./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2149587901 <...> forked to background, child pid 4642 no interfaces have a carrier [ 29.440062][ T4643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.449410][ T4643] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. execve("./syz-executor2149587901", ["./syz-executor2149587901"], 0x7ffc0cc37310 /* 10 vars */) = 0 brk(NULL) = 0x5555558b6000 brk(0x5555558b6c40) = 0x5555558b6c40 arch_prctl(ARCH_SET_FS, 0x5555558b6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555558b65d0) = 5068 set_robust_list(0x5555558b65e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fe8fc302510, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fe8fc302be0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fe8fc3025b0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fe8fc302be0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2149587901", 4096) = 28 brk(0x5555558d7c40) = 0x5555558d7c40 brk(0x5555558d8000) = 0x5555558d8000 mprotect(0x7fe8fc3c5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5069 attached , child_tidptr=0x5555558b65d0) = 5069 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] set_robust_list(0x5555558b65e0, 24./strace-static-x86_64: Process 5070 attached [pid 5068] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5070 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... set_robust_list resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5071 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5072 [pid 5070] set_robust_list(0x5555558b65e0, 24 [pid 5069] getpid(./strace-static-x86_64: Process 5071 attached [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached ./strace-static-x86_64: Process 5073 attached [pid 5070] <... set_robust_list resumed>) = 0 [pid 5069] <... getpid resumed>) = 5069 [pid 5068] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5073 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] set_robust_list(0x5555558b65e0, 24 [pid 5070] getpid( [pid 5068] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5074 [pid 5069] mkdir("./syzkaller.pXiFav", 0700 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5073] getpid() = 5073 [pid 5073] mkdir("./syzkaller.kSEdvM", 0700) = 0 ./strace-static-x86_64: Process 5074 attached [pid 5074] set_robust_list(0x5555558b65e0, 24 [pid 5073] chmod("./syzkaller.kSEdvM", 0777) = 0 [pid 5070] <... getpid resumed>) = 5070 [pid 5069] <... mkdir resumed>) = 0 [pid 5074] <... set_robust_list resumed>) = 0 [pid 5074] getpid( [pid 5070] mkdir("./syzkaller.RlmWgA", 0700 [pid 5069] chmod("./syzkaller.pXiFav", 0777 [pid 5073] chdir("./syzkaller.kSEdvM") = 0 [pid 5073] mkdir("./0", 0777) = 0 [pid 5074] <... getpid resumed>) = 5074 [pid 5074] mkdir("./syzkaller.KsgJcQ", 0700) = 0 [pid 5071] set_robust_list(0x5555558b65e0, 24 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] <... chmod resumed>) = 0 [pid 5070] chmod("./syzkaller.RlmWgA", 0777 [pid 5069] chdir("./syzkaller.pXiFav" [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5070] <... chmod resumed>) = 0 [pid 5069] <... chdir resumed>) = 0 [pid 5074] chmod("./syzkaller.KsgJcQ", 0777) = 0 [pid 5074] chdir("./syzkaller.KsgJcQ") = 0 [pid 5074] mkdir("./0", 0777) = 0 [pid 5070] chdir("./syzkaller.RlmWgA" [pid 5069] mkdir("./0", 0777 [pid 5072] set_robust_list(0x5555558b65e0, 24 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] mkdir("./0", 0777 [pid 5069] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] getpid( [pid 5070] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] getpid( [pid 5071] <... getpid resumed>) = 5071 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... getpid resumed>) = 5072 [pid 5071] mkdir("./syzkaller.v0xNkE", 0700 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5075 [pid 5072] mkdir("./syzkaller.h7QRjJ", 0700 [pid 5071] <... mkdir resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5075 attached [pid 5074] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] chmod("./syzkaller.v0xNkE", 0777 [pid 5070] close(3 [pid 5069] close(3 [pid 5075] set_robust_list(0x5555558b65e0, 24 [pid 5074] <... close resumed>) = 0 [pid 5072] chmod("./syzkaller.h7QRjJ", 0777 [pid 5071] <... chmod resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5075] <... set_robust_list resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... chmod resumed>) = 0 [pid 5071] chdir("./syzkaller.v0xNkE" [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] chdir("./0" [pid 5072] chdir("./syzkaller.h7QRjJ" [pid 5071] <... chdir resumed>) = 0 [pid 5075] <... chdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5077 [pid 5072] <... chdir resumed>) = 0 [pid 5071] mkdir("./0", 0777 [pid 5070] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5078 [pid 5069] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5079 ./strace-static-x86_64: Process 5077 attached [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] mkdir("./0", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 5077] set_robust_list(0x5555558b65e0, 24 [pid 5075] <... prctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5078 attached [pid 5077] <... set_robust_list resumed>) = 0 [pid 5075] setpgid(0, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5079 attached [pid 5078] set_robust_list(0x5555558b65e0, 24 [pid 5077] chdir("./0" [pid 5075] <... setpgid resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... chdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] set_robust_list(0x5555558b65e0, 24 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] chdir("./0" [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... openat resumed>) = 3 [pid 5072] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5071] close(3 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] <... chdir resumed>) = 0 [pid 5077] <... prctl resumed>) = 0 [pid 5075] write(3, "1000", 4 [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 5079] chdir("./0" [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] setpgid(0, 0 [pid 5075] <... write resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... chdir resumed>) = 0 [pid 5078] <... prctl resumed>) = 0 [pid 5077] <... setpgid resumed>) = 0 [pid 5075] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] setpgid(0, 0 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5080 [pid 5079] <... prctl resumed>) = 0 [pid 5078] <... setpgid resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5081 [pid 5079] setpgid(0, 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] write(3, "1000", 4 [pid 5075] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5081 attached [pid 5079] <... setpgid resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... write resumed>) = 4 [pid 5075] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] set_robust_list(0x5555558b65e0, 24 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] write(3, "1000", 4 [pid 5077] close(3 [pid 5075] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5080 attached [pid 5081] <... set_robust_list resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... write resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] chdir("./0" [pid 5080] set_robust_list(0x5555558b65e0, 24 [pid 5079] write(3, "1000", 4 [pid 5078] close(3 [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5081] <... chdir resumed>) = 0 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5079] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5077] <... symlink resumed>) = 0 [pid 5075] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] chdir("./0" [pid 5079] close(3 [pid 5078] symlink("/dev/binderfs", "./binderfs" [pid 5077] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mprotect resumed>) = 0 [pid 5081] <... prctl resumed>) = 0 [pid 5080] <... chdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] <... futex resumed>) = 0 [pid 5075] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] setpgid(0, 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... symlink resumed>) = 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... setpgid resumed>) = 0 [pid 5080] <... prctl resumed>) = 0 [pid 5078] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5075] <... clone resumed>, parent_tid=[5082], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5082 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] setpgid(0, 0 [pid 5079] <... symlink resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5077] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5075] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5082 attached [pid 5081] <... openat resumed>) = 3 [pid 5080] <... setpgid resumed>) = 0 [pid 5079] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... mprotect resumed>) = 0 [pid 5075] <... futex resumed>) = 0 [pid 5082] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5081] write(3, "1000", 4 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... futex resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5075] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5082] <... set_robust_list resumed>) = 0 [pid 5081] <... write resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5082] memfd_create("syzkaller", 0 [pid 5081] close(3 [pid 5080] write(3, "1000", 4 [pid 5079] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5078] <... mprotect resumed>) = 0 [pid 5082] <... memfd_create resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5080] <... write resumed>) = 4 [pid 5079] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5078] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... clone resumed>, parent_tid=[5083], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5083 [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] symlink("/dev/binderfs", "./binderfs" [pid 5080] close(3 [pid 5079] <... mprotect resumed>) = 0 [pid 5077] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5081] <... symlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... clone resumed>, parent_tid=[5084], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5084 [pid 5077] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5083 attached [pid 5081] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5085 attached ./strace-static-x86_64: Process 5084 attached [pid 5083] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5081] <... futex resumed>) = 0 [pid 5080] <... symlink resumed>) = 0 [pid 5079] <... clone resumed>, parent_tid=[5085], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5085 [pid 5078] <... futex resumed>) = 0 [pid 5085] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5084] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... set_robust_list resumed>) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5083] memfd_create("syzkaller", 0 [pid 5081] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5080] <... futex resumed>) = 0 [pid 5085] memfd_create("syzkaller", 0 [pid 5083] <... memfd_create resumed>) = 3 [pid 5081] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... futex resumed>) = 0 [pid 5085] <... memfd_create resumed>) = 3 [pid 5084] memfd_create("syzkaller", 0 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... mprotect resumed>) = 0 [pid 5080] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5079] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... memfd_create resumed>) = 3 [pid 5083] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5081] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... mprotect resumed>) = 0 [pid 5081] <... clone resumed>, parent_tid=[5086], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5086 [pid 5080] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] <... clone resumed>, parent_tid=[5087], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5087 [pid 5081] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... mmap resumed>) = 0x7fe8f3ed1000 ./strace-static-x86_64: Process 5087 attached [pid 5087] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5087] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5086 attached [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5086] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5086] memfd_create("syzkaller", 0) = 3 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5082] <... write resumed>) = 4194304 [pid 5086] <... write resumed>) = 4194304 [pid 5085] <... write resumed>) = 4194304 [pid 5084] <... write resumed>) = 4194304 [pid 5083] <... write resumed>) = 4194304 [pid 5082] munmap(0x7fe8f3ed1000, 4194304 [pid 5087] <... write resumed>) = 4194304 [pid 5086] munmap(0x7fe8f3ed1000, 4194304 [pid 5085] munmap(0x7fe8f3ed1000, 4194304 [pid 5083] munmap(0x7fe8f3ed1000, 4194304 [pid 5082] <... munmap resumed>) = 0 [pid 5085] <... munmap resumed>) = 0 [pid 5083] <... munmap resumed>) = 0 [pid 5086] <... munmap resumed>) = 0 [pid 5087] munmap(0x7fe8f3ed1000, 4194304 [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] munmap(0x7fe8f3ed1000, 4194304 [pid 5083] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5082] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5086] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5087] <... munmap resumed>) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 4 [pid 5082] <... openat resumed>) = 4 [pid 5087] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5086] <... openat resumed>) = 4 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5083] ioctl(4, LOOP_SET_FD, 3 [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... openat resumed>) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... munmap resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3) = 0 [pid 5087] mkdir("./file0", 0777) = 0 [pid 5087] mount("/dev/loop2", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5086] <... ioctl resumed>) = 0 [pid 5085] close(3 [pid 5083] <... ioctl resumed>) = 0 [pid 5086] close(3 [pid 5085] <... close resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] close(3 [pid 5082] <... ioctl resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5085] mkdir("./file0", 0777 [pid 5084] close(3 [pid 5083] <... close resumed>) = 0 [pid 5082] close(3 [pid 5086] mkdir("./file0", 0777 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] mkdir("./file0", 0777 [pid 5082] <... close resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5085] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "" syzkaller login: [ 52.105812][ T5085] loop0: detected capacity change from 0 to 8192 [ 52.108183][ T5087] loop2: detected capacity change from 0 to 8192 [ 52.112693][ T5083] loop5: detected capacity change from 0 to 8192 [ 52.123826][ T5084] loop1: detected capacity change from 0 to 8192 [ 52.125734][ T5082] loop4: detected capacity change from 0 to 8192 [ 52.138451][ T5086] loop3: detected capacity change from 0 to 8192 [pid 5084] mkdir("./file0", 0777 [pid 5083] <... mkdir resumed>) = 0 [pid 5082] mkdir("./file0", 0777 [pid 5086] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5084] <... mkdir resumed>) = 0 [pid 5083] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5082] <... mkdir resumed>) = 0 [pid 5084] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [ 52.152515][ T5087] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.161971][ T5084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.166239][ T5085] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.179027][ T5084] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 52.179253][ T5084] REISERFS (device loop1): using ordered data mode [ 52.201860][ T5082] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.208019][ T5084] reiserfs: using flush barriers [ 52.221140][ T5086] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.226331][ T5087] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 52.239375][ T5083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.248762][ T5087] REISERFS (device loop2): using ordered data mode [ 52.262608][ T5086] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 52.277259][ T5087] reiserfs: using flush barriers [ 52.277787][ T5084] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.283551][ T5087] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.298592][ T5083] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 52.315031][ T5085] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 52.324432][ T5086] REISERFS (device loop3): using ordered data mode [ 52.333541][ T5082] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 52.340280][ T5084] REISERFS (device loop1): checking transaction log (loop1) [ 52.349511][ T5082] REISERFS (device loop4): using ordered data mode [ 52.356392][ T5083] REISERFS (device loop5): using ordered data mode [ 52.363203][ T5085] REISERFS (device loop0): using ordered data mode [ 52.369640][ T5086] reiserfs: using flush barriers [ 52.376685][ T5087] REISERFS (device loop2): checking transaction log (loop2) [ 52.385052][ T5083] reiserfs: using flush barriers [ 52.394771][ T5082] reiserfs: using flush barriers [ 52.395483][ T5086] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.401157][ T5082] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.419432][ T5086] REISERFS (device loop3): checking transaction log (loop3) [ 52.435107][ T5085] reiserfs: using flush barriers [ 52.444267][ T5083] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.474579][ T5085] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.479973][ T5083] REISERFS (device loop5): checking transaction log (loop5) [ 52.551070][ T5085] REISERFS (device loop0): checking transaction log (loop0) [ 52.556022][ T5082] REISERFS (device loop4): checking transaction log (loop4) [ 52.569765][ T5084] REISERFS (device loop1): Using r5 hash to sort names [ 52.583653][ T5084] REISERFS (device loop1): using 3.5.x disk format [ 52.597952][ T5086] REISERFS (device loop3): Using r5 hash to sort names [ 52.612651][ T5084] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 52.626942][ T5086] REISERFS (device loop3): using 3.5.x disk format [ 52.631052][ T5087] REISERFS (device loop2): Using r5 hash to sort names [ 52.636539][ T5086] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5082] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5086] <... mount resumed>) = 0 [pid 5084] <... mount resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5086] chdir("./file0" [pid 5084] chdir("./file0" [pid 5086] <... chdir resumed>) = 0 [pid 5084] <... chdir resumed>) = 0 [pid 5086] ioctl(4, LOOP_CLR_FD [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5086] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5086] close(4 [pid 5084] close(4 [pid 5086] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5086] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 1 [pid 5084] <... futex resumed>) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5086] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [ 52.660134][ T5087] REISERFS (device loop2): using 3.5.x disk format [pid 5086] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5081] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 52.712302][ T5082] REISERFS (device loop4): Using r5 hash to sort names [ 52.712303][ T5083] REISERFS (device loop5): Using r5 hash to sort names [ 52.712328][ T5083] REISERFS (device loop5): using 3.5.x disk format [ 52.726236][ T5082] REISERFS (device loop4): using 3.5.x disk format [ 52.726422][ T5082] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... open resumed>) = 4 [pid 5084] <... open resumed>) = 4 [pid 5086] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 1 [pid 5084] <... futex resumed>) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5086] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5086] openat(-1, "/proc/self/exe", O_RDONLY [pid 5081] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... openat resumed>) = 5 [pid 5078] <... futex resumed>) = 0 [pid 5086] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5086] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5086] sendfile(4, 5, NULL, 140737974943952 [pid 5081] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5087] <... mount resumed>) = 0 [pid 5082] <... mount resumed>) = 0 [pid 5078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... mount resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 52.751174][ T27] audit: type=1800 audit(1671282276.153:2): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 52.753030][ T5087] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 52.779208][ T5083] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5083] chdir("./file0") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [pid 5084] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5084] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5084] sendfile(4, 5, NULL, 140737974943952 [pid 5078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5082] <... openat resumed>) = 3 [pid 5087] <... openat resumed>) = 3 [pid 5082] chdir("./file0" [pid 5087] chdir("./file0" [pid 5082] <... chdir resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5082] ioctl(4, LOOP_CLR_FD [pid 5087] ioctl(4, LOOP_CLR_FD) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5087] close(4 [pid 5082] close(4) = 0 [pid 5083] close(4) = 0 [pid 5083] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5077] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... close resumed>) = 0 [pid 5083] <... open resumed>) = 4 [pid 5082] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [ 52.805991][ T27] audit: type=1800 audit(1671282276.153:3): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop1" ino=2 res=0 errno=0 [pid 5087] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 1 [pid 5077] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 1 [pid 5082] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... futex resumed>) = 0 [pid 5087] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... futex resumed>) = 0 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5080] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... open resumed>) = 4 [pid 5083] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... futex resumed>) = 0 [pid 5087] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 1 [pid 5081] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5075] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 1 [pid 5083] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... futex resumed>) = 0 [pid 5087] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = 0 [pid 5081] <... futex resumed>) = 0 [pid 5080] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5077] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] openat(-1, "/proc/self/exe", O_RDONLY [pid 5082] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... futex resumed>) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... futex resumed>) = 0 [pid 5075] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] openat(-1, "/proc/self/exe", O_RDONLY [pid 5083] <... openat resumed>) = 5 [pid 5082] <... open resumed>) = 4 [pid 5081] <... mmap resumed>) = 0x7fe8f42b0000 [ 52.849554][ T27] audit: type=1800 audit(1671282276.253:4): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop5" ino=2 res=0 errno=0 [ 52.852628][ T5085] REISERFS (device loop0): Using r5 hash to sort names [ 52.873689][ T27] audit: type=1800 audit(1671282276.283:5): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop2" ino=2 res=0 errno=0 [pid 5080] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5077] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... openat resumed>) = 5 [pid 5083] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 1 [pid 5083] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... futex