 0 executing program [pid 5874] <... setpgid resumed>) = 0 [pid 5873] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5849] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] <... openat resumed>) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./0/binderfs" [pid 5874] <... openat resumed>) = 3 [pid 5849] <... unlink resumed>) = 0 [pid 5849] getdents64(3, 0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 5874] write(3, "1000", 4 [pid 5849] <... close resumed>) = 0 [pid 5874] <... write resumed>) = 4 [pid 5849] rmdir("./0" [pid 5874] close(3 [pid 5849] <... rmdir resumed>) = 0 [pid 5874] <... close resumed>) = 0 [pid 5849] mkdir("./1", 0777 [pid 5874] symlink("/dev/binderfs", "./binderfs" [pid 5849] <... mkdir resumed>) = 0 [pid 5874] <... symlink resumed>) = 0 [pid 5873] <... write resumed>) = 131072 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5872] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5873] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5849] close(3 [pid 5874] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5874] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5873] <... openat resumed>) = 4 [pid 5874] <... ioprio_set resumed>) = 0 [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5872] <... ioctl resumed>) = 0 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5874] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5872] close(3 [pid 5848] <... close resumed>) = 0 [pid 5874] <... write resumed>) = 131072 [pid 5872] <... close resumed>) = 0 [pid 5874] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5873] <... ioctl resumed>) = 0 [pid 5872] close(4 [pid 5874] <... openat resumed>) = 4 [pid 5873] close(3 [pid 5872] <... close resumed>) = 0 [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 5873] <... close resumed>) = 0 [ 87.247041][ T5872] loop1: detected capacity change from 0 to 256 [ 87.255166][ T5873] loop4: detected capacity change from 0 to 256 [pid 5873] close(4) = 0 [pid 5872] mkdir("./file0", 0777 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5873] mkdir("./file0", 0777) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x55557e23d650) = 3 [pid 5873] mount("/dev/loop4", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0./strace-static-x86_64: Process 5875 attached ) = -1 EINVAL (Invalid argument) [pid 5872] <... mkdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5872] mount("/dev/loop1", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0 [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5875] set_robust_list(0x55557e23d660, 24 [pid 5873] <... openat resumed>) = 3 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5873] ioctl(3, LOOP_CLR_FD [pid 5875] chdir("./1" [pid 5873] <... ioctl resumed>) = 0 [pid 5873] close(3) = 0 [pid 5872] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5875] <... chdir resumed>) = 0 [pid 5873] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5873] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5875] <... prctl resumed>) = 0 [pid 5873] bind(-1, NULL, 0 [pid 5875] setpgid(0, 0 [pid 5873] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... setpgid resumed>) = 0 [pid 5873] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5873] <... socket resumed>) = 3 [pid 5872] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5873] memfd_create("syzkaller", 0 [pid 5875] <... openat resumed>) = 3 [pid 5873] <... memfd_create resumed>) = 4 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5875] write(3, "1000", 4 [pid 5873] <... mmap resumed>) = 0x7ffab8e00000 [pid 5875] <... write resumed>) = 4 [pid 5874] <... ioctl resumed>) = 0 [pid 5872] <... openat resumed>) = 3 [pid 5872] ioctl(3, LOOP_CLR_FD) = 0 [pid 5872] close(3 [pid 5875] close(3 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 5876 attached [pid 5875] <... close resumed>) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] write(1, "executing program\n", 18) = 18 [pid 5876] set_robust_list(0x55557e23d660, 24 [pid 5875] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5876] <... set_robust_list resumed>) = 0 [pid 5875] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5876] chdir("./1") = 0 [pid 5875] <... ioprio_set resumed>) = 0 [pid 5874] close(3 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] <... close resumed>) = 0 [pid 5876] <... prctl resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x55557e23d650) = 3 [pid 5876] setpgid(0, 0) = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5875] memfd_create("syzkaller", 0 [pid 5876] <... openat resumed>) = 3 [pid 5875] <... memfd_create resumed>) = 3 [pid 5874] close(4 [pid 5876] write(3, "1000", 4) = 4 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5874] <... close resumed>) = 0 [pid 5872] <... close resumed>) = 0 [pid 5875] <... mmap resumed>) = 0x7ffab8e00000 executing program [pid 5875] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5874] mkdir("./file0", 0777 [pid 5872] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5876] close(3) = 0 [pid 5874] <... mkdir resumed>) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs" [pid 5874] mount("/dev/loop3", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0 [pid 5872] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5876] <... symlink resumed>) = 0 [pid 5874] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5872] bind(-1, NULL, 0 [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5872] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] write(1, "executing program\n", 18 [pid 5874] <... openat resumed>) = 3 [pid 5872] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5876] <... write resumed>) = 18 [pid 5875] <... write resumed>) = 131072 [pid 5874] ioctl(3, LOOP_CLR_FD [pid 5872] <... socket resumed>) = 3 [pid 5876] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5874] <... ioctl resumed>) = 0 [pid 5872] memfd_create("syzkaller", 0 [pid 5874] close(3) = 0 [pid 5872] <... memfd_create resumed>) = 4 [ 87.289340][ T5874] loop3: detected capacity change from 0 to 256 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5875] munmap(0x7ffab8e00000, 138412032 [pid 5876] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5875] <... munmap resumed>) = 0 [pid 5876] <... ioprio_set resumed>) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5872] <... mmap resumed>) = 0x7ffab8e00000 [pid 5876] memfd_create("syzkaller", 0 [pid 5875] <... openat resumed>) = 4 [pid 5875] ioctl(4, LOOP_SET_FD, 3 [pid 5874] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5876] <... memfd_create resumed>) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5874] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5874] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5876] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5874] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5876] <... write resumed>) = 131072 [pid 5874] <... socket resumed>) = 3 [pid 5876] munmap(0x7ffab8e00000, 138412032 [pid 5874] memfd_create("syzkaller", 0 [pid 5876] <... munmap resumed>) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3 [pid 5875] <... ioctl resumed>) = 0 [pid 5875] close(3) = 0 [pid 5875] close(4) = 0 [pid 5875] mkdir("./file0", 0777) = 0 [pid 5875] mount("/dev/loop0", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5875] ioctl(3, LOOP_CLR_FD) = 0 [pid 5875] close(3) = 0 [pid 5874] <... memfd_create resumed>) = 4 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5875] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [pid 