resumed>) = 0 [pid 5087] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... futex resumed>) = 0 [pid 5078] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... futex resumed>) = 0 [pid 5087] sendfile(4, 5, NULL, 140737974943952 [pid 5080] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... mprotect resumed>) = 0 [pid 5078] <... mprotect resumed>) = 0 [pid 5077] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... futex resumed>) = 1 [pid 5075] <... futex resumed>) = 1 ./strace-static-x86_64: Process 5097 attached ./strace-static-x86_64: Process 5096 attached [pid 5083] <... futex resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5077] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] set_robust_list(0x7fe8f42d09e0, 24 [pid 5096] set_robust_list(0x7fe8f42d09e0, 24 [pid 5081] <... clone resumed>, parent_tid=[5097], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5097 [pid 5078] <... clone resumed>, parent_tid=[5096], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5096 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5081] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] open("./bus", O_RDONLY [pid 5096] open("./bus", O_RDONLY [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5081] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5083] sendfile(4, 5, NULL, 140737974943952 [pid 5082] openat(-1, "/proc/self/exe", O_RDONLY [pid 5081] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] chdir("./file0" [pid 5082] <... openat resumed>) = 5 [pid 5078] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... chdir resumed>) = 0 [pid 5082] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] ioctl(4, LOOP_CLR_FD [pid 5082] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... futex resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5075] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] close(4 [pid 5075] <... futex resumed>) = 1 [pid 5085] <... close resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5082] sendfile(4, 5, NULL, 140737974943952 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5080] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5075] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mprotect resumed>) = 0 [ 52.932277][ T5085] REISERFS (device loop0): using 3.5.x disk format [ 52.939650][ T5085] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 52.947260][ T27] audit: type=1800 audit(1671282276.333:6): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5085] <... futex resumed>) = 1 [pid 5080] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... futex resumed>) = 0 [pid 5085] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... futex resumed>) = 0 [pid 5085] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5079] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5098 attached [pid 5085] <... open resumed>) = 4 [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] set_robust_list(0x7fe8f42d09e0, 24 [pid 5085] <... futex resumed>) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5080] <... clone resumed>, parent_tid=[5098], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5098 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5077] <... futex resumed>) = 0 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5085] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5098] open("./bus", O_RDONLY [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... mmap resumed>) = 0x7fe8f428f000 [pid 5080] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... mmap resumed>) = 0x7fe8f428f000 [pid 5077] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5085] openat(-1, "/proc/self/exe", O_RDONLY [pid 5081] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... futex resumed>) = 0 [pid 5079] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5077] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... openat resumed>) = 5 [pid 5081] <... mprotect resumed>) = 0 [pid 5080] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... mprotect resumed>) = 0 [pid 5077] <... mprotect resumed>) = 0 [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 1 [pid 5079] <... futex resumed>) = 0 [ 53.003537][ T27] audit: type=1800 audit(1671282276.403:7): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop0" ino=2 res=0 errno=0 [pid 5075] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5101 attached ./strace-static-x86_64: Process 5100 attached ./strace-static-x86_64: Process 5099 attached [pid 5085] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... clone resumed>, parent_tid=[5099], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5099 [pid 5079] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... clone resumed>, parent_tid=[5100], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5100 [pid 5077] <... clone resumed>, parent_tid=[5101], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5101 [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5101] set_robust_list(0x7fe8f42d09e0, 24 [pid 5100] set_robust_list(0x7fe8f42af9e0, 24 [pid 5099] set_robust_list(0x7fe8f42af9e0, 24 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5078] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5085] sendfile(4, 5, NULL, 140737974943952 [pid 5081] <... futex resumed>) = 0 [pid 5079] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... futex resumed>) = 0 [pid 5077] <... futex resumed>) = 0 [pid 5075] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5101] open("./bus", O_RDONLY [pid 5100] truncate("./bus", 6 [pid 5099] truncate("./bus", 6 [pid 5081] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... mprotect resumed>) = 0 [pid 5075] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5102], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5102 ./strace-static-x86_64: Process 5102 attached [pid 5075] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5102] open("./bus", O_RDONLY [pid 5075] <... futex resumed>) = 0 [pid 5075] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5080] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5103], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5103 [pid 5080] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5103] truncate("./bus", 6 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5079] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... mprotect resumed>) = 0 [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... clone resumed>, parent_tid=[5104], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5104 [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mmap resumed>) = 0x7fe8f428f000 [pid 5075] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 0 [pid 5077] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... mprotect resumed>) = 0 [pid 5075] <... mmap resumed>) = 0x7fe8f428f000 ./strace-static-x86_64: Process 5104 attached [pid 5077] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5105 attached [pid 5104] set_robust_list(0x7fe8f42d09e0, 24 [pid 5075] <... mprotect resumed>) = 0 [pid 5104] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, parent_tid=[5105], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5105 [pid 5075] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5104] open("./bus", O_RDONLY [pid 5077] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] set_robust_list(0x7fe8f42af9e0, 24 [pid 5077] <... futex resumed>) = 0 [pid 5075] <... clone resumed>, parent_tid=[5106], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5106 [pid 5077] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5106] truncate("./bus", 6 [pid 5105] <... set_robust_list resumed>) = 0 [pid 5105] truncate("./bus", 6 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5079] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... clone resumed>, parent_tid=[5107], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5107 [pid 5079] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5107 attached ) = 0 [pid 5107] set_robust_list(0x7fe8f42af9e0, 24 [pid 5079] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... set_robust_list resumed>) = 0 [pid 5099] <... truncate resumed>) = 0 [pid 5097] <... open resumed>) = 6 [pid 5099] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5097] <... futex resumed>) = 0 [pid 5099] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] truncate("./bus", 6 [pid 5079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 53.207870][ T27] audit: type=1804 audit(1671282276.613:8): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.h7QRjJ/0/file0/bus" dev="loop3" ino=2 res=1 errno=0 [ 53.231171][ T27] audit: type=1800 audit(1671282276.613:9): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop3" ino=2 res=0 errno=0 [pid 5100] <... truncate resumed>) = 0 [pid 5096] <... open resumed>) = 6 [pid 5100] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5096] <... futex resumed>) = 0 [pid 5100] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 53.267909][ T27] audit: type=1804 audit(1671282276.673:10): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.RlmWgA/0/file0/bus" dev="loop1" ino=2 res=1 errno=0 [ 53.312265][ T27] audit: type=1800 audit(1671282276.673:11): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop1" ino=2 res=0 errno=0 [pid 5096] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] <... truncate resumed>) = 0 [pid 5105] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... open resumed>) = 6 [pid 5105] <... futex resumed>) = 0 [pid 5101] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] <... futex resumed>) = 0 [pid 5101] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... truncate resumed>) = 0 [pid 5102] <... open resumed>) = 6 [pid 5106] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5102] <... futex resumed>) = 0 [pid 5106] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] exit_group(0 [pid 5100] <... futex resumed>) = ? [pid 5096] <... futex resumed>) = ? [pid 5078] <... exit_group resumed>) = ? [pid 5100] +++ exited with 0 +++ [pid 5096] +++ exited with 0 +++ [pid 5081] exit_group(0 [pid 5099] <... futex resumed>) = ? [pid 5097] <... futex resumed>) = ? [pid 5081] <... exit_group resumed>) = ? [pid 5099] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ [pid 5084] <... sendfile resumed>) = ? [pid 5080] exit_group(0) = ? [pid 5104] <... open resumed>) = 6 [pid 5084] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ [pid 5104] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5086] <... sendfile resumed>) = ? [pid 5086] +++ exited with 0 +++ [pid 5081] +++ exited with 0 +++ [pid 5107] <... truncate resumed>) = 0 [pid 5070] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5070] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5107] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5107] <... futex resumed>) = 0 [pid 5070] fstat(3, [pid 5107] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] fstat(3, [pid 5070] lstat("./0/binderfs", [pid 5072] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] getdents64(3, [pid 5070] unlink("./0/binderfs" [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] <... unlink resumed>) = 0 [pid 5072] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./0/binderfs") = 0 [pid 5072] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 53.473981][ T5084] syz-executor214 (5084) used greatest stack depth: 22664 bytes left [ 53.485498][ T5086] syz-executor214 (5086) used greatest stack depth: 22528 bytes left [pid 5077] exit_group(0 [pid 5105] <... futex resumed>) = ? [pid 5101] <... futex resumed>) = ? [pid 5077] <... exit_group resumed>) = ? [pid 5105] +++ exited with 0 +++ [pid 5101] +++ exited with 0 +++ [pid 5083] <... sendfile resumed>) = ? [pid 5075] exit_group(0 [pid 5106] <... futex resumed>) = ? [pid 5102] <... futex resumed>) = ? [pid 5075] <... exit_group resumed>) = ? [pid 5106] +++ exited with 0 +++ [pid 5102] +++ exited with 0 +++ [pid 5083] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5074] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./0/binderfs") = 0 [pid 5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... sendfile resumed>) = ? [pid 5079] exit_group(0) = ? [pid 5104] <... futex resumed>) = ? [pid 5107] <... futex resumed>) = ? [pid 5104] +++ exited with 0 +++ [pid 5107] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ [pid 5075] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5085] <... sendfile resumed>) = ? [pid 5085] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 5073] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5073] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... restart_syscall resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] fstat(3, [pid 5069] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 5069] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5069] fstat(3, [pid 5073] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5073] lstat("./0/binderfs", [pid 5069] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./0/binderfs" [pid 5069] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5069] unlink("./0/binderfs") = 0 [pid 5069] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./0/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./0") = 0 [pid 5070] mkdir("./1", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5108 ./strace-static-x86_64: Process 5108 attached [pid 5108] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5108] chdir("./1") = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5108] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5108] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5109], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5109 [pid 5108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5109] memfd_create("syzkaller", 0) = 3 [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./0/file0") = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./0") = 0 [pid 5072] mkdir("./1", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5111 ./strace-static-x86_64: Process 5111 attached [pid 5111] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5111] chdir("./1") = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... umount2 resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5111] <... symlink resumed>) = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... write resumed>) = 4194304 [pid 5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... futex resumed>) = 0 [pid 5109] munmap(0x7fe8f3ed1000, 4194304 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./0/file0", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5109] <... munmap resumed>) = 0 [pid 5074] lstat("./0/file0", [pid 5073] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] lstat("./0/file0", [pid 5111] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5109] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5111] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5109] <... openat resumed>) = 4 [pid 5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... mprotect resumed>) = 0 [pid 5109] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./0/file0") = 0 [pid 5073] <... openat resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, ./strace-static-x86_64: Process 5112 attached 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5109] <... ioctl resumed>) = 0 [pid 5073] fstat(4, [pid 5069] <... openat resumed>) = 4 [pid 5112] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5111] <... clone resumed>, parent_tid=[5112], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5112 [pid 5109] close(3 [pid 5074] close(3 [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] fstat(4, [pid 5112] <... set_robust_list resumed>) = 0 [pid 5111] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5069] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5112] memfd_create("syzkaller", 0 [pid 5111] <... futex resumed>) = 0 [pid 5109] mkdir("./file0", 0777 [pid 5074] rmdir("./0" [pid 5073] getdents64(4, [pid 5069] getdents64(4, [pid 5112] <... memfd_create resumed>) = 3 [pid 5111] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5109] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5069] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5109] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5074] mkdir("./1", 0777 [pid 5073] getdents64(4, [pid 5069] getdents64(4, [pid 5112] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] close(4 [pid 5069] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] rmdir("./0/file0" [pid 5069] rmdir("./0/file0" [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5073] getdents64(3, [pid 5069] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5114 [ 53.836571][ T5109] loop1: detected capacity change from 0 to 8192 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5073] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5114 attached [pid 5073] rmdir("./0" [pid 5069] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5114] set_robust_list(0x5555558b65e0, 24 [pid 5073] mkdir("./1", 0777 [pid 5069] rmdir("./0" [pid 5114] <... set_robust_list resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5114] chdir("./1" [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5069] mkdir("./1", 0777 [pid 5114] <... chdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5114] <... prctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5114] setpgid(0, 0 [pid 5073] close(3 [pid 5114] <... setpgid resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5114] <... openat resumed>) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5114] write(3, "1000", 4 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5115 [pid 5114] <... write resumed>) = 4 [pid 5069] close(3 [pid 5114] close(3) = 0 [pid 5069] <... close resumed>) = 0 [pid 5114] symlink("/dev/binderfs", "./binderfs" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5114] <... symlink resumed>) = 0 [pid 5114] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 53.875778][ T5109] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.889152][ T5109] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 53.900011][ T5109] REISERFS (device loop1): using ordered data mode [ 53.909407][ T5109] reiserfs: using flush barriers [pid 5112] <... write resumed>) = 4194304 [pid 5112] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5112] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5115 attached [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5116 [pid 5114] <... mmap resumed>) = 0x7fe8fc2d1000 ./strace-static-x86_64: Process 5116 attached [pid 5115] set_robust_list(0x5555558b65e0, 24 [pid 5114] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5116] set_robust_list(0x5555558b65e0, 24 [pid 5115] <... set_robust_list resumed>) = 0 [pid 5114] <... mprotect resumed>) = 0 [pid 5115] chdir("./1" [pid 5116] <... set_robust_list resumed>) = 0 [pid 5115] <... chdir resumed>) = 0 [pid 5114] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5116] chdir("./1" [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] <... chdir resumed>) = 0 [pid 5115] <... prctl resumed>) = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5115] setpgid(0, 0 [pid 5114] <... clone resumed>, parent_tid=[5117], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5117 [pid 5116] <... prctl resumed>) = 0 [pid 5115] <... setpgid resumed>) = 0 [pid 5114] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5114] <... futex resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5115] <... openat resumed>) = 3 [pid 5114] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5112] <... ioctl resumed>) = 0 [pid 5112] close(3) = 0 [pid 5112] mkdir("./file0", 0777) = 0 [pid 5112] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5116] <... openat resumed>) = 3 [pid 5115] write(3, "1000", 4 [pid 5116] write(3, "1000", 4 [pid 5115] <... write resumed>) = 4 [pid 5116] <... write resumed>) = 4 [pid 5115] close(3 [pid 5116] close(3 [pid 5115] <... close resumed>) = 0 [pid 5116] <... close resumed>) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5115] <... symlink resumed>) = 0 [pid 5116] <... symlink resumed>) = 0 [pid 5115] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5117 attached [pid 5116] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5117] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5116] <... futex resumed>) = 0 [ 53.936148][ T5109] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.943654][ T5112] loop3: detected capacity change from 0 to 8192 [ 53.976763][ T5109] REISERFS (device loop1): checking transaction log (loop1) [pid 5117] memfd_create("syzkaller", 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5115] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5117] <... memfd_create resumed>) = 3 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5116] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5115] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5116] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5115] <... mprotect resumed>) = 0 [pid 5116] <... mprotect resumed>) = 0 [pid 5115] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5116] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5115] <... clone resumed>, parent_tid=[5119], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5119 [pid 5116] <... clone resumed>, parent_tid=[5120], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5120 [pid 5115] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5119 attached [pid 5116] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5119] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5116] <... futex resumed>) = 0 [pid 5115] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] <... set_robust_list resumed>) = 0 [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5116] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5120 attached [pid 5120] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5120] memfd_create("syzkaller", 0) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 53.978297][ T5112] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.016806][ T5112] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5117] <... write resumed>) = 4194304 [pid 5117] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 54.077715][ T5112] REISERFS (device loop3): using ordered data mode [ 54.084252][ T5112] reiserfs: using flush barriers [ 54.113387][ T5117] loop5: detected capacity change from 0 to 8192 [pid 5117] ioctl(4, LOOP_SET_FD, 3 [pid 5120] <... write resumed>) = 4194304 [pid 5119] <... write resumed>) = 4194304 [pid 5120] munmap(0x7fe8f3ed1000, 4194304 [pid 5119] munmap(0x7fe8f3ed1000, 4194304 [pid 5120] <... munmap resumed>) = 0 [pid 5119] <... munmap resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5119] <... openat resumed>) = 4 [pid 5120] <... ioctl resumed>) = 0 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5117] <... ioctl resumed>) = 0 [pid 5120] close(3 [pid 5117] close(3 [pid 5120] <... close resumed>) = 0 [pid 5119] <... ioctl resumed>) = 0 [pid 5117] <... close resumed>) = 0 [pid 5120] mkdir("./file0", 0777 [pid 5119] close(3 [pid 5117] mkdir("./file0", 0777 [pid 5120] <... mkdir resumed>) = 0 [pid 5119] <... close resumed>) = 0 [pid 5117] <... mkdir resumed>) = 0 [pid 5120] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5119] mkdir("./file0", 0777 [pid 5117] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5119] <... mkdir resumed>) = 0 [ 54.119989][ T5112] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.132336][ T5120] loop0: detected capacity change from 0 to 8192 [ 54.143138][ T5112] REISERFS (device loop3): checking transaction log (loop3) [ 54.150780][ T5119] loop4: detected capacity change from 0 to 8192 [ 54.172623][ T5117] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.178776][ T5120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.185834][ T5117] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 54.198735][ T5120] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 54.208916][ T5119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.217120][ T5120] REISERFS (device loop0): using ordered data mode [ 54.236765][ T5120] reiserfs: using flush barriers [ 54.244592][ T5120] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.257587][ T5117] REISERFS (device loop5): using ordered data mode [ 54.261724][ T5120] REISERFS (device loop0): checking transaction log (loop0) [ 54.271129][ T5119] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 54.284097][ T5109] REISERFS (device loop1): Using r5 hash to sort names [ 54.306433][ T5117] reiserfs: using flush barriers [ 54.316480][ T5109] REISERFS (device loop1): using 3.5.x disk format [pid 5119] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5109] <... mount resumed>) = 0 [pid 5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5109] chdir("./file0") = 0 [ 54.332967][ T5119] REISERFS (device loop4): using ordered data mode [ 54.338872][ T5109] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 54.350855][ T5117] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.351651][ T5119] reiserfs: using flush barriers [ 54.374596][ T5112] REISERFS (device loop3): Using r5 hash to sort names [pid 5109] ioctl(4, LOOP_CLR_FD) = 0 [pid 5109] close(4) = 0 [pid 5109] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... open resumed>) = 4 [pid 5109] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 54.377941][ T5120] REISERFS (device loop0): Using r5 hash to sort names [ 54.389347][ T5120] REISERFS (device loop0): using 3.5.x disk format [ 54.408322][ T5112] REISERFS (device loop3): using 3.5.x disk format [ 54.410046][ T5117] REISERFS (device loop5): checking transaction log (loop5) [pid 5108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5109] openat(-1, "/proc/self/exe", O_RDONLY [pid 5108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... openat resumed>) = 5 [pid 5109] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5109] sendfile(4, 5, NULL, 140737974943952 [pid 5108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... mount resumed>) = 0 [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] close(4) = 0 [pid 5112] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5112] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5111] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5111] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... open resumed>) = 4 [pid 5108] <... futex resumed>) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5112] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] <... futex resumed>) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5108] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5112] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] <... futex resumed>) = 0 [pid 5108] <... clone resumed>, parent_tid=[5124], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5124 [pid 5111] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] openat(-1, "/proc/self/exe", O_RDONLY [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... openat resumed>) = 5 [pid 5112] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5112] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] <... futex resumed>) = 0 [pid 5112] sendfile(4, 5, NULL, 140737974943952 [ 54.415387][ T5119] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.441231][ T5112] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 54.441583][ T5120] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 54.451112][ T5119] REISERFS (device loop4): checking transaction log (loop4) [pid 5111] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5124] open("./bus", O_RDONLY [pid 5120] <... mount resumed>) = 0 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5120] chdir("./file0") = 0 [pid 5120] ioctl(4, LOOP_CLR_FD) = 0 [pid 5120] close(4) = 0 [pid 5120] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5120] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] <... futex resumed>) = 0 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5116] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... open resumed>) = 4 [pid 5120] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5120] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] <... futex resumed>) = 0 [pid 5120] openat(-1, "/proc/self/exe", O_RDONLY [pid 5116] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... openat resumed>) = 5 [pid 5120] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5120] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] <... futex resumed>) = 0 [pid 5108] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] sendfile(4, 5, NULL, 140737974943952 [pid 5116] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] <... futex resumed>) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5111] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5111] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5111] <... futex resumed>) = 0 [pid 5108] <... mprotect resumed>) = 0 [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5111] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5111] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5108] <... clone resumed>, parent_tid=[5125], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5125 [pid 5111] <... mprotect resumed>) = 0 [pid 5108] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5108] <... futex resumed>) = 0 [pid 5108] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] <... clone resumed>, parent_tid=[5126], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5126 [pid 5111] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5125 attached [pid 5125] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5125] truncate("./bus", 6./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5126] open("./bus", O_RDONLY [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5116] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5116] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5116] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5127], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5127 [pid 5116] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5127 attached [pid 5127] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5127] open("./bus", O_RDONLY [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5111] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5111] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5111] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5111] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5128], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5128 [pid 5111] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... mount resumed>) = 0 [pid 5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5117] chdir("./file0") = 0 [pid 5117] ioctl(4, LOOP_CLR_FD) = 0 [pid 5117] close(4./strace-static-x86_64: Process 5128 attached ) = 0 [pid 5117] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5117] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] <... futex resumed>) = 0 [ 54.578175][ T5117] REISERFS (device loop5): Using r5 hash to sort names [ 54.585086][ T5117] REISERFS (device loop5): using 3.5.x disk format [ 54.598022][ T5117] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5117] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5114] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] set_robust_list(0x7fe8f42af9e0, 24 [pid 5117] <... open resumed>) = 4 [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5128] <... set_robust_list resumed>) = 0 [pid 5117] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5128] truncate("./bus", 6 [pid 5117] <... futex resumed>) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5114] <... futex resumed>) = 0 [pid 5117] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5114] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] <... mmap resumed>) = 0x7fe8f428f000 [pid 5114] <... futex resumed>) = 0 [pid 5117] openat(-1, "/proc/self/exe", O_RDONLY [pid 5116] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5114] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... openat resumed>) = 5 [pid 5116] <... mprotect resumed>) = 0 [pid 5117] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5117] <... futex resumed>) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5117] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] <... clone resumed>, parent_tid=[5129], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5129 [pid 5114] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5117] sendfile(4, 5, NULL, 140737974943952 [pid 5116] <... futex resumed>) = 0 [pid 5114] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5129 attached [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5129] set_robust_list(0x7fe8f42af9e0, 24 [pid 5119] <... openat resumed>) = 3 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5119] chdir("./file0" [pid 5129] truncate("./bus", 6 [pid 5119] <... chdir resumed>) = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 1 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5115] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... open resumed>) = 4 [pid 5119] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5119] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] <... futex resumed>) = 0 [pid 5119] openat(-1, "/proc/self/exe", O_RDONLY [pid 5115] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... openat resumed>) = 5 [pid 5119] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5119] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] sendfile(4, 5, NULL, 140737974943952 [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5114] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 54.672938][ T5119] REISERFS (device loop4): Using r5 hash to sort names [ 54.688349][ T5119] REISERFS (device loop4): using 3.5.x disk format [ 54.696466][ T5119] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5114] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5114] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5130], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5130 [pid 5114] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5130 attached [pid 5130] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5130] open("./bus", O_RDONLY [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5115] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5115] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5131 attached , parent_tid=[5131], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5131 [pid 5115] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5131] open("./bus", O_RDONLY [pid 5114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5114] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5114] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5114] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5132 attached , parent_tid=[5132], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5132 [pid 5132] set_robust_list(0x7fe8f42af9e0, 24 [pid 5114] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... set_robust_list resumed>) = 0 [pid 5132] truncate("./bus", 6 [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5115] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5115] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5125] <... truncate resumed>) = 0 [pid 5125] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... open resumed>) = 6 [pid 5115] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5125] <... futex resumed>) = 0 [pid 5124] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... truncate resumed>) = 0 [pid 5126] <... open resumed>) = 6 [pid 5125] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... futex resumed>) = 0 [pid 5115] <... clone resumed>, parent_tid=[5133], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5133 [pid 5128] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5133 attached [pid 5128] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 0 [pid 5133] set_robust_list(0x7fe8f42af9e0, 24 [pid 5128] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5133] <... set_robust_list resumed>) = 0 [pid 5133] truncate("./bus", 6 [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5108] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5124] <... futex resumed>) = ? [pid 5108] <... exit_group resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ [pid 5109] <... sendfile resumed>) = ? [pid 5109] +++ exited with 0 +++ [pid 5108] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5070] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./1/binderfs", [pid 5111] exit_group(0 [pid 5070] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5128] <... futex resumed>) = ? [pid 5126] <... futex resumed>) = ? [pid 5111] <... exit_group resumed>) = ? [pid 5070] unlink("./1/binderfs" [pid 5128] +++ exited with 0 +++ [pid 5126] +++ exited with 0 +++ [pid 5070] <... unlink resumed>) = 0 [pid 5070] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5116] exit_group(0) = ? [pid 5112] <... sendfile resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5111] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5072] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./1/binderfs") = 0 [pid 5072] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... truncate resumed>) = 0 [pid 5132] <... truncate resumed>) = 0 [pid 5131] <... open resumed>) = 6 [pid 5130] <... open resumed>) = 6 [pid 5133] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 0 [pid 5133] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = 0 [pid 5132] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./1/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5070] rmdir("./1" [pid 5072] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] mkdir("./2", 0777 [pid 5072] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5072] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5072] getdents64(4, [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x5555558b65e0, 24 [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5134] <... set_robust_list resumed>) = 0 [pid 5072] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./1/file0") = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./1" [pid 5134] chdir("./2" [pid 5072] <... rmdir resumed>) = 0 [pid 5134] <... chdir resumed>) = 0 [pid 5072] mkdir("./2", 0777 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5134] <... prctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5134] setpgid(0, 0 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5134] <... setpgid resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5135 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5135 attached ) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3 [pid 5114] exit_group(0 [pid 5134] <... close resumed>) = 0 [pid 5132] <... futex resumed>) = ? [pid 5130] <... futex resumed>) = ? [pid 5114] <... exit_group resumed>) = ? [pid 5135] set_robust_list(0x5555558b65e0, 24 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5132] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ [pid 5135] <... set_robust_list resumed>) = 0 [pid 5135] chdir("./2" [pid 5134] <... symlink resumed>) = 0 [pid 5135] <... chdir resumed>) = 0 [pid 5134] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5135] setpgid(0, 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5135] <... setpgid resumed>) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5134] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5135] <... openat resumed>) = 3 [pid 5134] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5135] write(3, "1000", 4) = 4 [pid 5134] <... mprotect resumed>) = 0 [pid 5135] close(3) = 0 [pid 5134] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5135] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5136 attached ) = 0 [pid 5136] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5135] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... clone resumed>, parent_tid=[5136], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5136 [pid 5136] <... set_robust_list resumed>) = 0 [pid 5135] <... futex resumed>) = 0 [pid 5134] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] memfd_create("syzkaller", 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5134] <... futex resumed>) = 0 [pid 5136] <... memfd_create resumed>) = 3 [pid 5135] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5134] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5135] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5136] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5135] <... mprotect resumed>) = 0 [pid 5135] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5137], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5137 [pid 5135] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5137 attached [pid 5137] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5117] <... sendfile resumed>) = ? [pid 5137] memfd_create("syzkaller", 0) = 3 [pid 5117] +++ exited with 0 +++ [pid 5114] +++ exited with 0 +++ [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5137] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5074] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5115] exit_group(0 [pid 5133] <... futex resumed>) = ? [pid 5131] <... futex resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5074] <... openat resumed>) = 3 [pid 5133] +++ exited with 0 +++ [pid 5131] +++ exited with 0 +++ [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5119] <... sendfile resumed>) = ? [pid 5074] unlink("./1/binderfs") = 0 [pid 5074] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5119] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./1/binderfs") = 0 [pid 5073] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5136] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5137] <... write resumed>) = 4194304 [pid 5136] <... ioctl resumed>) = 0 [pid 5137] munmap(0x7fe8f3ed1000, 4194304 [pid 5136] close(3 [pid 5137] <... munmap resumed>) = 0 [pid 5136] <... close resumed>) = 0 [pid 5137] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5136] mkdir("./file0", 0777 [pid 5137] <... openat resumed>) = 4 [pid 5137] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... mkdir resumed>) = 0 [pid 5136] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5137] <... ioctl resumed>) = 0 [ 55.360243][ T5136] loop1: detected capacity change from 0 to 8192 [ 55.376655][ T5137] loop3: detected capacity change from 0 to 8192 [pid 5137] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 5137] <... close resumed>) = 0 [pid 5074] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] mkdir("./file0", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5137] <... mkdir resumed>) = 0 [pid 5074] lstat("./1/file0", [pid 5137] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, [pid 5073] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [ 55.405937][ T5136] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.426047][ T5137] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.433637][ T5136] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 55.449810][ T5136] REISERFS (device loop1): using ordered data mode [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./1/file0") = 0 [pid 5073] lstat("./1/file0", [pid 5074] getdents64(3, [pid 5073] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./1" [ 55.457015][ T5136] reiserfs: using flush barriers [ 55.463587][ T5137] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 55.464076][ T5136] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.473323][ T5137] REISERFS (device loop3): using ordered data mode [ 55.496755][ T5137] reiserfs: using flush barriers [pid 5073] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./1/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./1") = 0 [pid 5073] mkdir("./2", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5140 [pid 5074] mkdir("./2", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5141 ./strace-static-x86_64: Process 5141 attached [pid 5141] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5141] chdir("./2") = 0 [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5141] setpgid(0, 0) = 0 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5141] write(3, "1000", 4) = 4 [pid 5141] close(3) = 0 [pid 5141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5141] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5141] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [ 55.504064][ T5136] REISERFS (device loop1): checking transaction log (loop1) [ 55.511790][ T5137] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5141] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5142], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5142 [pid 5141] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5140 attached ./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5140] set_robust_list(0x5555558b65e0, 24 [pid 5142] <... set_robust_list resumed>) = 0 [pid 5140] <... set_robust_list resumed>) = 0 [pid 5142] memfd_create("syzkaller", 0 [pid 5140] chdir("./2" [pid 5142] <... memfd_create resumed>) = 3 [pid 5140] <... chdir resumed>) = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5140] <... prctl resumed>) = 0 [pid 5140] setpgid(0, 0 [pid 5142] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5140] <... setpgid resumed>) = 0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5140] write(3, "1000", 4) = 4 [pid 5140] close(3) = 0 [pid 5140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5140] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.578079][ T5137] REISERFS (device loop3): checking transaction log (loop3) [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5140] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5143 attached , parent_tid=[5143], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5143 [pid 5143] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5140] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5143] memfd_create("syzkaller", 0 [pid 5140] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5143] <... memfd_create resumed>) = 3 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5142] <... write resumed>) = 4194304 [pid 5142] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 55.731633][ T5136] REISERFS (device loop1): Using r5 hash to sort names [ 55.750381][ T5137] REISERFS (device loop3): Using r5 hash to sort names [ 55.762746][ T5136] REISERFS (device loop1): using 3.5.x disk format [ 55.765990][ T5137] REISERFS (device loop3): using 3.5.x disk format [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 5137] <... mount resumed>) = 0 [pid 5137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5137] chdir("./file0") = 0 [pid 5137] ioctl(4, LOOP_CLR_FD) = 0 [pid 5137] close(4) = 0 [pid 5137] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = 0 [pid 5135] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5137] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5137] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = 0 [pid 5135] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5137] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5137] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... futex resumed>) = 0 [pid 