5875] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5875] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5876] <... ioctl resumed>) = 0 [pid 5876] close(3) = 0 [pid 5876] close(4 [pid 5875] memfd_create("syzkaller", 0 [pid 5876] <... close resumed>) = 0 [pid 5875] <... memfd_create resumed>) = 4 [pid 5876] mkdir("./file0", 0777 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] <... mkdir resumed>) = 0 [pid 5875] <... mmap resumed>) = 0x7ffab8e00000 [pid 5873] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5876] mount("/dev/loop2", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5876] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 87.363656][ T5875] loop0: detected capacity change from 0 to 256 [ 87.387507][ T5876] loop2: detected capacity change from 0 to 256 [pid 5876] ioctl(3, LOOP_CLR_FD) = 0 [pid 5876] close(3 [pid 5872] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5876] <... close resumed>) = 0 [pid 5876] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [pid 5876] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5876] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5876] memfd_create("syzkaller", 0) = 4 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5873] <... write resumed>) = 2097152 [pid 5874] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5873] munmap(0x7ffab8e00000, 138412032 [pid 5875] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5873] <... munmap resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 5 [pid 5873] ioctl(5, LOOP_SET_FD, 4 [pid 5872] <... write resumed>) = 2097152 [pid 5872] munmap(0x7ffab8e00000, 138412032 [pid 5873] <... ioctl resumed>) = 0 [pid 5873] close(4) = 0 [pid 5873] close(5) = 0 [pid 5873] mkdir("./bus", 0777) = 0 [pid 5873] mount("/dev/loop4", "./bus", "ntfs3", 0, "" [pid 5872] <... munmap resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 5 [ 87.526394][ T5873] loop4: detected capacity change from 0 to 4096 [pid 5872] ioctl(5, LOOP_SET_FD, 4 [pid 5874] <... write resumed>) = 2097152 [pid 5872] <... ioctl resumed>) = 0 [pid 5876] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5875] <... write resumed>) = 2097152 [pid 5874] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5875] munmap(0x7ffab8e00000, 138412032 [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5872] close(4 [pid 5874] <... openat resumed>) = 5 [pid 5875] <... munmap resumed>) = 0 [pid 5872] <... close resumed>) = 0 [pid 5872] close(5) = 0 [ 87.587624][ T5872] loop1: detected capacity change from 0 to 4096 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5875] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5874] ioctl(5, LOOP_SET_FD, 4 [pid 5872] mkdir("./bus", 0777 [pid 5875] close(4) = 0 [pid 5875] close(5) = 0 [pid 5875] mkdir("./bus", 0777) = 0 [pid 5875] mount("/dev/loop0", "./bus", "ntfs3", 0, "" [pid 5876] <... write resumed>) = 2097152 [pid 5874] <... ioctl resumed>) = 0 [pid 5872] <... mkdir resumed>) = 0 [pid 5876] munmap(0x7ffab8e00000, 138412032) = 0 [ 87.647248][ T5875] loop0: detected capacity change from 0 to 4096 [ 87.686845][ T5874] loop3: detected capacity change from 0 to 4096 [pid 5872] mount("/dev/loop1", "./bus", "ntfs3", 0, "" [pid 5876] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 5 [pid 5876] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5876] close(4) = 0 [pid 5876] close(5) = 0 [pid 5876] mkdir("./bus", 0777) = 0 [pid 5876] mount("/dev/loop2", "./bus", "ntfs3", 0, "" [pid 5873] <... mount resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 4 [pid 5873] chdir("./bus") = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5873] memfd_create("syzkaller", 0) = 5 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5873] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5874] close(4) = 0 [pid 5874] close(5) = 0 [pid 5875] <... mount resumed>) = 0 [pid 5875] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 4 [pid 5875] chdir("./bus" [pid 5873] munmap(0x7ffab8e00000, 138412032 [pid 5875] <... chdir resumed>) = 0 [pid 5873] <... munmap resumed>) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5875] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5873] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5875] memfd_create("syzkaller", 0 [pid 5873] close(5 [pid 5875] <... memfd_create resumed>) = 5 [pid 5873] <... close resumed>) = 0 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5873] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5875] <... mmap resumed>) = 0x7ffab8e00000 [pid 5874] mkdir("./bus", 0777) = 0 [pid 5875] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5873] <... bpf resumed>) = -1 EINVAL (Invalid argument) [ 87.716410][ T5876] loop2: detected capacity change from 0 to 4096 [pid 5873] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5875] <... write resumed>) = 32768 [pid 5874] mount("/dev/loop3", "./bus", "ntfs3", 0, "" [pid 5873] <... sched_setscheduler resumed>) = -1 EPERM (Operation not permitted) [pid 5875] munmap(0x7ffab8e00000, 138412032 [pid 5873] getpid( [pid 5875] <... munmap resumed>) = 0 [pid 5873] <... getpid resumed>) = 3 [pid 5873] sched_setaffinity(0, 0, NULL) = -1 EINVAL (Invalid argument) [pid 5873] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5873] <... openat resumed>) = 5 [pid 5875] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5873] read(5, [pid 5875] close(5) = 0 [pid 5875] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5875] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5875] getpid() = 3 [pid 5875] sched_setaffinity(0, 0, NULL) = -1 EINVAL (Invalid argument) [pid 5875] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY) = 5 [pid 5875] read(5, [pid 5874] <... mount resumed>) = 0 [pid 5874] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 4 [pid 5874] chdir("./bus" [pid 5872] <... mount resumed>) = 0 [pid 5874] <... chdir resumed>) = 0 [pid 5872] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5872] <... openat resumed>) = 4 [pid 5874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5872] chdir("./bus" [pid 5874] memfd_create("syzkaller", 0 [pid 5872] <... chdir resumed>) = 0 [pid 5876] <... mount resumed>) = 0 [pid 5874] <... memfd_create resumed>) = 5 [pid 5872] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5872] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5876] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5874] <... mmap resumed>) = 0x7ffab8e00000 [pid 5872] memfd_create("syzkaller", 0 [pid 5876] <... openat resumed>) = 4 [pid 5874] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5872] <... memfd_create resumed>) = 5 [pid 5876] chdir("./bus" [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] <... chdir resumed>) = 0 [pid 5872] <... mmap resumed>) = 0x7ffab8e00000 [pid 5876] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5872] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5876] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5874] <... write resumed>) = 32768 [pid 5876] memfd_create("syzkaller", 0 [pid 5874] munmap(0x7ffab8e00000, 138412032 [pid 5876] <... memfd_create resumed>) = 5 [pid 5874] <... munmap resumed>) = 0 [pid 5872] <... write resumed>) = 32768 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5874] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5872] munmap(0x7ffab8e00000, 138412032 [pid 5876] <... mmap resumed>) = 0x7ffab8e00000 [pid 5874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5872] <... munmap resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5872] close(5) = 0 [pid 