5135] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5137] sendfile(4, 5, NULL, 140737974943952 [pid 5142] <... ioctl resumed>) = 0 [pid 5142] close(3) = 0 [pid 5142] mkdir("./file0", 0777 [pid 5136] <... mount resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5136] chdir("./file0") = 0 [pid 5136] ioctl(4, LOOP_CLR_FD) = 0 [pid 5136] close(4) = 0 [pid 5136] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5136] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5136] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] <... futex resumed>) = 0 [pid 5136] openat(-1, "/proc/self/exe", O_RDONLY [pid 5134] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... openat resumed>) = 5 [pid 5136] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5136] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] <... futex resumed>) = 0 [ 55.784732][ T5142] loop5: detected capacity change from 0 to 8192 [ 55.793044][ T5137] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 55.820697][ T5136] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5136] sendfile(4, 5, NULL, 140737974943952 [pid 5134] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... write resumed>) = 4194304 [pid 5142] <... mkdir resumed>) = 0 [pid 5143] munmap(0x7fe8f3ed1000, 4194304 [pid 5142] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5143] <... munmap resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5135] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5135] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5145], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5145 [pid 5135] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... ioctl resumed>) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file0", 0777) = 0 [pid 5143] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5134] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5134] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5134] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5147], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5147 [pid 5134] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.872768][ T5143] loop4: detected capacity change from 0 to 8192 [ 55.892097][ T5142] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5134] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5147 attached ./strace-static-x86_64: Process 5145 attached [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5135] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5135] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5148], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5148 [pid 5135] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5148 attached [pid 5148] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5148] truncate("./bus", 6 [pid 5147] set_robust_list(0x7fe8f42d09e0, 24 [pid 5145] set_robust_list(0x7fe8f42d09e0, 24 [pid 5147] <... set_robust_list resumed>) = 0 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5147] open("./bus", O_RDONLY [pid 5145] open("./bus", O_RDONLY [pid 5134] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5134] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [ 55.927862][ T5143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 55.929873][ T5142] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 55.951086][ T5142] REISERFS (device loop5): using ordered data mode [ 55.959531][ T5142] reiserfs: using flush barriers [ 55.965836][ T5143] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [pid 5134] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5149], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5149 [pid 5134] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5149 attached [pid 5149] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5149] truncate("./bus", 6 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 55.973741][ T5142] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.976016][ T5143] REISERFS (device loop4): using ordered data mode [ 55.997536][ T5142] REISERFS (device loop5): checking transaction log (loop5) [ 55.998495][ T5143] reiserfs: using flush barriers [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 56.017296][ T5143] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.033695][ T5143] REISERFS (device loop4): checking transaction log (loop4) [pid 5143] <... mount resumed>) = 0 [pid 5143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file0") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [ 56.099327][ T5143] REISERFS (device loop4): Using r5 hash to sort names [ 56.106619][ T5143] REISERFS (device loop4): using 3.5.x disk format [ 56.118665][ T5143] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 56.137018][ T5142] REISERFS (device loop5): Using r5 hash to sort names [pid 5143] close(4) = 0 [pid 5143] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... futex resumed>) = 0 [pid 5140] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5140] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... open resumed>) = 4 [pid 5143] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... futex resumed>) = 0 [pid 5140] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5140] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5143] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5143] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5143] sendfile(4, 5, NULL, 140737974943952 [pid 5140] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... mount resumed>) = 0 [pid 5142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5142] chdir("./file0") = 0 [pid 5142] ioctl(4, LOOP_CLR_FD) = 0 [pid 5142] close(4) = 0 [pid 5142] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5142] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5141] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... open resumed>) = 4 [pid 5142] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5142] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] openat(-1, "/proc/self/exe", O_RDONLY [pid 5141] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] <... openat resumed>) = 5 [pid 5142] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] <... futex resumed>) = 0 [pid 5142] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] <... futex resumed>) = 0 [pid 5142] sendfile(4, 5, NULL, 140737974943952 [ 56.144664][ T5142] REISERFS (device loop5): using 3.5.x disk format [ 56.154065][ T5142] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5141] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5140] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5140] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5150], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5150 [pid 5140] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5150 attached [pid 5150] set_robust_list(0x7fe8f42d09e0, 24 [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5150] <... set_robust_list resumed>) = 0 [pid 5148] <... truncate resumed>) = 0 [pid 5145] <... open resumed>) = 6 [pid 5141] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] open("./bus", O_RDONLY [pid 5148] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5148] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5141] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5141] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5151 attached [pid 5151] set_robust_list(0x7fe8f42d09e0, 24 [pid 5141] <... clone resumed>, parent_tid=[5151], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5151 [pid 5141] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... set_robust_list resumed>) = 0 [pid 5151] open("./bus", O_RDONLY [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5140] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... truncate resumed>) = 0 [pid 5147] <... open resumed>) = 6 [pid 5140] <... futex resumed>) = 0 [pid 5149] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5149] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 0 [pid 5140] <... mmap resumed>) = 0x7fe8f428f000 [pid 5149] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5147] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x7fe8f42af9e0, 24 [pid 5140] <... clone resumed>, parent_tid=[5152], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5152 [pid 5140] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... set_robust_list resumed>) = 0 [pid 5152] truncate("./bus", 6 [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5141] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5141] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5141] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5153], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5153 [pid 5141] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5141] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5153 attached [pid 5153] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5153] truncate("./bus", 6 [pid 5135] exit_group(0 [pid 5148] <... futex resumed>) = ? [pid 5145] <... futex resumed>) = ? [pid 5135] <... exit_group resumed>) = ? [pid 5148] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ [pid 5137] <... sendfile resumed>) = ? [pid 5137] +++ exited with 0 +++ [pid 5135] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./2/binderfs") = 0 [pid 5072] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5134] exit_group(0 [pid 5149] <... futex resumed>) = ? [pid 5147] <... futex resumed>) = ? [pid 5134] <... exit_group resumed>) = ? [pid 5149] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ [pid 5136] <... sendfile resumed>) = ? [pid 5136] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5070] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 56.358960][ T5137] syz-executor214 (5137) used greatest stack depth: 22160 bytes left [pid 5070] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./2/binderfs") = 0 [pid 5070] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] <... open resumed>) = 6 [pid 5072] <... umount2 resumed>) = 0 [pid 5152] <... truncate resumed>) = 0 [pid 5150] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5072] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] <... futex resumed>) = 0 [pid 5150] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./2/file0") = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5153] <... truncate resumed>) = 0 [pid 5151] <... open resumed>) = 6 [pid 5072] rmdir("./2" [pid 5153] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5153] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] mkdir("./3", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5154 ./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5154] chdir("./3") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] <... umount2 resumed>) = 0 [pid 5154] <... prctl resumed>) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] write(3, "1000", 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... write resumed>) = 4 [pid 5070] lstat("./2/file0", [pid 5154] close(3 [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4 [pid 5154] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs" [pid 5070] rmdir("./2/file0" [pid 5154] <... symlink resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5154] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5154] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] close(3 [pid 5154] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5070] <... close resumed>) = 0 [pid 5154] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5070] rmdir("./2" [pid 5154] <... mprotect resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5154] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] mkdir("./3", 0777) = 0 [pid 5154] <... clone resumed>, parent_tid=[5155], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5155 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5154] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5154] <... futex resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5154] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] close(3) = 0 ./strace-static-x86_64: Process 5155 attached [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5155] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5155] memfd_create("syzkaller", 0 [pid 5070] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5156 [pid 5155] <... memfd_create resumed>) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5156 attached ) = 0x7fe8f3ed1000 [pid 5156] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5156] chdir("./3") = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5156] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5156] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5157], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5157 [pid 5156] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5157 attached [pid 5157] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5157] memfd_create("syzkaller", 0) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5140] exit_group(0 [pid 5152] <... futex resumed>) = ? [pid 5140] <... exit_group resumed>) = ? [pid 5152] +++ exited with 0 +++ [pid 5150] <... futex resumed>) = ? [pid 5150] +++ exited with 0 +++ [pid 5143] <... sendfile resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5073] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./2/binderfs") = 0 [pid 5141] exit_group(0 [pid 5153] <... futex resumed>) = ? [pid 5151] <... futex resumed>) = ? [pid 5141] <... exit_group resumed>) = ? [pid 5153] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] <... sendfile resumed>) = ? [pid 5142] +++ exited with 0 +++ [pid 5141] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5074] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5074] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./2/binderfs") = 0 [pid 5074] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... write resumed>) = 4194304 [pid 5155] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5157] <... write resumed>) = 4194304 [pid 5155] <... openat resumed>) = 4 [pid 5157] munmap(0x7fe8f3ed1000, 4194304 [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5157] <... munmap resumed>) = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5157] ioctl(4, LOOP_SET_FD, 3 [pid 5155] <... ioctl resumed>) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./file0", 0777) = 0 [pid 5155] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5157] <... ioctl resumed>) = 0 [pid 5157] close(3) = 0 [pid 5157] mkdir("./file0", 0777 [pid 5071] kill(-5080, SIGKILL) = 0 [pid 5071] kill(5080, SIGKILL [pid 5157] <... mkdir resumed>) = 0 [pid 5071] <... kill resumed>) = 0 [ 56.780344][ T5155] loop3: detected capacity change from 0 to 8192 [ 56.791019][ T5157] loop1: detected capacity change from 0 to 8192 [ 56.810259][ T5155] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.831539][ T5155] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 56.831775][ T5157] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.842223][ T5155] REISERFS (device loop3): using ordered data mode [ 56.862022][ T5155] reiserfs: using flush barriers [pid 5157] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./2/file0", [pid 5073] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] fstat(4, [pid 5074] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] getdents64(4, [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./2/file0") = 0 [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5073] close(4 [pid 5074] rmdir("./2" [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./2/file0" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5074] mkdir("./3", 0777 [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] rmdir("./2" [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5160 [pid 5073] mkdir("./3", 0777./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5160] chdir("./3" [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5160] <... chdir resumed>) = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3 [pid 5160] <... prctl resumed>) = 0 [pid 5160] setpgid(0, 0 [pid 5073] <... close resumed>) = 0 [pid 5160] <... setpgid resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5160] write(3, "1000", 4 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5161 [pid 5160] <... write resumed>) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5161 attached [pid 5160] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] set_robust_list(0x5555558b65e0, 24 [pid 5160] <... futex resumed>) = 0 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5161] chdir("./3" [pid 5160] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5161] <... chdir resumed>) = 0 [pid 5160] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5160] <... mprotect resumed>) = 0 [pid 5161] <... prctl resumed>) = 0 [pid 5160] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5161] setpgid(0, 0) = 0 [pid 5160] <... clone resumed>, parent_tid=[5162], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5162 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5160] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... openat resumed>) = 3 [pid 5160] <... futex resumed>) = 0 [pid 5161] write(3, "1000", 4 [pid 5160] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5161] <... write resumed>) = 4 [pid 5161] close(3) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5161] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5161] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5161] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5163], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5163 [ 56.870929][ T5155] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.890265][ T5157] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 56.891461][ T5155] REISERFS (device loop3): checking transaction log (loop3) [ 56.900349][ T5157] REISERFS (device loop1): using ordered data mode [ 56.917226][ T5157] reiserfs: using flush barriers [pid 5161] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5163 attached ) = 0 [pid 5161] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5163] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5163] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5162 attached ) = 3 [pid 5162] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5162] <... set_robust_list resumed>) = 0 [pid 5162] memfd_create("syzkaller", 0) = 3 [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 56.981675][ T5157] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5163] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 57.044721][ T5157] REISERFS (device loop1): checking transaction log (loop1) [pid 5163] ioctl(4, LOOP_SET_FD, 3 [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5163] <... ioctl resumed>) = 0 [pid 5163] close(3) = 0 [pid 5163] mkdir("./file0", 0777) = 0 [ 57.088164][ T5163] loop4: detected capacity change from 0 to 8192 [ 57.128269][ T5155] REISERFS (device loop3): Using r5 hash to sort names [ 57.132037][ T5163] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.142137][ T5155] REISERFS (device loop3): using 3.5.x disk format [ 57.175283][ T5163] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [pid 5163] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5157] <... mount resumed>) = 0 [pid 5162] <... write resumed>) = 4194304 [pid 5162] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5162] ioctl(4, LOOP_SET_FD, 3 [pid 5157] <... openat resumed>) = 3 [ 57.180143][ T5157] REISERFS (device loop1): Using r5 hash to sort names [ 57.189669][ T5155] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 57.191694][ T5157] REISERFS (device loop1): using 3.5.x disk format [ 57.207875][ T5157] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 57.217770][ T5163] REISERFS (device loop4): using ordered data mode [ 57.225127][ T5163] reiserfs: using flush barriers [ 57.226832][ T5162] loop5: detected capacity change from 0 to 8192 [pid 5157] chdir("./file0" [pid 5155] <... mount resumed>) = 0 [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file0") = 0 [pid 5157] <... chdir resumed>) = 0 [pid 5157] ioctl(4, LOOP_CLR_FD) = 0 [pid 5157] close(4) = 0 [pid 5157] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5157] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] <... futex resumed>) = 0 [pid 5155] <... ioctl resumed>) = 0 [pid 5162] <... ioctl resumed>) = 0 [pid 5157] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5156] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 57.231592][ T5163] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.253866][ T5163] REISERFS (device loop4): checking transaction log (loop4) [pid 5155] close(4 [pid 5162] close(3 [pid 5157] <... open resumed>) = 4 [pid 5155] <... close resumed>) = 0 [pid 5162] <... close resumed>) = 0 [pid 5157] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] mkdir("./file0", 0777 [pid 5157] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5162] <... mkdir resumed>) = 0 [pid 5157] openat(-1, "/proc/self/exe", O_RDONLY [pid 5156] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] <... futex resumed>) = 0 [pid 5162] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5157] <... openat resumed>) = 5 [pid 5156] <... futex resumed>) = 0 [pid 5154] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5156] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... open resumed>) = 4 [pid 5154] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] sendfile(4, 5, NULL, 140737974943952 [pid 5156] <... futex resumed>) = 0 [pid 5155] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 0 [pid 5154] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5154] <... futex resumed>) = 0 [pid 5163] <... mount resumed>) = 0 [pid 5155] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 0 [ 57.324143][ T5163] REISERFS (device loop4): Using r5 hash to sort names [ 57.327919][ T5162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.333061][ T5163] REISERFS (device loop4): using 3.5.x disk format [ 57.352315][ T5163] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5155] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file0") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] close(4) = 0 [pid 5154] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5155] sendfile(4, 5, NULL, 140737974943952 [pid 5161] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 1 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5161] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... open resumed>) = 4 [pid 5163] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] <... futex resumed>) = 0 [pid 5161] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 1 [pid 5163] openat(-1, "/proc/self/exe", O_RDONLY [pid 5161] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... openat resumed>) = 5 [pid 5163] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5163] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] <... futex resumed>) = 0 [pid 5163] sendfile(4, 5, NULL, 140737974943952 [pid 5161] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5156] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 57.368324][ T5162] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 57.382720][ T5162] REISERFS (device loop5): using ordered data mode [ 57.393840][ T5162] reiserfs: using flush barriers [pid 5156] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5166], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5166 [pid 5156] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5166 attached [pid 5166] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5166] open("./bus", O_RDONLY [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5154] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5167 attached [pid 5161] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... clone resumed>, parent_tid=[5167], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5167 [pid 5167] set_robust_list(0x7fe8f42d09e0, 24 [pid 5161] <... futex resumed>) = 0 [pid 5154] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5167] <... set_robust_list resumed>) = 0 [pid 5161] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5154] <... futex resumed>) = 0 [pid 5167] open("./bus", O_RDONLY [pid 5161] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5154] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... mprotect resumed>) = 0 [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5161] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5156] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5168 attached ) = 0 [pid 5168] set_robust_list(0x7fe8f42d09e0, 24 [pid 5161] <... clone resumed>, parent_tid=[5168], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5168 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5161] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... mmap resumed>) = 0x7fe8f428f000 [pid 5161] <... futex resumed>) = 0 [pid 5161] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5168] <... set_robust_list resumed>) = 0 [ 57.413242][ T5162] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.440888][ T5162] REISERFS (device loop5): checking transaction log (loop5) [pid 5168] open("./bus", O_RDONLY [pid 5156] <... mprotect resumed>) = 0 [pid 5156] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5169], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5169 [pid 5156] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5169] truncate("./bus", 6 [pid 5071] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5071] getdents64(3, [pid 5162] <... mount resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555558b7620 /* 2 entries */, 32768) = 48 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5162] chdir("./file0") = 0 [pid 5071] getdents64(3, [pid 5162] ioctl(4, LOOP_CLR_FD [pid 5071] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5162] <... ioctl resumed>) = 0 [pid 5162] close(4) = 0 [pid 5162] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] close(3) = 0 [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 1 [pid 5162] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5160] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... open resumed>) = 4 [pid 5162] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5160] <... futex resumed>) = 0 [pid 5162] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] <... futex resumed>) = 0 [pid 5162] openat(-1, "/proc/self/exe", O_RDONLY [pid 5160] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5162] <... openat resumed>) = 5 [pid 5162] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5160] <... futex resumed>) = 0 [pid 5162] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] <... futex resumed>) = 0 [pid 5162] sendfile(4, 5, NULL, 140737974943952 [pid 5160] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5154] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5170], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5170 [pid 5154] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5170 attached [pid 5161] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5170] truncate("./bus", 6 [pid 5161] <... futex resumed>) = 0 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5161] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5161] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5161] <... clone resumed>, parent_tid=[5171], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5171 [ 57.499795][ T5162] REISERFS (device loop5): Using r5 hash to sort names [ 57.507209][ T5162] REISERFS (device loop5): using 3.5.x disk format [ 57.514627][ T5162] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5161] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5171 attached [pid 5171] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5171] truncate("./bus", 6 [pid 5160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5160] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5160] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5160] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x7fe8f42d09e0, 24 [pid 5160] <... clone resumed>, parent_tid=[5172], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5172 [pid 5172] <... set_robust_list resumed>) = 0 [pid 5160] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] open("./bus", O_RDONLY [pid 5160] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5160] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5160] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5160] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5160] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5173], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5173 ./strace-static-x86_64: Process 5173 attached [pid 5160] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] set_robust_list(0x7fe8f42af9e0, 24 [pid 5160] <... futex resumed>) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5160] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] truncate("./bus", 6 [pid 5169] <... truncate resumed>) = 0 [pid 5166] <... open resumed>) = 6 [pid 5169] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = 0 [pid 5169] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5171] <... truncate resumed>) = 0 [pid 5168] <... open resumed>) = 6 [pid 5171] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 0 [pid 5171] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] <... open resumed>) = 6 [pid 5167] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] exit_group(0 [pid 5169] <... futex resumed>) = ? [pid 5166] <... futex resumed>) = ? [pid 5156] <... exit_group resumed>) = ? [pid 5169] +++ exited with 0 +++ [pid 5166] +++ exited with 0 +++ [pid 5170] <... truncate resumed>) = 0 [pid 5170] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] <... sendfile resumed>) = ? [pid 5157] +++ exited with 0 +++ [pid 5156] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5070] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./3/binderfs") = 0 [ 57.786249][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 57.786268][ T27] audit: type=1804 audit(1671282281.193:50): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.h7QRjJ/3/file0/bus" dev="loop3" ino=2 res=1 errno=0 [pid 5070] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] exit_group(0 [pid 5170] <... futex resumed>) = ? [pid 5167] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5170] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 5161] exit_group(0 [pid 5168] <... futex resumed>) = ? [pid 5161] <... exit_group resumed>) = ? [pid 5171] <... futex resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 5155] <... sendfile resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5163] <... sendfile resumed>) = ? [pid 5072] <... openat resumed>) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(3, [pid 5163] +++ exited with 0 +++ [pid 5161] +++ exited with 0 +++ [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5072] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./3/binderfs" [pid 5073] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5173] <... truncate resumed>) = 0 [pid 5172] <... open resumed>) = 6 [pid 5073] getdents64(3, [pid 5173] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5173] <... futex resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5073] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./3/binderfs") = 0 [ 57.925883][ T27] audit: type=1804 audit(1671282281.333:51): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.KsgJcQ/3/file0/bus" dev="loop5" ino=2 res=1 errno=0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4 [pid 5160] exit_group(0 [pid 5070] <... close resumed>) = 0 [ 57.969127][ T27] audit: type=1800 audit(1671282281.353:52): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop5" ino=2 res=0 errno=0 [pid 5173] <... futex resumed>) = ? [pid 5172] <... futex resumed>) = ? [pid 5160] <... exit_group resumed>) = ? [pid 5070] rmdir("./3/file0" [pid 5173] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 5070] <... rmdir resumed>) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./3") = 0 [pid 5070] mkdir("./4", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3 [pid 5072] <... umount2 resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5175 [pid 5162] <... sendfile resumed>) = ? [pid 5072] lstat("./3/file0", [pid 5162] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5072] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5072] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5175 attached ) = 4 [pid 5072] fstat(4, [pid 5175] set_robust_list(0x5555558b65e0, 24 [pid 5074] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5175] <... set_robust_list resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5175] chdir("./4" [pid 5074] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5175] <... chdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] getdents64(4, [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] fstat(3, [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5175] <... prctl resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] close(4 [pid 5175] setpgid(0, 0 [pid 5074] getdents64(3, [pid 5072] <... close resumed>) = 0 [pid 5175] <... setpgid resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] rmdir("./3/file0" [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5175] write(3, "1000", 4 [pid 5074] lstat("./3/binderfs", [pid 5072] getdents64(3, [pid 5175] <... write resumed>) = 4 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5175] close(3 [pid 5074] unlink("./3/binderfs" [pid 5072] close(3 [pid 5175] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs" [pid 5074] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... symlink resumed>) = 0 [pid 5072] rmdir("./3" [pid 5175] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5175] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5072] mkdir("./4", 0777 [pid 5175] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5176], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5176 [pid 5175] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5176 attached [pid 5176] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5072] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5177 [pid 5176] <... set_robust_list resumed>) = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5177 attached ) = 0x7fe8f3ed1000 [pid 5177] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5177] chdir("./4") = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5177] setpgid(0, 0) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5177] write(3, "1000", 4) = 4 [pid 5177] close(3) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5177] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5177] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5177] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5178], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5178 [pid 5177] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5178] memfd_create("syzkaller", 0) = 3 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] getdents64(4, [pid 5074] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5074] lstat("./3/file0", [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] close(4 [pid 5074] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./3/file0" [pid 5074] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 5074] fstat(4, [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] close(3 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./3" [pid 5074] getdents64(4, [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] mkdir("./4", 0777 [pid 5074] close(4) = 0 [pid 5074] rmdir("./3/file0") = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./3" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./4", 0777 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5180 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5179 ./strace-static-x86_64: Process 5179 attached ./strace-static-x86_64: Process 5180 attached [pid 5179] set_robust_list(0x5555558b65e0, 24 [pid 5180] set_robust_list(0x5555558b65e0, 24 [pid 5179] <... set_robust_list resumed>) = 0 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5180] chdir("./4" [pid 5179] chdir("./4" [pid 5180] <... chdir resumed>) = 0 [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5180] setpgid(0, 0) = 0 [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5179] <... chdir resumed>) = 0 [pid 5180] <... openat resumed>) = 3 [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5180] write(3, "1000", 4) = 4 [pid 5180] close(3) = 0 [pid 5180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] <... prctl resumed>) = 0 [pid 5180] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] setpgid(0, 0 [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5179] <... setpgid resumed>) = 0 [pid 5180] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5180] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5180] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5179] <... openat resumed>) = 3 [pid 5180] <... clone resumed>, parent_tid=[5181], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5181 [pid 5179] write(3, "1000", 4 [pid 5180] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... write resumed>) = 4 [pid 5180] <... futex resumed>) = 0 [pid 5179] close(3 [pid 5180] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5179] <... close resumed>) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5181 attached [pid 5181] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5179] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5181] memfd_create("syzkaller", 0 [pid 5179] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5181] <... memfd_create resumed>) = 3 [pid 5179] <... mprotect resumed>) = 0 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5179] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5181] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5179] <... clone resumed>, parent_tid=[5182], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5182 [pid 5179] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5182] memfd_create("syzkaller", 0) = 3 [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5176] <... write resumed>) = 4194304 [pid 5176] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5178] <... write resumed>) = 4194304 [pid 5178] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5178] <... ioctl resumed>) = 0 [pid 5178] close(3) = 0 [pid 5176] <... ioctl resumed>) = 0 [pid 5178] mkdir("./file0", 0777 [pid 5176] close(3 [pid 5178] <... mkdir resumed>) = 0 [pid 5176] <... close resumed>) = 0 [pid 5178] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5176] mkdir("./file0", 0777) = 0 [pid 5176] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [ 58.299520][ T5176] loop1: detected capacity change from 0 to 8192 [ 58.316875][ T5178] loop3: detected capacity change from 0 to 8192 [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5181] <... write resumed>) = 4194304 [pid 5181] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 58.346407][ T5176] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.360129][ T5178] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.383683][ T5178] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [pid 5181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5181] close(3) = 0 [pid 5181] mkdir("./file0", 0777) = 0 [ 58.388593][ T5181] loop5: detected capacity change from 0 to 8192 [ 58.393408][ T5176] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 58.408289][ T5178] REISERFS (device loop3): using ordered data mode [ 58.409133][ T5176] REISERFS (device loop1): using ordered data mode [ 58.422335][ T5176] reiserfs: using flush barriers [ 58.429356][ T5176] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5181] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5182] <... write resumed>) = 4194304 [pid 5182] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5182] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 58.446477][ T5176] REISERFS (device loop1): checking transaction log (loop1) [ 58.451882][ T5178] reiserfs: using flush barriers [ 58.459702][ T5181] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5182] close(3) = 0 [pid 5182] mkdir("./file0", 0777) = 0 [ 58.491099][ T5182] loop4: detected capacity change from 0 to 8192 [ 58.498126][ T5178] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.504039][ T5181] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 58.526520][ T5182] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.527130][ T5178] REISERFS (device loop3): checking transaction log (loop3) [ 58.549626][ T5182] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 58.550552][ T5181] REISERFS (device loop5): using ordered data mode [ 58.561214][ T5182] REISERFS (device loop4): using ordered data mode [ 58.567250][ T5176] REISERFS (device loop1): Using r5 hash to sort names [ 58.573821][ T5182] reiserfs: using flush barriers [ 58.586910][ T5181] reiserfs: using flush barriers [ 58.592843][ T5182] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.593378][ T5176] REISERFS (device loop1): using 3.5.x disk format [ 58.616981][ T5181] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.635978][ T5182] REISERFS (device loop4): checking transaction log (loop4) [pid 5182] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5176] <... mount resumed>) = 0 [pid 5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file0") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4) = 0 [pid 5176] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5175] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... open resumed>) = 4 [pid 5175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5176] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 58.637841][ T5176] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 58.646024][ T5181] REISERFS (device loop5): checking transaction log (loop5) [ 58.674461][ T27] audit: type=1800 audit(1671282282.073:53): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop1" ino=2 res=0 errno=0 [pid 5176] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = 0 [pid 5176] openat(-1, "/proc/self/exe", O_RDONLY [pid 5175] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... openat resumed>) = 5 [pid 5176] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5176] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... futex resumed>) = 0 [pid 5176] sendfile(4, 5, NULL, 140737974943952 [pid 5175] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5175] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5175] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 58.762957][ T5178] REISERFS (device loop3): Using r5 hash to sort names [ 58.792842][ T5178] REISERFS (device loop3): using 3.5.x disk format [pid 5175] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5187], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5187 [pid 5175] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5187 attached [pid 5187] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 58.810321][ T5182] REISERFS (device loop4): Using r5 hash to sort names [ 58.824100][ T5181] REISERFS (device loop5): Using r5 hash to sort names [ 58.824398][ T5178] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 58.833319][ T5181] REISERFS (device loop5): using 3.5.x disk format [ 58.841592][ T5182] REISERFS (device loop4): using 3.5.x disk format [ 58.849688][ T5181] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5187] open("./bus", O_RDONLY [pid 5181] <... mount resumed>) = 0 [pid 5178] <... mount resumed>) = 0 [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0" [pid 5178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5181] <... chdir resumed>) = 0 [pid 5178] <... openat resumed>) = 3 [pid 5181] ioctl(4, LOOP_CLR_FD) = 0 [pid 5178] chdir("./file0" [pid 5181] close(4 [pid 5178] <... chdir resumed>) = 0 [pid 5182] <... mount resumed>) = 0 [pid 5181] <... close resumed>) = 0 [pid 5178] ioctl(4, LOOP_CLR_FD [pid 5175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5175] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5175] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5181] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5188 attached [pid 5182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5181] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5178] close(4 [pid 5175] <... clone resumed>, parent_tid=[5188], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5188 [pid 5181] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... close resumed>) = 0 [pid 5175] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 0 [pid 5180] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 1 [pid 5175] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] <... futex resumed>) = 0 [pid 5180] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5182] <... openat resumed>) = 3 [pid 5181] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5180] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] chdir("./file0" [pid 5181] <... open resumed>) = 4 [pid 5181] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5188] truncate("./bus", 6 [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... futex resumed>) = 0 [pid 5180] <... futex resumed>) = 1 [pid 5181] openat(-1, "/proc/self/exe", O_RDONLY [pid 5180] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... chdir resumed>) = 0 [pid 5181] <... openat resumed>) = 5 [pid 5178] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 1 [pid 5182] ioctl(4, LOOP_CLR_FD [pid 5181] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 58.856970][ T5182] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 58.891890][ T27] audit: type=1800 audit(1671282282.293:54): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop5" ino=2 res=0 errno=0 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5177] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... ioctl resumed>) = 0 [pid 5181] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5178] <... open resumed>) = 4 [pid 5182] close(4 [pid 5181] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5182] <... close resumed>) = 0 [pid 5181] sendfile(4, 5, NULL, 140737974943952 [pid 5180] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 1 [pid 5178] openat(-1, "/proc/self/exe", O_RDONLY [pid 5177] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... openat resumed>) = 5 [pid 5178] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5178] sendfile(4, 5, NULL, 140737974943952 [pid 5177] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 0 [pid 5182] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] <... futex resumed>) = 0 [pid 5177] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5179] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... open resumed>) = 4 [pid 5182] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5182] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] openat(-1, "/proc/self/exe", O_RDONLY [pid 5069] kill(-5116, SIGKILL [pid 5182] <... openat resumed>) = 5 [pid 5069] <... kill resumed>) = 0 [pid 5182] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 58.922892][ T27] audit: type=1800 audit(1671282282.323:55): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop3" ino=2 res=0 errno=0 [pid 5069] kill(5116, SIGKILL) = 0 [pid 5182] <... futex resumed>) = 1 [pid 5182] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5182] <... futex