5876] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5872] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 5876] <... write resumed>) = 32768 [pid 5872] sched_setscheduler(0, SCHED_FIFO, [7]) = -1 EPERM (Operation not permitted) [pid 5876] munmap(0x7ffab8e00000, 138412032 [pid 5872] getpid( [pid 5876] <... munmap resumed>) = 0 [pid 5872] <... getpid resumed>) = 3 [pid 5874] close(5 [pid 5872] sched_setaffinity(0, 0, NULL [pid 5876] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5874] <... close resumed>) = 0 [pid 5872] <... sched_setaffinity resumed>) = -1 EINVAL (Invalid argument) [pid 5876] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5874] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5872] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [pid 5876] close(5 [pid 5874] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5872] <... openat resumed>) = 5 [pid 5876] <... close resumed>) = 0 [pid 5874] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5872] read(5, [pid 5876] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5874] <... sched_setscheduler resumed>) = -1 EPERM (Operation not permitted) [pid 5876] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5874] getpid( [pid 5876] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5874] <... getpid resumed>) = 3 [pid 5876] <... sched_setscheduler resumed>) = -1 EPERM (Operation not permitted) [pid 5876] getpid( [pid 5874] sched_setaffinity(0, 0, NULL [pid 5876] <... getpid resumed>) = 3 [pid 5874] <... sched_setaffinity resumed>) = -1 EINVAL (Invalid argument) [pid 5876] sched_setaffinity(0, 0, NULL [pid 5874] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [pid 5876] <... sched_setaffinity resumed>) = -1 EINVAL (Invalid argument) [pid 5874] <... openat resumed>) = 5 [pid 5874] read(5, [pid 5876] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY) = 5 [pid 5876] read(5, [pid 5874] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5874] sched_setaffinity(0, 4294967031, [1 28 34 ...]) = 0 [pid 5874] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY) = -1 EBADF (Bad file descriptor) [pid 5874] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5874] truncate(NULL, 9) = -1 EFAULT (Bad address) [pid 5874] close(3) = 0 [pid 5874] close(4) = 0 [pid 5874] close(5) = 0 [pid 5874] close(6) = -1 EBADF (Bad file descriptor) [pid 5874] close(7) = -1 EBADF (Bad file descriptor) [pid 5874] close(8) = -1 EBADF (Bad file descriptor) [pid 5874] close(9) = -1 EBADF (Bad file descriptor) [pid 5874] close(10) = -1 EBADF (Bad file descriptor) [pid 5874] close(11) = -1 EBADF (Bad file descriptor) [pid 5874] close(12) = -1 EBADF (Bad file descriptor) [pid 5874] close(13) = -1 EBADF (Bad file descriptor) [pid 5874] close(14) = -1 EBADF (Bad file descriptor) [pid 5874] close(15) = -1 EBADF (Bad file descriptor) [pid 5874] close(16) = -1 EBADF (Bad file descriptor) [pid 5874] close(17) = -1 EBADF (Bad file descriptor) [pid 5874] close(18) = -1 EBADF (Bad file descriptor) [pid 5874] close(19) = -1 EBADF (Bad file descriptor) [pid 5874] close(20) = -1 EBADF (Bad file descriptor) [pid 5874] close(21) = -1 EBADF (Bad file descriptor) [pid 5874] close(22) = -1 EBADF (Bad file descriptor) [pid 5874] close(23) = -1 EBADF (Bad file descriptor) [pid 5874] close(24) = -1 EBADF (Bad file descriptor) [pid 5874] close(25) = -1 EBADF (Bad file descriptor) [pid 5874] close(26) = -1 EBADF (Bad file descriptor) [pid 5874] close(27) = -1 EBADF (Bad file descriptor) [pid 5874] close(28) = -1 EBADF (Bad file descriptor) [pid 5874] close(29) = -1 EBADF (Bad file descriptor) [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5850] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5850] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5850] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./1/bus") = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./1/file0") = 0 [pid 5850] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./1/binderfs") = 0 [pid 5850] getdents64(3, 0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./1") = 0 [pid 5850] mkdir("./2", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5872] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5850] close(3 [pid 5872] sched_setaffinity(0, 4294967031, [1 28 34 ...]) = 0 [pid 5872] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY) = -1 EBADF (Bad file descriptor) [pid 5872] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5872] truncate(NULL, 9) = -1 EFAULT (Bad address) [pid 5872] close(3) = 0 [pid 5872] close(4) = 0 [pid 5872] close(5 [pid 5850] <... close resumed>) = 0 [pid 5872] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5872] close(6) = -1 EBADF (Bad file descriptor) [pid 5872] close(7./strace-static-x86_64: Process 5878 attached ) = -1 EBADF (Bad file descriptor) [pid 5872] close(8) = -1 EBADF (Bad file descriptor) [pid 5878] set_robust_list(0x55557e23d660, 24 [pid 5872] close(9 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] close(10) = -1 EBADF (Bad file descriptor) [pid 5872] close(11) = -1 EBADF (Bad file descriptor) [pid 5872] close(12) = -1 EBADF (Bad file descriptor) [pid 5872] close(13 [pid 5878] chdir("./2" [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] close(14) = -1 EBADF (Bad file descriptor) [pid 5878] <... chdir resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x55557e23d650) = 4 [pid 5872] close(15 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] close(16) = -1 EBADF (Bad file descriptor) [pid 5878] <... prctl resumed>) = 0 [pid 5872] close(17 [pid 5878] setpgid(0, 0 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5878] <... setpgid resumed>) = 0 [pid 5872] close(18 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] close(19 [pid 5878] <... openat resumed>) = 3 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] close(20) = -1 EBADF (Bad file descriptor) [pid 5872] close(21) = -1 EBADF (Bad file descriptor) [pid 5872] close(22 [pid 5878] write(3, "1000", 4 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5878] <... write resumed>) = 4 [pid 5872] close(23 [pid 5878] close(3 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5878] <... close resumed>) = 0 [pid 5872] close(24 [pid 5878] symlink("/dev/binderfs", "./binderfs" [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5878] <... symlink resumed>) = 0 [pid 5872] close(25) = -1 EBADF (Bad file descriptor) executing program [pid 5872] close(26) = -1 EBADF (Bad file descriptor) [pid 5878] write(1, "executing program\n", 18 [pid 5872] close(27 [pid 5878] <... write resumed>) = 18 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5878] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5872] close(28 [pid 5878] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5878] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5872] close(29 [pid 5878] <... ioprio_set resumed>) = 0 [pid 5872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] exit_group(0) = ? [pid 5878] memfd_create("syzkaller", 0) = 3 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5878] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5872] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5878] <... write resumed>) = 131072 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5878] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5847] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] getdents64(3, [pid 5878] <... openat resumed>) = 4 [pid 5847] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5847] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5878] <... ioctl