resumed>) = 0 [pid 5182] sendfile(4, 5, NULL, 140737974943952 [pid 5180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5180] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5180] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5180] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5189 attached [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5189] set_robust_list(0x7fe8f42d09e0, 24 [pid 5180] <... clone resumed>, parent_tid=[5189], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5189 [pid 5177] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... set_robust_list resumed>) = 0 [pid 5180] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... futex resumed>) = 0 [pid 5189] open("./bus", O_RDONLY [pid 5180] <... futex resumed>) = 0 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5180] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5177] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5177] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5190 attached , parent_tid=[5190], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5190 [pid 5190] set_robust_list(0x7fe8f42d09e0, 24 [pid 5177] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] <... set_robust_list resumed>) = 0 [pid 5177] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 58.960796][ T27] audit: type=1800 audit(1671282282.363:56): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5190] open("./bus", O_RDONLY [pid 5179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5179] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5179] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5179] <... clone resumed>, parent_tid=[5191], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5191 [pid 5191] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5179] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 0 [pid 5191] open("./bus", O_RDONLY [pid 5180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5180] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5180] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5180] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5177] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5180] <... clone resumed>, parent_tid=[5192], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5192 [pid 5177] <... futex resumed>) = 0 [pid 5180] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5180] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... mmap resumed>) = 0x7fe8f428f000 [pid 5177] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5192] truncate("./bus", 6 [pid 5177] <... mprotect resumed>) = 0 [pid 5177] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5193 attached , parent_tid=[5193], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5193 [pid 5193] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5193] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 1 [pid 5193] truncate("./bus", 6 [pid 5177] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] <... truncate resumed>) = 0 [pid 5187] <... open resumed>) = 6 [pid 5188] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... futex resumed>) = 0 [pid 5187] <... futex resumed>) = 0 [pid 5188] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5179] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5179] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5194], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5194 [pid 5179] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5194 attached [pid 5194] set_robust_list(0x7fe8f42af9e0, 24 [pid 5180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5194] <... set_robust_list resumed>) = 0 [ 59.093010][ T27] audit: type=1804 audit(1671282282.493:57): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.RlmWgA/4/file0/bus" dev="loop1" ino=2 res=1 errno=0 [pid 5194] truncate("./bus", 6 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] exit_group(0 [pid 5188] <... futex resumed>) = ? [pid 5187] <... futex resumed>) = ? [pid 5175] <... exit_group resumed>) = ? [pid 5188] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ [pid 5176] <... sendfile resumed>) = ? [pid 5176] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5070] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5070] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./4/binderfs") = 0 [pid 5070] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] <... truncate resumed>) = 0 [pid 5190] <... open resumed>) = 6 [pid 5193] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5193] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... truncate resumed>) = 0 [pid 5191] <... open resumed>) = 6 [pid 5070] <... umount2 resumed>) = 0 [pid 5194] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5194] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 59.289758][ T27] audit: type=1804 audit(1671282282.693:58): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.h7QRjJ/4/file0/bus" dev="loop3" ino=2 res=1 errno=0 [pid 5191] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5189] <... open resumed>) = 6 [pid 5070] <... openat resumed>) = 4 [pid 5192] <... truncate resumed>) = 0 [pid 5189] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] fstat(4, [pid 5192] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... futex resumed>) = 0 [pid 5070] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5192] <... futex resumed>) = 0 [pid 5189] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] getdents64(4, [pid 5192] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./4/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./4") = 0 [pid 5070] mkdir("./5", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [ 59.320859][ T27] audit: type=1800 audit(1671282282.723:59): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop3" ino=2 res=0 errno=0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5195 attached [pid 5195] set_robust_list(0x5555558b65e0, 24 [pid 5070] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5195 [pid 5195] <... set_robust_list resumed>) = 0 [pid 5195] chdir("./5") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5195] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5195] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5195] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5196], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5196 [pid 5195] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5180] exit_group(0 [pid 5192] <... futex resumed>) = ? [pid 5189] <... futex resumed>) = ? [pid 5180] <... exit_group resumed>) = ? [pid 5192] +++ exited with 0 +++ [pid 5189] +++ exited with 0 +++ [pid 5181] <... sendfile resumed>) = ? [pid 5181] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./4/binderfs") = 0 [pid 5074] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5069] getdents64(3, 0x5555558b7620 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5177] exit_group(0 [pid 5069] <... close resumed>) = 0 [pid 5193] <... futex resumed>) = ? [pid 5190] <... futex resumed>) = ? [pid 5177] <... exit_group resumed>) = ? [pid 5193] +++ exited with 0 +++ [pid 5190] +++ exited with 0 +++ [pid 5178] <... sendfile resumed>) = ? [pid 5178] +++ exited with 0 +++ [pid 5177] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./4/binderfs" [pid 5196] <... write resumed>) = 4194304 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5179] exit_group(0 [pid 5194] <... futex resumed>) = ? [pid 5191] <... futex resumed>) = ? [pid 5179] <... exit_group resumed>) = ? [pid 5194] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5196] <... ioctl resumed>) = 0 [pid 5196] close(3) = 0 [pid 5196] mkdir("./file0", 0777) = 0 [pid 5182] <... sendfile resumed>) = ? [pid 5196] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5182] +++ exited with 0 +++ [pid 5179] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./4/binderfs") = 0 [ 59.532354][ T5196] loop1: detected capacity change from 0 to 8192 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./4/file0") = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./4") = 0 [pid 5074] mkdir("./5", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5198 [pid 5072] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 59.607035][ T5196] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.632319][ T5196] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [pid 5072] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x5555558b65e0, 24 [pid 5072] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] <... set_robust_list resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5198] chdir("./5") = 0 [pid 5072] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(4, [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5198] <... prctl resumed>) = 0 [pid 5072] getdents64(4, [pid 5198] setpgid(0, 0) = 0 [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... close resumed>) = 0 [pid 5198] <... openat resumed>) = 3 [pid 5072] rmdir("./4/file0" [pid 5198] write(3, "1000", 4 [pid 5072] <... rmdir resumed>) = 0 [pid 5198] <... write resumed>) = 4 [pid 5198] close(3 [pid 5072] getdents64(3, [pid 5198] <... close resumed>) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5198] <... symlink resumed>) = 0 [pid 5198] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 5198] <... futex resumed>) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] rmdir("./4" [pid 5198] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./5", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5198] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5072] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5198] <... mprotect resumed>) = 0 [ 59.660866][ T5196] REISERFS (device loop1): using ordered data mode [ 59.699245][ T5196] reiserfs: using flush barriers [pid 5072] close(3 [pid 5198] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5199 attached [pid 5198] <... clone resumed>, parent_tid=[5199], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5199 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] lstat("./4/file0", [pid 5198] <... futex resumed>) = 0 [pid 5073] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5199] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5199] <... set_robust_list resumed>) = 0 [pid 5073] close(4 [pid 5072] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5200 ./strace-static-x86_64: Process 5200 attached [pid 5199] memfd_create("syzkaller", 0 [pid 5073] <... close resumed>) = 0 [pid 5200] set_robust_list(0x5555558b65e0, 24 [pid 5199] <... memfd_create resumed>) = 3 [pid 5073] rmdir("./4/file0" [pid 5200] <... set_robust_list resumed>) = 0 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5200] chdir("./5" [pid 5199] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5073] <... rmdir resumed>) = 0 [pid 5200] <... chdir resumed>) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] close(3 [pid 5200] <... prctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5200] setpgid(0, 0 [pid 5073] rmdir("./4" [pid 5200] <... setpgid resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] mkdir("./5", 0777 [pid 5200] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5200] write(3, "1000", 4 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5200] <... write resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5200] close(3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5200] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 59.705982][ T5196] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.723949][ T5196] REISERFS (device loop1): checking transaction log (loop1) [pid 5200] symlink("/dev/binderfs", "./binderfs" [pid 5073] close(3 [pid 5200] <... symlink resumed>) = 0 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5073] <... close resumed>) = 0 [pid 5200] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5200] <... futex resumed>) = 0 [pid 5200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5201 [pid 5200] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5200] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5200] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5202], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5202 [pid 5200] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5200] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5201 attached [pid 5201] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5201] chdir("./5"./strace-static-x86_64: Process 5202 attached ) = 0 [pid 5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5201] setpgid(0, 0 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5201] <... setpgid resumed>) = 0 [pid 5202] memfd_create("syzkaller", 0 [pid 5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5202] <... memfd_create resumed>) = 3 [pid 5201] <... openat resumed>) = 3 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5201] write(3, "1000", 4 [pid 5202] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5201] <... write resumed>) = 4 [pid 5201] close(3) = 0 [pid 5201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5201] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5201] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5201] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5203], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5203 [pid 5201] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5201] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5203] memfd_create("syzkaller", 0) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5199] <... write resumed>) = 4194304 [pid 5199] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5202] <... write resumed>) = 4194304 [pid 5202] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5202] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5199] <... ioctl resumed>) = 0 [pid 5199] close(3 [pid 5202] <... openat resumed>) = 4 [pid 5199] <... close resumed>) = 0 [pid 5199] mkdir("./file0", 0777 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5199] <... mkdir resumed>) = 0 [pid 5196] <... mount resumed>) = 0 [pid 5199] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file0") = 0 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] close(4) = 0 [pid 5196] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5195] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5196] <... futex resumed>) = 1 [pid 5195] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5196] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5195] <... futex resumed>) = 0 [pid 5196] openat(-1, "/proc/self/exe", O_RDONLY [pid 5195] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... openat resumed>) = 5 [pid 5195] <... futex resumed>) = 0 [pid 5196] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] sendfile(4, 5, NULL, 140737974943952 [pid 5195] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.911137][ T5196] REISERFS (device loop1): Using r5 hash to sort names [ 59.918721][ T5196] REISERFS (device loop1): using 3.5.x disk format [ 59.926186][ T5199] loop5: detected capacity change from 0 to 8192 [ 59.935365][ T5196] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 59.938143][ T5202] loop3: detected capacity change from 0 to 8192 [pid 5195] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] <... ioctl resumed>) = 0 [pid 5202] close(3 [pid 5203] <... write resumed>) = 4194304 [pid 5203] munmap(0x7fe8f3ed1000, 4194304 [pid 5202] <... close resumed>) = 0 [pid 5203] <... munmap resumed>) = 0 [pid 5202] mkdir("./file0", 0777 [pid 5203] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5202] <... mkdir resumed>) = 0 [pid 5203] <... openat resumed>) = 4 [pid 5202] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5203] ioctl(4, LOOP_SET_FD, 3 [pid 5195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5195] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5195] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 59.965911][ T5199] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.982814][ T5199] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 59.992803][ T5199] REISERFS (device loop5): using ordered data mode [ 60.000613][ T5199] reiserfs: using flush barriers [ 60.010073][ T5203] loop4: detected capacity change from 0 to 8192 [pid 5195] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5206 attached [pid 5203] <... ioctl resumed>) = 0 [pid 5206] set_robust_list(0x7fe8f42d09e0, 24 [pid 5203] close(3 [pid 5206] <... set_robust_list resumed>) = 0 [pid 5203] <... close resumed>) = 0 [pid 5206] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] mkdir("./file0", 0777) = 0 [pid 5203] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5195] <... clone resumed>, parent_tid=[5206], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5206 [pid 5195] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5206] open("./bus", O_RDONLY [ 60.017890][ T5199] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.028597][ T5202] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.035914][ T5203] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5195] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5195] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5195] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5195] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5208], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5208 [pid 5195] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x7fe8f42af9e0, 24) = 0 [ 60.047349][ T5202] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 60.062584][ T5199] REISERFS (device loop5): checking transaction log (loop5) [ 60.069588][ T5203] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 60.081249][ T5202] REISERFS (device loop3): using ordered data mode [ 60.090298][ T5203] REISERFS (device loop4): using ordered data mode [ 60.099705][ T5203] reiserfs: using flush barriers [ 60.107017][ T5202] reiserfs: using flush barriers [pid 5208] truncate("./bus", 6 [pid 5195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 60.110600][ T5203] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.113138][ T5202] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.130376][ T5203] REISERFS (device loop4): checking transaction log (loop4) [ 60.153367][ T5202] REISERFS (device loop3): checking transaction log (loop3) [pid 5202] <... mount resumed>) = 0 [ 60.233172][ T5202] REISERFS (device loop3): Using r5 hash to sort names [ 60.248234][ T5199] REISERFS (device loop5): Using r5 hash to sort names [ 60.249655][ T5202] REISERFS (device loop3): using 3.5.x disk format [ 60.256716][ T5199] REISERFS (device loop5): using 3.5.x disk format [ 60.267047][ T5202] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5202] chdir("./file0") = 0 [pid 5202] ioctl(4, LOOP_CLR_FD) = 0 [pid 5202] close(4) = 0 [pid 5202] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5200] <... futex resumed>) = 0 [pid 5202] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5200] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5200] <... futex resumed>) = 0 [pid 5202] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5200] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] <... open resumed>) = 4 [pid 5202] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5200] <... futex resumed>) = 0 [pid 5202] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5200] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5200] <... futex resumed>) = 0 [pid 5199] <... mount resumed>) = 0 [pid 5202] openat(-1, "/proc/self/exe", O_RDONLY [pid 5200] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5202] <... openat resumed>) = 5 [pid 5199] <... openat resumed>) = 3 [pid 5202] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] chdir("./file0" [pid 5202] <... futex resumed>) = 1 [pid 5200] <... futex resumed>) = 0 [pid 5199] <... chdir resumed>) = 0 [pid 5202] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5200] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] ioctl(4, LOOP_CLR_FD [pid 5202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5200] <... futex resumed>) = 0 [pid 5199] <... ioctl resumed>) = 0 [pid 5202] sendfile(4, 5, NULL, 140737974943952 [pid 5200] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] close(4) = 0 [pid 5199] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5199] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] <... futex resumed>) = 0 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... open resumed>) = 4 [pid 5199] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [ 60.279239][ T5199] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5199] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] <... futex resumed>) = 0 [pid 5199] openat(-1, "/proc/self/exe", O_RDONLY [pid 5198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... openat resumed>) = 5 [pid 5199] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5198] <... futex resumed>) = 1 [pid 5199] sendfile(4, 5, NULL, 140737974943952 [pid 5198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... truncate resumed>) = 0 [pid 5206] <... open resumed>) = 6 [pid 5208] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = 0 [pid 5208] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 60.334713][ T5203] REISERFS (device loop4): Using r5 hash to sort names [ 60.358136][ T5203] REISERFS (device loop4): using 3.5.x disk format [pid 5206] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] <... mount resumed>) = 0 [pid 5200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5200] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5203] <... openat resumed>) = 3 [pid 5200] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5203] chdir("./file0" [pid 5200] <... mprotect resumed>) = 0 [pid 5203] <... chdir resumed>) = 0 [pid 5200] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5203] ioctl(4, LOOP_CLR_FD [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5200] <... clone resumed>, parent_tid=[5209], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5209 [pid 5198] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5200] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5200] <... futex resumed>) = 0 [pid 5198] <... mprotect resumed>) = 0 [pid 5200] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5209 attached [pid 5203] <... ioctl resumed>) = 0 [pid 5203] close(4 [pid 5198] <... clone resumed>, parent_tid=[5210], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5210 [pid 5203] <... close resumed>) = 0 [pid 5198] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5203] <... futex resumed>) = 1 [pid 5198] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5210 attached [pid 5210] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5210] open("./bus", O_RDONLY [pid 5201] <... futex resumed>) = 0 [pid 5201] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5201] <... futex resumed>) = 1 [pid 5203] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5201] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... open resumed>) = 4 [pid 5203] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5201] <... futex resumed>) = 0 [pid 5203] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5201] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5201] <... futex resumed>) = 0 [pid 5203] openat(-1, "/proc/self/exe", O_RDONLY [pid 5201] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... openat resumed>) = 5 [pid 5203] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5203] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5209] open("./bus", O_RDONLY [pid 5201] <... futex resumed>) = 0 [ 60.377657][ T5203] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5201] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5201] <... futex resumed>) = 1 [pid 5203] sendfile(4, 5, NULL, 140737974943952 [pid 5201] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5200] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5200] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5200] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5211 attached [pid 5198] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] set_robust_list(0x7fe8f42af9e0, 24 [pid 5198] <... futex resumed>) = 0 [pid 5211] <... set_robust_list resumed>) = 0 [pid 5200] <... clone resumed>, parent_tid=[5211], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5211 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5211] truncate("./bus", 6 [pid 5200] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... mmap resumed>) = 0x7fe8f428f000 [pid 5200] <... futex resumed>) = 0 [pid 5198] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5200] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] <... mprotect resumed>) = 0 [pid 5198] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5212 attached , parent_tid=[5212], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5212 [pid 5198] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5212] truncate("./bus", 6 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] exit_group(0 [pid 5208] <... futex resumed>) = ? [pid 5206] <... futex resumed>) = ? [pid 5195] <... exit_group resumed>) = ? [pid 5208] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5201] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5201] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5201] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x7fe8f42d09e0, 24 [pid 5201] <... clone resumed>, parent_tid=[5213], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5213 [pid 5213] <... set_robust_list resumed>) = 0 [pid 5201] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] open("./bus", O_RDONLY [pid 5201] <... futex resumed>) = 0 [pid 5201] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... sendfile resumed>) = ? [pid 5196] +++ exited with 0 +++ [pid 5195] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5070] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./5/binderfs") = 0 [pid 5070] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5201] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5201] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5201] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5201] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5214], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5214 [pid 5201] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5201] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5214] truncate("./bus", 6 [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./5/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./5") = 0 [pid 5070] mkdir("./6", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5215 ./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5215] chdir("./6") = 0 [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5215] setpgid(0, 0) = 0 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5215] write(3, "1000", 4) = 4 [pid 5215] close(3) = 0 [pid 5215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5215] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5215] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5215] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5216 attached [pid 5216] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5215] <... clone resumed>, parent_tid=[5216], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5216 [pid 5215] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] <... set_robust_list resumed>) = 0 [pid 5216] memfd_create("syzkaller", 0) = 3 [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5211] <... truncate resumed>) = 0 [pid 5209] <... open resumed>) = 6 [pid 5211] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5211] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5212] <... truncate resumed>) = 0 [pid 5210] <... open resumed>) = 6 [pid 5212] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... futex resumed>) = 0 [pid 5210] <... futex resumed>) = 0 [pid 5212] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] <... write resumed>) = 4194304 [pid 5216] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5200] exit_group(0 [pid 5216] <... openat resumed>) = 4 [pid 5211] <... futex resumed>) = ? [pid 5209] <... futex resumed>) = ? [pid 5200] <... exit_group resumed>) = ? [pid 5216] ioctl(4, LOOP_SET_FD, 3 [pid 5211] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 5198] exit_group(0 [pid 5212] <... futex resumed>) = ? [pid 5210] <... futex resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5212] +++ exited with 0 +++ [pid 5210] +++ exited with 0 +++ [pid 5216] <... ioctl resumed>) = 0 [pid 5202] <... sendfile resumed>) = ? [pid 5216] close(3 [pid 5202] +++ exited with 0 +++ [pid 5200] +++ exited with 0 +++ [pid 5216] <... close resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5216] mkdir("./file0", 0777) = 0 [pid 5216] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5072] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5214] <... truncate resumed>) = 0 [pid 5213] <... open resumed>) = 6 [pid 5072] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] <... futex resumed>) = 0 [pid 5213] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] lstat("./5/binderfs", [pid 5214] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... futex resumed>) = 0 [pid 5072] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5213] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] unlink("./5/binderfs") = 0 [pid 5072] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 60.772736][ T5216] loop1: detected capacity change from 0 to 8192 [ 60.795994][ T5216] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 60.812203][ T5216] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [pid 5199] <... sendfile resumed>) = ? [pid 5199] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5074] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./5/binderfs") = 0 [pid 5074] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] exit_group(0 [pid 5214] <... futex resumed>) = ? [pid 5213] <... futex resumed>) = ? [pid 5201] <... exit_group resumed>) = ? [pid 5214] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [ 60.824610][ T5216] REISERFS (device loop1): using ordered data mode [ 60.831335][ T5216] reiserfs: using flush barriers [ 60.839024][ T5216] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.858890][ T5216] REISERFS (device loop1): checking transaction log (loop1) [pid 5203] <... sendfile resumed>) = ? [pid 5203] +++ exited with 0 +++ [pid 5201] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5201, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./5/binderfs") = 0 [ 60.909820][ T5216] REISERFS (device loop1): Using r5 hash to sort names [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./5/file0") = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./5" [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./6", 0777 [pid 5074] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5218] chdir("./6" [pid 5074] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... chdir resumed>) = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... prctl resumed>) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5218] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs" [ 60.968140][ T5216] REISERFS (device loop1): using 3.5.x disk format [ 61.004894][ T5216] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5074] fstat(4, [pid 5218] <... symlink resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(4, [pid 5218] <... futex resumed>) = 0 [pid 5216] <... mount resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5218] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5074] getdents64(4, [pid 5218] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5216] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5218] <... mprotect resumed>) = 0 [pid 5216] chdir("./file0" [pid 5074] close(4 [pid 5218] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5216] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5216] ioctl(4, LOOP_CLR_FD [pid 5074] rmdir("./5/file0" [pid 5218] <... clone resumed>, parent_tid=[5219], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5219 [pid 5218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5216] close(4 [pid 5074] getdents64(3, [pid 5218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] <... close resumed>) = 0 [pid 5216] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5216] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] <... futex resumed>) = 0 [pid 5216] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5215] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... open resumed>) = 4 [pid 5074] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5216] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(3 [pid 5216] <... futex resumed>) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5216] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./5" [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] <... futex resumed>) = 0 [pid 5216] openat(-1, "/proc/self/exe", O_RDONLY [pid 5215] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... openat resumed>) = 5 [pid 5074] <... rmdir resumed>) = 0 [pid 5216] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] mkdir("./6", 0777 [pid 5216] <... futex resumed>) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5216] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] <... futex resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5216] sendfile(4, 5, NULL, 140737974943952 [pid 5215] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 5219 attached ) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5219] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5219] <... set_robust_list resumed>) = 0 [pid 5074] close(3 [pid 5219] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5219] <... memfd_create resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5220 ./strace-static-x86_64: Process 5220 attached [pid 5219] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5220] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5220] chdir("./6") = 0 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5220] setpgid(0, 0) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5220] write(3, "1000", 4) = 4 [pid 5220] close(3) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5220] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5220] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5220] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5221], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5221 [pid 5220] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5221 attached [pid 5221] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5215] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5215] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5215] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5222], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5222 [pid 5215] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5222 attached [pid 5073] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5222] set_robust_list(0x7fe8f42d09e0, 24 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5222] <... set_robust_list resumed>) = 0 [pid 5073] getdents64(4, [pid 5222] open("./bus", O_RDONLY [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./5/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./5") = 0 [pid 5073] mkdir("./6", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5223 ./strace-static-x86_64: Process 5223 attached [pid 5223] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5223] chdir("./6") = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5223] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5223] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5223] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] <... mprotect resumed>) = 0 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5215] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5215] <... futex resumed>) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5223] <... clone resumed>, parent_tid=[5224], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5224 [pid 5215] <... mmap resumed>) = 0x7fe8f428f000 [pid 5223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5223] <... futex resumed>) = 0 [pid 5215] <... mprotect resumed>) = 0 [pid 5223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5225], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5225 [pid 5215] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5225 attached [pid 5225] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5225] truncate("./bus", 6./strace-static-x86_64: Process 5224 attached [pid 5224] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5221] <... write resumed>) = 4194304 [pid 5221] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5221] <... openat resumed>) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5219] <... write resumed>) = 4194304 [pid 5219] munmap(0x7fe8f3ed1000, 4194304 [pid 5221] <... ioctl resumed>) = 0 [pid 5221] close(3) = 0 [pid 5219] <... munmap resumed>) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5221] mkdir("./file0", 0777 [pid 5219] <... openat resumed>) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3 [pid 5221] <... mkdir resumed>) = 0 [pid 5221] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5219] <... ioctl resumed>) = 0 [pid 5219] close(3) = 0 [pid 5224] <... write resumed>) = 4194304 [pid 5224] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5219] mkdir("./file0", 0777 [pid 5224] <... openat resumed>) = 4 [pid 5219] <... mkdir resumed>) = 0 [pid 5219] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [ 61.288916][ T5221] loop5: detected capacity change from 0 to 8192 [ 61.302447][ T5219] loop3: detected capacity change from 0 to 8192 [ 61.311761][ T5221] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.325141][ T5221] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [pid 5224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5224] close(3) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [ 61.336906][ T5221] REISERFS (device loop5): using ordered data mode [ 61.338530][ T5224] loop4: detected capacity change from 0 to 8192 [ 61.344144][ T5221] reiserfs: using flush barriers [ 61.359364][ T5221] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.359469][ T5219] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.377134][ T5221] REISERFS (device loop5): checking transaction log (loop5) [ 61.390248][ T5224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.399347][ T5219] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 61.418947][ T5219] REISERFS (device loop3): using ordered data mode [ 61.425906][ T5219] reiserfs: using flush barriers [ 61.432423][ T5224] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 61.433079][ T5219] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.444033][ T5224] REISERFS (device loop4): using ordered data mode [ 61.465519][ T5224] reiserfs: using flush barriers [ 61.472239][ T5224] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5224] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5225] <... truncate resumed>) = 0 [pid 5222] <... open resumed>) = 6 [pid 5225] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5225] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 61.491089][ T5219] REISERFS (device loop3): checking transaction log (loop3) [ 61.505816][ T5224] REISERFS (device loop4): checking transaction log (loop4) [pid 5222] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] exit_group(0 [pid 5225] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = ? [pid 5215] <... exit_group resumed>) = ? [pid 5225] +++ exited with 0 +++ [pid 5222] +++ exited with 0 +++ [pid 5216] <... sendfile resumed>) = ? [pid 5216] +++ exited with 0 +++ [pid 5215] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5070] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5070] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./6/binderfs") = 0 [pid 5070] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... mount resumed>) = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5221] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... futex resumed>) = 0 [ 61.589442][ T5221] REISERFS (device loop5): Using r5 hash to sort names [ 61.597700][ T5221] REISERFS (device loop5): using 3.5.x disk format [ 61.604519][ T5221] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 61.619678][ T5219] REISERFS (device loop3): Using r5 hash to sort names [ 61.631094][ T5219] REISERFS (device loop3): using 3.5.x disk format [pid 5220] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 1 [pid 5220] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5221] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5221] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] <... mount resumed>) = 0 [pid 5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5219] chdir("./file0") = 0 [pid 5219] ioctl(4, LOOP_CLR_FD [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... mount resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 1 [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5221] openat(-1, "/proc/self/exe", O_RDONLY [pid 5220] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... openat resumed>) = 3 [pid 5221] <... openat resumed>) = 5 [pid 5221] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] <... ioctl resumed>) = 0 [pid 5219] close(4 [pid 5220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] chdir("./file0" [pid 5220] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... chdir resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 1 [pid 5224] ioctl(4, LOOP_CLR_FD [pid 5221] sendfile(4, 5, NULL, 140737974943952 [pid 5220] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... ioctl resumed>) = 0 [pid 5224] close(4) = 0 [pid 5224] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5219] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5224] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... open resumed>) = 4 [ 61.638799][ T5224] REISERFS (device loop4): Using r5 hash to sort names [ 61.643847][ T5219] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 61.646330][ T5224] REISERFS (device loop4): using 3.5.x disk format [ 61.663585][ T5224] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5224] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = 1 [pid 5070] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5219] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... open resumed>) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5219] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] openat(-1, "/proc/self/exe", O_RDONLY [pid 5223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5070] lstat("./6/file0", [pid 5224] <... openat resumed>) = 5 [pid 5219] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] openat(-1, "/proc/self/exe", O_RDONLY [pid 5218] <... futex resumed>) = 0 [pid 5224] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... openat resumed>) = 5 [pid 5218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5219] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = 0 [pid 5219] sendfile(4, 5, NULL, 140737974943952 [pid 5218] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] sendfile(4, 5, NULL, 140737974943952 [pid 5223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, [pid 5220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5220] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5220] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] close(4 [pid 5220] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5070] <... close resumed>) = 0 [pid 5220] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5070] rmdir("./6/file0" [pid 5220] <... mprotect resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5220] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5220] <... clone resumed>, parent_tid=[5229], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5229 [pid 5070] close(3 [pid 5220] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5070] rmdir("./6" [pid 5220] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... rmdir resumed>) = 0 [pid 5070] mkdir("./7", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3./strace-static-x86_64: Process 5229 attached ) = 0 [pid 5229] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5229] open("./bus", O_RDONLY [pid 5070] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5230 ./strace-static-x86_64: Process 5230 attached [pid 5230] set_robust_list(0x5555558b65e0, 24 [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5230] <... set_robust_list resumed>) = 0 [pid 5223] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5230] chdir("./7" [pid 5223] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5218] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5223] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5218] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5230] <... chdir resumed>) = 0 [pid 5223] <... mprotect resumed>) = 0 [pid 5218] <... mprotect resumed>) = 0 [pid 5223] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5218] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5231 attached ./strace-static-x86_64: Process 5232 attached [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5232] set_robust_list(0x7fe8f42d09e0, 24 [pid 5231] set_robust_list(0x7fe8f42d09e0, 24 [pid 5230] <... prctl resumed>) = 0 [pid 5223] <... clone resumed>, parent_tid=[5231], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5231 [pid 5218] <... clone resumed>, parent_tid=[5232], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5232 [pid 5232] <... set_robust_list resumed>) = 0 [pid 5231] <... set_robust_list resumed>) = 0 [pid 5230] setpgid(0, 0 [pid 5223] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] open("./bus", O_RDONLY [pid 5231] open("./bus", O_RDONLY [pid 5230] <... setpgid resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5223] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... openat resumed>) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5230] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5230] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5233], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5233 [pid 5230] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5233 attached [pid 5220] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5220] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5233] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5220] <... mprotect resumed>) = 0 [pid 5220] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5234 attached , parent_tid=[5234], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5234 [pid 5233] <... set_robust_list resumed>) = 0 [pid 5234] set_robust_list(0x7fe8f42af9e0, 24 [pid 5233] memfd_create("syzkaller", 0 [pid 5220] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... set_robust_list resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5234] truncate("./bus", 6 [pid 5233] <... memfd_create resumed>) = 3 [pid 5220] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] <... mmap resumed>) = 0x7fe8f428f000 [pid 5223] <... mmap resumed>) = 0x7fe8f428f000 [pid 5218] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5223] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5218] <... mprotect