resumed>) = 0 [ 88.578047][ T5878] loop3: detected capacity change from 0 to 256 [pid 5847] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5878] close(3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] <... close resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./1/bus", [pid 5878] close(4) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5878] mkdir("./file0", 0777 [pid 5847] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5878] <... mkdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] mount("/dev/loop3", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0 [pid 5847] <... openat resumed>) = 4 [pid 5878] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(4, "", [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5878] <... openat resumed>) = 3 [pid 5847] getdents64(4, [pid 5878] ioctl(3, LOOP_CLR_FD [pid 5847] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5878] <... ioctl resumed>) = 0 [pid 5847] getdents64(4, [pid 5878] close(3 [pid 5847] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5878] <... close resumed>) = 0 [pid 5875] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5847] rmdir("./1/bus" [pid 5878] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5876] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5875] sched_setaffinity(0, 4294967031, [1 28 34 ...] [pid 5873] <... read resumed>"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 102392) = 102392 [pid 5878] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5847] <... rmdir resumed>) = 0 [pid 5878] bind(-1, NULL, 0 [pid 5876] sched_setaffinity(0, 4294967031, [1 28 34 ...] [pid 5875] <... sched_setaffinity resumed>) = 0 [pid 5873] sched_setaffinity(0, 4294967031, [1 28 34 ...] [pid 5847] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5878] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5873] <... sched_setaffinity resumed>) = 0 [pid 5878] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5875] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] <... socket resumed>) = 3 [pid 5875] rename(NULL, NULL [pid 5878] memfd_create("syzkaller", 0 [pid 5876] <... sched_setaffinity resumed>) = 0 [pid 5875] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5873] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] newfstatat(AT_FDCWD, "./1/file0", [pid 5876] sendmsg(-1, NULL, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_BATCH|MSG_ZEROCOPY [pid 5873] rename(NULL, NULL [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5875] truncate(NULL, 9 [pid 5876] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5847] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5876] rename(NULL, NULL [pid 5875] <... truncate resumed>) = -1 EFAULT (Bad address) [pid 5873] truncate(NULL, 9 [pid 5876] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5875] close(3 [pid 5876] truncate(NULL, 9 [pid 5873] <... truncate resumed>) = -1 EFAULT (Bad address) [pid 5847] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5876] <... truncate resumed>) = -1 EFAULT (Bad address) [pid 5873] close(3 [pid 5875] <... close resumed>) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5878] <... memfd_create resumed>) = 4 [pid 5876] close(3 [pid 5875] close(4 [pid 5873] <... close resumed>) = 0 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5873] close(4 [pid 5847] newfstatat(4, "", [pid 5875] <... close resumed>) = 0 [pid 5873] <... close resumed>) = 0 [pid 5878] <... mmap resumed>) = 0x7ffab8e00000 [pid 5873] close(5) = 0 [pid 5875] close(5 [pid 5873] close(6 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5875] <... close resumed>) = 0 [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] getdents64(4, [pid 5876] <... close resumed>) = 0 [pid 5875] close(6 [pid 5873] close(7 [pid 5847] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5876] close(4 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] getdents64(4, [pid 5876] <... close resumed>) = 0 [pid 5875] close(7 [pid 5873] close(8 [pid 5847] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5876] close(5 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] close(4 [pid 5876] <... close resumed>) = 0 [pid 5875] close(8 [pid 5873] close(9 [pid 5876] close(6 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... close resumed>) = 0 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] close(9 [pid 5873] close(10 [pid 5847] rmdir("./1/file0" [pid 5876] close(7 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] close(10 [pid 5873] close(11 [pid 5876] close(8 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] close(11 [pid 5873] close(12 [pid 5847] <... rmdir resumed>) = 0 [pid 5876] close(9 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(10 [pid 5875] close(12 [pid 5873] close(13 [pid 5847] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(11 [pid 5875] close(13 [pid 5873] close(14 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5876] close(12 [pid 5875] close(14 [pid 5873] close(15 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(13 [pid 5875] close(15 [pid 5873] close(16 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] unlink("./1/binderfs" [pid 5876] close(14 [pid 5875] close(16 [pid 5873] close(17 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... unlink resumed>) = 0 [pid 5876] close(15 [pid 5875] close(17 [pid 5873] close(18 [pid 5847] getdents64(3, [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5876] close(16 [pid 5875] close(18 [pid 5873] close(19 [pid 5847] close(3 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... close resumed>) = 0 [pid 5876] close(17 [pid 5875] close(19 [pid 5873] close(20 [pid 5847] rmdir("./1" [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(18 [pid 5875] close(20 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] close(21 [pid 5847] <... rmdir resumed>) = 0 [pid 5876] close(19 [pid 5875] close(21 [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] mkdir("./2", 0777 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] close(22 [pid 5876] close(20 [pid 5875] close(22 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(21 [pid 5875] close(23 [pid 5873] close(23 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(22 [pid 5875] close(24 [pid 5873] close(24 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(23 [pid 5875] close(25 [pid 5873] close(25 [pid 5847] <... mkdir resumed>) = 0 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5876] close(24 [pid 5875] close(26 [pid 5873] close(26 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(25 [pid 5875] close(27 [pid 5873] close(27 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(26 [pid 5875] close(28 [pid 5873] close(28 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] close(27 [pid 5875] close(29 [pid 5847] <... openat resumed>) = 3 [pid 5875] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] close(29 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5876] close(28 [pid 5875] exit_group(0 [pid 5873] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... ioctl resumed>) = 0 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5875] <... exit_group resumed>) = ? [pid 5873] exit_group(0 [pid 5876] close(29 [pid 5847] close(3 [pid 5876] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5873] <... exit_group resumed>) = ? [pid 5876] exit_group(0) = ? [pid 5876] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5878] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5875] +++ exited with 0 +++ [pid 5849] <... restart_syscall resumed>) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5873] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5849] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... openat resumed>) = 3 [pid 5848] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 5848] newfstatat(3, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5848] getdents64(3, [pid 5851] <... restart_syscall resumed>) = 0 [pid 5849] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5848] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5849] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5851] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(4, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5851] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(4, 0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5847] <... close resumed>) = 0 [pid 5878] <... write resumed>) = 2097152 [pid 5851] <... openat resumed>) = 3 [pid 5849] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5849] rmdir("./1/bus") = 0 [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached [pid 5878] munmap(0x7ffab8e00000, 138412032 [pid 5851] newfstatat(3, "", [pid 5849] newfstatat(AT_FDCWD, "./1/file0", [pid 5848] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5878] <... munmap resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=100, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5879] set_robust_list(0x55557e23d660, 24 [pid 5851] getdents64(3, [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5879] <... set_robust_list resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5851] <... getdents64 resumed>0x55557e23e6f0 /* 5 entries */, 32768) = 136 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... clone resumed>, child_tidptr=0x55557e23d650) = 4 [pid 5879] chdir("./2" [pid 5851] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] <... openat resumed>) = 5 [pid 5879] <... chdir resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5848] <... openat resumed>) = 4 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... umount2 resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 5848] newfstatat(4, "", [pid 5879] <... prctl resumed>) = 0 [pid 5878] ioctl(5, LOOP_SET_FD, 4 [pid 5851] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5879] setpgid(0, 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5879] <... setpgid resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(4, 0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] newfstatat(AT_FDCWD, "./1/bus", [pid 5848] getdents64(4, [pid 5849] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] rmdir("./1/file0" [pid 5851] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] getdents64(4, [pid 5849] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./1/binderfs") = 0 [pid 5879] <... openat resumed>) = 3 [pid 5879] write(3, "1000", 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5879] <... write resumed>) = 4 [pid 5851] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] close(4 [pid 5879] close(3 [pid 5848] <... close resumed>) = 0 [pid 5879] <... close resumed>) = 0 [pid 5849] getdents64(3, [pid 5848] rmdir("./1/bus" [pid 5879] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... openat resumed>) = 4 [pid 5849] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./1"executing program [pid 5879] <... symlink resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 5849] <... rmdir resumed>) = 0 [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5879] write(1, "executing program\n", 18 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5879] <... write resumed>) = 18 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] getdents64(4, [pid 5849] mkdir("./2", 0777 [pid 5879] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5848] newfstatat(AT_FDCWD, "./1/file0", [pid 5851] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, [pid 5879] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5879] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5851] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] close(4 [pid 5849] <... openat resumed>) = 3 [pid 5879] <... ioprio_set resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] <... close resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] close(3 [pid 5851] rmdir("./1/bus" [pid 5848] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] <... ioctl resumed>) = 0 [pid 5878] close(4 [pid 5879] memfd_create("syzkaller", 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", [pid 5878] <... close resumed>) = 0 [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5879] <... memfd_create resumed>) = 3 [pid 5878] close(5 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] getdents64(4, [pid 5879] <... mmap resumed>) = 0x7ffab8e00000 [pid 5878] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./1/file0", [pid 5848] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5878] mkdir("./bus", 0777 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] getdents64(4, [pid 5878] <... mkdir resumed>) = 0 [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5878] mount("/dev/loop3", "./bus", "ntfs3", 0, "" [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] close(4 [pid 5851] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5879] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5851] <... openat resumed>) = 4 [pid 5849] <... close resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 5848] rmdir("./1/file0" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5851] getdents64(4, [pid 5848] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... getdents64 resumed>0x55557e246730 /* 2 entries */, 32768) = 48 [pid 5848] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5851] getdents64(4, [pid 5879] <... write resumed>) = 131072 [pid 5851] <... getdents64 resumed>0x55557e246730 /* 0 entries */, 32768) = 0 [pid 5851] close(4 [pid 5879] munmap(0x7ffab8e00000, 138412032 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5879] <... munmap resumed>) = 0 [pid 5848] unlink("./1/binderfs" [pid 5879] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] <... close resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 5851] rmdir("./1/file0" [pid 5848] getdents64(3, [pid 5879] <... openat resumed>) = 4 [pid 5851] <... rmdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [ 88.872762][ T5878] loop3: detected capacity change from 0 to 4096 [pid 5851] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5879] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] close(3 [pid 5851] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./1") = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] mkdir("./2", 0777 [pid 5849] <... clone resumed>, child_tidptr=0x55557e23d650) = 4 [pid 5848] <... mkdir resumed>) = 0 [pid 5851] unlink("./1/binderfs") = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5851] getdents64(3, ./strace-static-x86_64: Process 5880 attached [pid 5880] set_robust_list(0x55557e23d660, 24 [pid 5851] <... getdents64 resumed>0x55557e23e6f0 /* 0 entries */, 32768) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5880] <... set_robust_list resumed>) = 0 executing program [pid 5851] close(3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5879] <... ioctl resumed>) = 0 [pid 5880] chdir("./2" [pid 5879] close(3 [pid 5851] <... close resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5851] rmdir("./1" [pid 5848] close(3 [pid 5879] <... close resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5880] <... chdir resumed>) = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] write(1, "executing program\n", 18) = 18 [pid 5880] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5880] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0)) = 0 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [ 88.931437][ T5879] loop1: detected capacity change from 0 to 256 [pid 5880] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5879] close(4 [pid 5851] mkdir("./2", 0777 [pid 5879] <... close resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5879] mkdir("./file0", 0777 [pid 5851] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5879] <... mkdir resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 5880] <... write resumed>) = 131072 [pid 5880] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5879] mount("/dev/loop1", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0) = -1 EINVAL (Invalid argument) [pid 5880] ioctl(4, LOOP_SET_FD, 3 [pid 5879] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5879] ioctl(3, LOOP_CLR_FD [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5879] <... ioctl resumed>) = 0 [pid 5879] close(3) = 0 [pid 5878] <... mount resumed>) = 0 [pid 5879] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5878] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5879] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5878] <... openat resumed>) = 4 [pid 5879] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5878] chdir("./bus" [pid 5879] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5848] <... clone resumed>, child_tidptr=0x55557e23d650) = 4 [pid 5878] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5881 attached [pid 5879] <... socket resumed>) = 3 [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5851] <... close resumed>) = 0 [pid 5881] set_robust_list(0x55557e23d660, 24 [pid 5880] <... ioctl resumed>) = 0 [pid 5878] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] close(3 [pid 5881] chdir("./2" [pid 5880] <... close resumed>) = 0 [pid 5881] <... chdir resumed>) = 0 [pid 5880] close(4 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5880] <... close resumed>) = 0 [pid 5879] memfd_create("syzkaller", 0 [pid 5878] memfd_create("syzkaller", 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5881] <... prctl resumed>) = 0 [pid 5880] mkdir("./file0", 0777 [pid 5881] setpgid(0, 0 [pid 5880] <... mkdir resumed>) = 0 [pid 5881] <... setpgid resumed>) = 0 [pid 5880] mount("/dev/loop2", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0./strace-static-x86_64: Process 5882 attached [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5880] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5878] <... memfd_create resumed>) = 5 [pid 5882] set_robust_list(0x55557e23d660, 24 [pid 5879] <... memfd_create resumed>) = 4 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] <... set_robust_list resumed>) = 0 [pid 5881] <... openat resumed>) = 3 [pid 5880] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5878] <... mmap resumed>) = 0x7ffab8e00000 [pid 5851] <... clone resumed>, child_tidptr=0x55557e23d650) = 4 [pid 5881] write(3, "1000", 4 [pid 5880] <... openat resumed>) = 3 [pid 5881] <... write resumed>) = 4 [pid 5880] ioctl(3, LOOP_CLR_FD [pid 5881] close(3 [pid 5880] <... ioctl resumed>) = 0 [pid 5879] <... mmap resumed>) = 0x7ffab8e00000 [pid 5878] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768 [pid 5882] chdir("./2" [pid 5881] <... close resumed>) = 0 [pid 5880] close(3 [pid 5881] symlink("/dev/binderfs", "./binderfs" [pid 5882] <... chdir resumed>) = 0 [pid 5881] <... symlink resumed>) = 0 [pid 5880] <... close resumed>) = 0 [pid 5878] <... write resumed>) = 32768 executing program [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5881] write(1, "executing program\n", 18) = 18 [pid 5882] <... prctl resumed>) = 0 [pid 5881] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5880] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5878] munmap(0x7ffab8e00000, 138412032 [pid 5882] setpgid(0, 0 [pid 5881] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5882] <... setpgid resumed>) = 0 [pid 5881] <... ioprio_set resumed>) = 0 [pid 5878] <... munmap resumed>) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5881] memfd_create("syzkaller", 0 [pid 5878] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5882] <... openat resumed>) = 3 [pid 5880] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5881] <... memfd_create resumed>) = 3 [pid 5880] bind(-1, NULL, 0 [pid 5878] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5882] write(3, "1000", 4 [pid 5878] close(5 [pid 5882] <... write resumed>) = 4 [pid 5880] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] close(3 [pid 5878] <... close resumed>) = 0 [pid 5882] <... close resumed>) = 0 [pid 5878] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 5882] symlink("/dev/binderfs", "./binderfs" [pid 5880] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5878] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 5882] <... symlink resumed>) = 0 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5880] <... socket resumed>) = 3 [pid 5878] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5881] <... mmap resumed>) = 0x7ffab8e00000 [pid 5880] memfd_create("syzkaller", 0 executing program [pid 5882] write(1, "executing program\n", 18 [pid 5881] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5880] <... memfd_create resumed>) = 4 [pid 5878] <... sched_setscheduler resumed>) = -1 EPERM (Operation not permitted) [pid 5882] <... write resumed>) = 18 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] ioctl(-1, AUTOFS_DEV_IOCTL_REQUESTER [pid 5880] <... mmap resumed>) = 0x7ffab8e00000 [pid 5878] getpid( [pid 5882] <... ioctl resumed>, 0x2000000002c0) = -1 EBADF (Bad file descriptor) [pid 5878] <... getpid resumed>) = 4 [pid 5882] ioprio_set(IOPRIO_WHO_USER, 0, IOPRIO_PRIO_VALUE(IOPRIO_CLASS_NONE, 0) [pid 5878] sched_setaffinity(0, 0, NULL [pid 5882] <... ioprio_set resumed>) = 0 [pid 5878] <... sched_setaffinity resumed>) = -1 EINVAL (Invalid argument) [pid 5878] openat(AT_FDCWD, "/dev/cpu/0/msr", O_RDONLY [ 89.013758][ T5880] loop2: detected capacity change from 0 to 256 [pid 5882] memfd_create("syzkaller", 0) = 3 [pid 5878] <... openat resumed>) = 5 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5881] <... write resumed>) = 131072 [pid 5878] read(5, [pid 5882] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072 [pid 5881] munmap(0x7ffab8e00000, 138412032 [pid 5882] <... write resumed>) = 131072 [pid 5881] <... munmap resumed>) = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5882] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5881] <... openat resumed>) = 4 [pid 5879] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5881] ioctl(4, LOOP_SET_FD, 3 [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5881] <... ioctl resumed>) = 0 [pid 5882] <... ioctl resumed>) = 0 [pid 5882] close(3 [pid 5881] close(3) = 0 [pid 5881] close(4 [pid 5882] <... close resumed>) = 0 [pid 5881] <... close resumed>) = 0 [pid 5882] close(4) = 0 [pid 5882] mkdir("./file0", 0777 [pid 5881] mkdir("./file0", 0777 [pid 5882] <... mkdir resumed>) = 0 [pid 5881] <... mkdir resumed>) = 0 [pid 5881] mount("/dev/loop0", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0 [pid 5882] mount("/dev/loop4", "./file0", 0x2000000000c0, MS_SHARED|MS_STRICTATIME, 0x7ffe29f678e0 [pid 5881] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5882] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5882] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5882] ioctl(3, LOOP_CLR_FD) = 0 [pid 5882] close(3) = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5882] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL [pid 5881] ioctl(3, LOOP_CLR_FD [pid 5879] <... write resumed>) = 2097152 [pid 5882] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5881] <... ioctl resumed>) = 0 [ 89.107117][ T5881] loop0: detected capacity change from 0 to 256 [ 89.114629][ T5882] loop4: detected capacity change from 0 to 256 [pid 5882] bind(-1, NULL, 0 [pid 5881] close(3 [pid 5882] <... bind resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5881] <... close resumed>) = 0 [pid 5881] mount("\xb2\x83\x87\x4a\x39\x49\xc3\x69\xe4\x81\xc5\x3a\xcc\x4c\x44\x9d\xd8\xc7\x90\x76\x8b", "./file0", NULL, MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_BIND|MS_MOVE|MS_SILENT|MS_POSIXACL|MS_UNBINDABLE|MS_RELATIME|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [pid 5881] bind(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5881] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */) [pid 5882] memfd_create("syzkaller", 0 [pid 5881] <... socket resumed>) = 3 [pid 5881] memfd_create("syzkaller", 0 [pid 5879] munmap(0x7ffab8e00000, 138412032 [pid 5881] <... memfd_create resumed>) = 4 [pid 5880] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5882] <... memfd_create resumed>) = 4 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffab8e00000 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5879] <... munmap resumed>) = 0 [pid 5882] <... mmap resumed>) = 0x7ffab8e00000 [pid 5879] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 5 [pid 5879] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5879] close(4) = 0 [pid 5879] close(5) = 0 [pid 5879] mkdir("./bus", 0777) = 0 [ 89.209165][ T5879] loop1: detected capacity change from 0 to 4096 [pid 5879] mount("/dev/loop1", "./bus", "ntfs3", 0, "" [pid 5882] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5880] <... write resumed>) = 2097152 [ 89.303606][ C0] ================================================================== [ 89.311730][ C0] BUG: KASAN: out-of-bounds in end_buffer_read_sync+0xc1/0xd0 [ 89.319259][ C0] Write of size 4 at addr ffffc9000418f660 by task kworker/u8:8/3480 [ 89.327347][ C0] [ 89.329712][ C0] CPU: 0 UID: 0 PID: 3480 Comm: kworker/u8:8 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 89.329731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.329741][ C0] Workqueue: loop1 loop_rootcg_workfn [ 89.329765][ C0] Call Trace: [ 89.329772][ C0] [ 89.329778][ C0] dump_stack_lvl+0x241/0x360 [ 89.329802][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.329823][ C0] ? __pfx__printk+0x10/0x10 [ 89.329843][ C0] ? _printk+0xd5/0x120 [ 89.329864][ C0] print_report+0x16e/0x5b0 [ 89.329886][ C0] ? __virt_addr_valid+0xbd/0x530 [ 89.329908][ C0] ? end_buffer_read_sync+0xc1/0xd0 [ 89.329922][ C0] kasan_report+0x143/0x180 [ 89.329941][ C0] ? wake_up_bit+0x154/0x1a0 [ 89.329964][ C0] ? end_buffer_read_sync+0xc1/0xd0 [ 89.329980][ C0] kasan_check_range+0x28f/0x2a0 [ 89.330002][ C0] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 89.330016][ C0] end_buffer_read_sync+0xc1/0xd0 [ 89.330029][ C0] end_bio_bh_io_sync+0xbf/0x120 [ 89.330049][ C0] blk_update_request+0x5e5/0x1160 [ 89.330077][ C0] blk_mq_end_request+0x3e/0x70 [ 89.330099][ C0] blk_done_softirq+0x100/0x150 [ 89.330120][ C0] handle_softirqs+0x2d6/0x9b0 [ 89.330139][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 89.330154][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 89.330168][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 89.330191][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 89.330205][ C0] __irq_exit_rcu+0xfb/0x220 [ 89.330220][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 89.330234][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 89.330255][ C0] ? rcu_is_watching+0x15/0xb0 [ 89.330276][ C0] irq_exit_rcu+0x9/0x30 [ 89.330289][ C0] sysvec_call_function_single+0xa3/0xc0 [ 89.330310][ C0] [ 89.330315][ C0] [ 89.330320][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 89.330339][ C0] RIP: 0010:raise_softirq+0x134/0x190 [ 89.330355][ C0] Code: 40 42 80 3c 2b 00 74 08 4c 89 f7 e8 b6 29 a9 00 f6 44 24 41 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 89.330367][ C0] RSP: 0018:ffffc9000c64f520 EFLAGS: 00000206 [ 89.330380][ C0] RAX: 6faedcbf23e1ed00 RBX: 1ffff920018c9eac RCX: 0000000000000006 [ 89.330391][ C0] RDX: 0000000000000006 RSI: ffffffff8e6a4c4b RDI: ffffffff8ca1e060 [ 89.330401][ C0] RBP: ffffc9000c64f5e8 R08: ffffffff905ffd37 R09: 1ffffffff20bffa6 [ 89.330412][ C0] R10: dffffc0000000000 R11: fffffbfff20bffa7 R12: 0000000000000246 [ 89.330422][ C0] R13: dffffc0000000000 R14: ffffc9000c64f560 R15: 1ffff920018c9ea8 [ 89.330442][ C0] ? __pfx_raise_softirq+0x10/0x10 [ 89.330457][ C0] ? __pfx_llist_add_batch+0x10/0x10 [ 89.330484][ C0] ? __pfx___might_resched+0x10/0x10 [ 89.330505][ C0] blk_mq_complete_request_remote+0x541/0x740 [ 89.330530][ C0] blk_mq_complete_request+0x19/0xa0 [ 89.330553][ C0] loop_process_work+0x1bdf/0x21d0 [ 89.330582][ C0] ? __pfx_loop_process_work+0x10/0x10 [ 89.330598][ C0] ? xfd_validate_state+0x6e/0x150 [ 89.330618][ C0] ? __lock_acquire+0xad5/0xd80 [ 89.330635][ C0] ? do_raw_spin_lock+0x151/0x370 [ 89.330659][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 89.330683][ C0] ? look_up_lock_class+0x7b/0x170 [ 89.330701][ C0] ? register_lock_class+0x54/0x330 [ 89.330716][ C0] ? irqentry_exit+0x63/0x90 [ 89.330735][ C0] ? __lock_acquire+0xad5/0xd80 [ 89.330759][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 89.330776][ C0] process_scheduled_works+0xac3/0x18e0 [ 89.330803][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.330823][ C0] ? assign_work+0x367/0x3d0 [ 89.330841][ C0] worker_thread+0x870/0xd50 [ 89.330864][ C0] ? __kthread_parkme+0x1a8/0x200 [ 89.330884][ C0] ? __pfx_worker_thread+0x10/0x10 [ 89.330901][ C0] kthread+0x7b7/0x940 [ 89.330922][ C0] ? __pfx_worker_thread+0x10/0x10 [ 89.330940][ C0] ? __pfx_kthread+0x10/0x10 [ 89.330959][ C0] ? __pfx_kthread+0x10/0x10 [ 89.330978][ C0] ? __pfx_kthread+0x10/0x10 [ 89.330998][ C0] ? __pfx_kthread+0x10/0x10 [ 89.331018][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.331033][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 89.331050][ C0] ? __pfx_kthread+0x10/0x10 [ 89.331070][ C0] ret_from_fork+0x4b/0x80 [ 89.331085][ C0] ? __pfx_kthread+0x10/0x10 [ 89.331105][ C0] ret_from_fork_asm+0x1a/0x30 [ 89.331125][ C0] [ 89.331130][ C0] [ 89.760208][ C0] The buggy address belongs to the virtual mapping at [ 89.760208][ C0] [ffffc90004188000, ffffc90004191000) created by: [ 89.760208][ C0] copy_process+0x5dc/0x3d10 [ 89.777830][ C0] [ 89.780168][ C0] The buggy address belongs to the physical page: [ 89.786575][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1ab pfn:0x266e3 [ 89.795509][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.802620][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 89.811201][ C0] raw: 00000000000001ab 0000000000000000 00000001ffffffff 0000000000000000 [ 89.819780][ C0] page dumped because: kasan: bad access detected [ 89.826188][ C0] page_owner tracks the page as allocated [ 89.831893][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5847, tgid 5847 (syz-executor298), ts 88849194618, free_ts 88820484059 [ 89.851349][ C0] post_alloc_hook+0x1f4/0x240 [ 89.856122][ C0] get_page_from_freelist+0x356d/0x3700 [ 89.861692][ C0] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 89.867512][ C0] alloc_pages_mpol+0x339/0x690 [ 89.872375][ C0] alloc_pages_noprof+0x121/0x190 [ 89.877409][ C0] __vmalloc_node_range_noprof+0x9cb/0x1390 [ 89.883305][ C0] __vmalloc_node_noprof+0x80/0xa0 [ 89.888417][ C0] dup_task_struct+0x3f7/0x870 [ 89.893178][ C0] copy_process+0x5dc/0x3d10 [ 89.897762][ C0] kernel_clone+0x242/0x930 [ 89.902274][ C0] __x64_sys_clone+0x268/0x2e0 [ 89.907031][ C0] do_syscall_64+0xf3/0x230 [ 89.911587][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.917503][ C0] page last free pid 5849 tgid 5849 stack trace: [ 89.923851][ C0] free_unref_folios+0xe0e/0x17f0 [ 89.928890][ C0] folios_put_refs+0x70a/0x800 [ 89.933651][ C0] truncate_inode_pages_range+0x462/0x10e0 [ 89.939450][ C0] blkdev_flush_mapping+0x108/0x270 [ 89.944659][ C0] bdev_release+0x460/0x700 [ 89.949185][ C0] blkdev_release+0x15/0x20 [ 89.953705][ C0] __fput+0x3e9/0x9f0 [ 89.957680][ C0] task_work_run+0x251/0x310 [ 89.962278][ C0] ptrace_notify+0x2dc/0x390 [ 89.966863][ C0] syscall_exit_work+0xc7/0x1d0 [ 89.971745][ C0] syscall_exit_to_user_mode+0x24a/0x340 [ 89.977387][ C0] do_syscall_64+0x100/0x230 [ 89.981987][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.987890][ C0] [ 89.990207][ C0] Memory state around the buggy address: [ 89.995834][ C0] ffffc9000418f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.003920][ C0] ffffc9000418f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.011985][ C0] >ffffc9000418f600: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 90.020039][ C0] ^ [ 90.027494][ C0] ffffc9000418f680: 00 00 00 f2 f2 f2 f2 f2 00 f2 f2 f2 01 f3 f3 f3 [ 90.035571][ C0] ffffc9000418f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.043637][ C0] ================================================================== [pid 5880] munmap(0x7ffab8e00000, 138412032 [pid 5881] write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x08\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x51\x49\x92\x54\x8e\xa5\x9a\x39\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5882] <... write resumed>) = 2097152 [pid 5880] <... munmap resumed>) = 0 [pid 5882] munmap(0x7ffab8e00000, 138412032) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 5 [pid 5882] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5882] close(4) = 0 [pid 5882] close(5 [pid 5880] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5882] <... close resumed>) = 0 [pid 5880] <... openat resumed>) = 5 [pid 5882] mkdir("./bus", 0777) = 0 [pid 5882] mount("/dev/loop4", "./bus", "ntfs3", 0, "" [pid 5880] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5880] close(4) = 0 [pid 5880] close(5) = 0 [ 90.051882][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.059126][ C0] CPU: 0 UID: 0 PID: 3480 Comm: kworker/u8:8 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 90.070533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.080633][ C0] Workqueue: loop1 loop_rootcg_workfn [ 90.086060][ C0] Call Trace: [ 90.089370][ C0] [ 90.092241][ C0] dump_stack_lvl+0x241/0x360 [ 90.096997][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.102241][ C0] ? __pfx__printk+0x10/0x10 [ 90.106872][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 90.112162][ C0] ? vscnprintf+0x5d/0x90 [ 90.116525][ C0] panic+0x349/0x880 [ 90.120463][ C0] ? check_panic_on_warn+0x21/0xb0 [ 90.125615][ C0] ? __pfx_panic+0x10/0x10 [ 90.130150][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x140 [ 90.136075][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 90.142010][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.148377][ C0] ? print_report+0x519/0x5b0 [ 90.153092][ C0] check_panic_on_warn+0x86/0xb0 [ 90.158102][ C0] ? end_buffer_read_sync+0xc1/0xd0 [ 90.163311][ C0] end_report+0x77/0x160 [ 90.167569][ C0] kasan_report+0x154/0x180 [ 90.172081][ C0] ? wake_up_bit+0x154/0x1a0 [ 90.176694][ C0] ? end_buffer_read_sync+0xc1/0xd0 [ 90.181897][ C0] kasan_check_range+0x28f/0x2a0 [ 90.186855][ C0] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 90.192575][ C0] end_buffer_read_sync+0xc1/0xd0 [ 90.197597][ C0] end_bio_bh_io_sync+0xbf/0x120 [ 90.202543][ C0] blk_update_request+0x5e5/0x1160 [ 90.207672][ C0] blk_mq_end_request+0x3e/0x70 [ 90.212535][ C0] blk_done_softirq+0x100/0x150 [ 90.217391][ C0] handle_softirqs+0x2d6/0x9b0 [ 90.222162][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 90.226929][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 90.232214][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 90.238116][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 90.243316][ C0] __irq_exit_rcu+0xfb/0x220 [ 90.247910][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 90.253144][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 90.258784][ C0] ? rcu_is_watching+0x15/0xb0 [ 90.263555][ C0] irq_exit_rcu+0x9/0x30 [ 90.267799][ C0] sysvec_call_function_single+0xa3/0xc0 [ 90.273436][ C0] [ 90.276372][ C0] [ 90.279304][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 90.285290][ C0] RIP: 0010:raise_softirq+0x134/0x190 [ 90.290665][ C0] Code: 40 42 80 3c 2b 00 74 08 4c 89 f7 e8 b6 29 a9 00 f6 44 24 41 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 90.310269][ C0] RSP: 0018:ffffc9000c64f520 EFLAGS: 00000206 [ 90.316344][ C0] RAX: 6faedcbf23e1ed00 RBX: 1ffff920018c9eac RCX: 0000000000000006 [ 90.324326][ C0] RDX: 0000000000000006 RSI: ffffffff8e6a4c4b RDI: ffffffff8ca1e060 [ 90.332303][ C0] RBP: ffffc9000c64f5e8 R08: ffffffff905ffd37 R09: 1ffffffff20bffa6 [ 90.340279][ C0] R10: dffffc0000000000 R11: fffffbfff20bffa7 R12: 0000000000000246 [ 90.348252][ C0] R13: dffffc0000000000 R14: ffffc9000c64f560 R15: 1ffff920018c9ea8 [ 90.356236][ C0] ? __pfx_raise_softirq+0x10/0x10 [ 90.361352][ C0] ? __pfx_llist_add_batch+0x10/0x10 [ 90.366645][ C0] ? __pfx___might_resched+0x10/0x10 [ 90.371936][ C0] blk_mq_complete_request_remote+0x541/0x740 [ 90.378019][ C0] blk_mq_complete_request+0x19/0xa0 [ 90.383331][ C0] loop_process_work+0x1bdf/0x21d0 [ 90.388458][ C0] ? __pfx_loop_process_work+0x10/0x10 [ 90.393921][ C0] ? xfd_validate_state+0x6e/0x150 [ 90.399125][ C0] ? __lock_acquire+0xad5/0xd80 [ 90.403977][ C0] ? do_raw_spin_lock+0x151/0x370 [ 90.409012][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 90.414221][ C0] ? look_up_lock_class+0x7b/0x170 [ 90.419338][ C0] ? register_lock_class+0x54/0x330 [ 90.424537][ C0] ? irqentry_exit+0x63/0x90 [ 90.429135][ C0] ? __lock_acquire+0xad5/0xd80 [ 90.433994][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 90.439715][ C0] process_scheduled_works+0xac3/0x18e0 [ 90.445278][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.451266][ C0] ? assign_work+0x367/0x3d0 [ 90.455861][ C0] worker_thread+0x870/0xd50 [ 90.460461][ C0] ? __kthread_parkme+0x1a8/0x200 [ 90.465497][ C0] ? __pfx_worker_thread+0x10/0x10 [ 90.470615][ C0] kthread+0x7b7/0x940 [ 90.474695][ C0] ? __pfx_worker_thread+0x10/0x10 [ 90.479900][ C0] ? __pfx_kthread+0x10/0x10 [ 90.484495][ C0] ? __pfx_kthread+0x10/0x10 [ 90.489090][ C0] ? __pfx_kthread+0x10/0x10 [ 90.493700][ C0] ? __pfx_kthread+0x10/0x10 [ 90.498317][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.503516][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 90.508717][ C0] ? __pfx_kthread+0x10/0x10 [ 90.513314][ C0] ret_from_fork+0x4b/0x80 [ 90.517732][ C0] ? __pfx_kthread+0x10/0x10 [ 90.522333][ C0] ret_from_fork_asm+0x1a/0x30 [ 90.527104][ C0] [ 90.530269][ C0] Kernel Offset: disabled [ 90.534615][ C0] Rebooting in 86400 seconds..