resumed>) = 0 [pid 5223] <... mprotect resumed>) = 0 [pid 5218] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5223] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5235 attached [pid 5218] <... clone resumed>, parent_tid=[5235], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5235 [pid 5223] <... clone resumed>, parent_tid=[5236], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5236 [pid 5218] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5236 attached [pid 5223] <... futex resumed>) = 0 [pid 5218] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] set_robust_list(0x7fe8f42af9e0, 24 [pid 5223] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... set_robust_list resumed>) = 0 [pid 5220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] truncate("./bus", 6 [pid 5235] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5235] truncate("./bus", 6 [pid 5233] <... write resumed>) = 4194304 [pid 5233] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5233] close(3) = 0 [pid 5233] mkdir("./file0", 0777) = 0 [pid 5233] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 61.902455][ T5233] loop1: detected capacity change from 0 to 8192 [ 61.915327][ T5233] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 61.930950][ T5233] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 61.940405][ T5233] REISERFS (device loop1): using ordered data mode [ 61.947235][ T5233] reiserfs: using flush barriers [ 61.953427][ T5233] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.970325][ T5233] REISERFS (device loop1): checking transaction log (loop1) [pid 5229] <... open resumed>) = 6 [pid 5229] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5229] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file0") = 0 [pid 5233] ioctl(4, LOOP_CLR_FD) = 0 [pid 5233] close(4) = 0 [pid 5233] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5233] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... truncate resumed>) = 0 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] <... open resumed>) = 6 [pid 5230] <... futex resumed>) = 0 [pid 5236] <... truncate resumed>) = 0 [pid 5235] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... truncate resumed>) = 0 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5232] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... open resumed>) = 6 [pid 5230] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5234] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... open resumed>) = 4 [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5235] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] <... futex resumed>) = 0 [pid 5233] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... futex resumed>) = 0 [pid 5236] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] <... futex resumed>) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5233] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... futex resumed>) = 0 [pid 5233] openat(-1, "/proc/self/exe", O_RDONLY [pid 5230] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... openat resumed>) = 5 [ 62.073240][ T5233] REISERFS (device loop1): Using r5 hash to sort names [ 62.080334][ T5233] REISERFS (device loop1): using 3.5.x disk format [ 62.093578][ T5233] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5233] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5233] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... futex resumed>) = 0 [pid 5233] sendfile(4, 5, NULL, 140737974943952 [pid 5230] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] exit_group(0 [pid 5234] <... futex resumed>) = ? [pid 5229] <... futex resumed>) = ? [pid 5220] <... exit_group resumed>) = ? [pid 5234] +++ exited with 0 +++ [pid 5229] +++ exited with 0 +++ [pid 5221] <... sendfile resumed>) = ? [pid 5221] +++ exited with 0 +++ [pid 5220] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./6/binderfs") = 0 [pid 5074] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] exit_group(0 [pid 5235] <... futex resumed>) = ? [pid 5232] <... futex resumed>) = ? [pid 5218] <... exit_group resumed>) = ? [pid 5235] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5219] <... sendfile resumed>) = ? [pid 5219] +++ exited with 0 +++ [pid 5218] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5072] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5230] <... futex resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] fstat(3, [pid 5230] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5072] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5230] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5072] getdents64(3, [pid 5230] <... mprotect resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5230] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5072] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5230] <... clone resumed>, parent_tid=[5238], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5238 [pid 5072] lstat("./6/binderfs", [pid 5230] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5230] <... futex resumed>) = 0 [pid 5072] unlink("./6/binderfs" [pid 5230] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5238 attached [pid 5238] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5238] open("./bus", O_RDONLY [pid 5223] exit_group(0 [pid 5231] <... futex resumed>) = ? [pid 5236] <... futex resumed>) = ? [pid 5223] <... exit_group resumed>) = ? [pid 5236] +++ exited with 0 +++ [pid 5231] +++ exited with 0 +++ [pid 5224] <... sendfile resumed>) = ? [pid 5224] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./6/binderfs") = 0 [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5230] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5230] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5230] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5239], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5239 [pid 5230] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5239 attached [pid 5239] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5239] truncate("./bus", 6 [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] <... umount2 resumed>) = 0 [pid 5074] fstat(4, [pid 5072] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5072] lstat("./6/file0", [pid 5074] getdents64(4, [pid 5072] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./6/file0" [pid 5072] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] fstat(4, [pid 5074] getdents64(3, [pid 5072] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 5074] close(3 [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5074] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 5074] rmdir("./6" [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] close(4 [pid 5074] mkdir("./7", 0777 [pid 5072] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] rmdir("./6/file0" [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5072] close(3 [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./6" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./7", 0777 [pid 5074] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5240 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5241] chdir("./7") = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5240 attached [pid 5241] setpgid(0, 0) = 0 [pid 5240] set_robust_list(0x5555558b65e0, 24 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] <... set_robust_list resumed>) = 0 [pid 5241] <... openat resumed>) = 3 [pid 5240] chdir("./7" [pid 5241] write(3, "1000", 4 [pid 5240] <... chdir resumed>) = 0 [pid 5241] <... write resumed>) = 4 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5241] close(3 [pid 5240] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5241] <... close resumed>) = 0 [pid 5240] setpgid(0, 0 [pid 5241] symlink("/dev/binderfs", "./binderfs" [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] <... setpgid resumed>) = 0 [pid 5241] <... symlink resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5241] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... futex resumed>) = 0 [pid 5240] write(3, "1000", 4 [pid 5073] lstat("./6/file0", [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5240] <... write resumed>) = 4 [pid 5240] close(3 [pid 5241] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5240] <... close resumed>) = 0 [pid 5073] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5241] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5240] symlink("/dev/binderfs", "./binderfs" [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5241] <... mprotect resumed>) = 0 [pid 5240] <... symlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5240] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] <... futex resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5241] <... clone resumed>, parent_tid=[5242], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5242 [pid 5073] fstat(4, [pid 5241] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] getdents64(4, [pid 5241] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5242 attached [pid 5240] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5073] getdents64(4, [pid 5242] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5240] <... mprotect resumed>) = 0 [pid 5242] <... set_robust_list resumed>) = 0 [pid 5073] close(4 [pid 5242] memfd_create("syzkaller", 0 [pid 5240] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5073] <... close resumed>) = 0 [pid 5242] <... memfd_create resumed>) = 3 [pid 5073] rmdir("./6/file0"./strace-static-x86_64: Process 5243 attached [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] <... clone resumed>, parent_tid=[5243], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5243 [pid 5243] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5240] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... rmdir resumed>) = 0 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5242] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5240] <... futex resumed>) = 0 [pid 5073] getdents64(3, [pid 5240] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./6" [pid 5243] memfd_create("syzkaller", 0) = 3 [pid 5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./7", 0777 [pid 5243] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5244 ./strace-static-x86_64: Process 5244 attached [pid 5244] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5244] chdir("./7") = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5244] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5244] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5245 attached , parent_tid=[5245], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5245 [pid 5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5245] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5239] <... truncate resumed>) = 0 [pid 5245] memfd_create("syzkaller", 0 [pid 5244] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... open resumed>) = 6 [pid 5239] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... memfd_create resumed>) = 3 [pid 5244] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5238] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5239] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... futex resumed>) = 0 [pid 5245] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5238] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5242] <... write resumed>) = 4194304 [pid 5242] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5243] <... write resumed>) = 4194304 [pid 5242] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5243] munmap(0x7fe8f3ed1000, 4194304 [pid 5242] <... openat resumed>) = 4 [pid 5242] ioctl(4, LOOP_SET_FD, 3 [pid 5243] <... munmap resumed>) = 0 [pid 5242] <... ioctl resumed>) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5243] ioctl(4, LOOP_SET_FD, 3 [pid 5242] close(3 [pid 5243] <... ioctl resumed>) = 0 [pid 5230] exit_group(0 [pid 5239] <... futex resumed>) = ? [pid 5238] <... futex resumed>) = ? [pid 5230] <... exit_group resumed>) = ? [pid 5245] <... write resumed>) = 4194304 [pid 5243] close(3 [pid 5242] <... close resumed>) = 0 [pid 5239] +++ exited with 0 +++ [pid 5238] +++ exited with 0 +++ [pid 5245] munmap(0x7fe8f3ed1000, 4194304 [pid 5243] <... close resumed>) = 0 [pid 5242] mkdir("./file0", 0777 [pid 5243] mkdir("./file0", 0777 [pid 5242] <... mkdir resumed>) = 0 [pid 5245] <... munmap resumed>) = 0 [pid 5242] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5245] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] <... mkdir resumed>) = 0 [pid 5243] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5245] <... openat resumed>) = 4 [ 62.592919][ T5242] loop3: detected capacity change from 0 to 8192 [ 62.608847][ T5243] loop5: detected capacity change from 0 to 8192 [ 62.629076][ T5242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5233] <... sendfile resumed>) = ? [pid 5245] close(3) = 0 [pid 5245] mkdir("./file0", 0777) = 0 [pid 5245] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5233] +++ exited with 0 +++ [pid 5230] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5070] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./7/binderfs") = 0 [ 62.629746][ T5245] loop4: detected capacity change from 0 to 8192 [ 62.644969][ T5242] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 62.659304][ T5242] REISERFS (device loop3): using ordered data mode [ 62.666700][ T5242] reiserfs: using flush barriers [ 62.666810][ T5243] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.672665][ T5242] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.688567][ T5243] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 62.702320][ T5242] REISERFS (device loop3): checking transaction log (loop3) [ 62.711352][ T5245] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.740004][ T5243] REISERFS (device loop5): using ordered data mode [ 62.765517][ T5243] reiserfs: using flush barriers [ 62.771885][ T5245] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 62.778070][ T5242] REISERFS (device loop3): Using r5 hash to sort names [ 62.781125][ T5243] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.804341][ T5245] REISERFS (device loop4): using ordered data mode [ 62.805267][ T5242] REISERFS (device loop3): using 3.5.x disk format [ 62.811149][ T5245] reiserfs: using flush barriers [ 62.812315][ T5243] REISERFS (device loop5): checking transaction log (loop5) [ 62.830149][ T5245] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.851185][ T5242] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5070] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] <... mount resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5242] chdir("./file0") = 0 [pid 5242] ioctl(4, LOOP_CLR_FD) = 0 [pid 5242] close(4) = 0 [pid 5242] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... futex resumed>) = 1 [pid 5242] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [ 62.853310][ T5245] REISERFS (device loop4): checking transaction log (loop4) [pid 5242] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5242] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5241] <... futex resumed>) = 0 [pid 5242] openat(-1, "/proc/self/exe", O_RDONLY [pid 5241] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = 0 [pid 5242] <... openat resumed>) = 5 [pid 5242] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] <... futex resumed>) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5242] sendfile(4, 5, NULL, 140737974943952 [pid 5241] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... futex resumed>) = 0 [pid 5241] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./7/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./7") = 0 [pid 5070] mkdir("./8", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5249 ./strace-static-x86_64: Process 5249 attached [pid 5249] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5249] chdir("./8") = 0 [pid 5241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5241] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... prctl resumed>) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5249] setpgid(0, 0 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5249] <... setpgid resumed>) = 0 [pid 5241] <... mmap resumed>) = 0x7fe8f42b0000 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 62.905809][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 62.905824][ T27] audit: type=1800 audit(1671282286.313:87): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop3" ino=2 res=0 errno=0 [pid 5241] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE [pid 5249] <... openat resumed>) = 3 [pid 5241] <... mprotect resumed>) = 0 [pid 5249] write(3, "1000", 4 [pid 5241] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5249] <... write resumed>) = 4 [pid 5241] <... clone resumed>, parent_tid=[5250], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5250 [pid 5241] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5250 attached [pid 5249] close(3 [pid 5250] set_robust_list(0x7fe8f42d09e0, 24 [pid 5249] <... close resumed>) = 0 [pid 5250] <... set_robust_list resumed>) = 0 [pid 5249] symlink("/dev/binderfs", "./binderfs" [pid 5250] open("./bus", O_RDONLY [pid 5249] <... symlink resumed>) = 0 [pid 5249] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5243] <... mount resumed>) = 0 [ 62.990097][ T5243] REISERFS (device loop5): Using r5 hash to sort names [ 63.003711][ T5243] REISERFS (device loop5): using 3.5.x disk format [ 63.015727][ T5245] REISERFS (device loop4): Using r5 hash to sort names [ 63.022942][ T5245] REISERFS (device loop4): using 3.5.x disk format [ 63.025380][ T5243] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5243] chdir("./file0") = 0 [pid 5243] ioctl(4, LOOP_CLR_FD) = 0 [pid 5243] close(4 [pid 5249] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5241] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5241] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5241] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5251], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5251 [pid 5241] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] <... close resumed>) = 0 [pid 5249] <... mprotect resumed>) = 0 [pid 5249] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5243] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... clone resumed>, parent_tid=[5252], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5252 [pid 5249] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5252 attached [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5245] chdir("./file0") = 0 ./strace-static-x86_64: Process 5251 attached [pid 5252] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5245] ioctl(4, LOOP_CLR_FD [pid 5243] <... futex resumed>) = 1 [pid 5240] <... futex resumed>) = 0 [pid 5251] set_robust_list(0x7fe8f42af9e0, 24 [pid 5245] <... ioctl resumed>) = 0 [pid 5243] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5240] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... set_robust_list resumed>) = 0 [pid 5245] close(4 [pid 5240] <... futex resumed>) = 0 [pid 5252] memfd_create("syzkaller", 0 [pid 5251] <... set_robust_list resumed>) = 0 [pid 5243] <... open resumed>) = 4 [pid 5240] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... memfd_create resumed>) = 3 [pid 5251] truncate("./bus", 6 [pid 5243] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5243] <... futex resumed>) = 0 [ 63.032254][ T5245] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5240] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5243] openat(-1, "/proc/self/exe", O_RDONLY [pid 5240] <... futex resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5245] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... openat resumed>) = 5 [pid 5240] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5243] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5244] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... open resumed>) = 4 [pid 5243] <... futex resumed>) = 0 [pid 5240] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] sendfile(4, 5, NULL, 140737974943952 [pid 5240] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5240] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 5245] openat(-1, "/proc/self/exe", O_RDONLY [pid 5244] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... openat resumed>) = 5 [pid 5245] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5245] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 5245] sendfile(4, 5, NULL, 140737974943952 [pid 5244] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5240] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5240] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5240] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5244] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5244] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5240] <... clone resumed>, parent_tid=[5253], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5253 [pid 5240] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... clone resumed>, parent_tid=[5254], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5254 [pid 5240] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5254 attached ./strace-static-x86_64: Process 5253 attached [pid 5244] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] set_robust_list(0x7fe8f42d09e0, 24 [pid 5253] set_robust_list(0x7fe8f42d09e0, 24 [pid 5244] <... futex resumed>) = 0 [pid 5254] <... set_robust_list resumed>) = 0 [pid 5253] <... set_robust_list resumed>) = 0 [pid 5244] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 63.072170][ T27] audit: type=1800 audit(1671282286.473:88): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop5" ino=2 res=0 errno=0 [ 63.105156][ T27] audit: type=1800 audit(1671282286.503:89): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5254] open("./bus", O_RDONLY [pid 5253] open("./bus", O_RDONLY [pid 5252] <... write resumed>) = 4194304 [pid 5252] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5252] close(3) = 0 [pid 5252] mkdir("./file0", 0777) = 0 [pid 5252] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5244] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5240] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5256], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5256 [pid 5244] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5256 attached [pid 5240] <... futex resumed>) = 0 [pid 5256] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5256] truncate("./bus", 6 [ 63.194349][ T5252] loop1: detected capacity change from 0 to 8192 [ 63.209461][ T5252] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.222684][ T5252] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 63.231992][ T5252] REISERFS (device loop1): using ordered data mode [ 63.238965][ T5252] reiserfs: using flush barriers [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5240] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5240] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5257], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5257 [pid 5240] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5257 attached [pid 5257] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5257] truncate("./bus", 6 [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 63.245836][ T5252] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.262685][ T5252] REISERFS (device loop1): checking transaction log (loop1) [pid 5251] <... truncate resumed>) = 0 [pid 5250] <... open resumed>) = 6 [pid 5240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = 0 [pid 5251] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 63.293826][ T27] audit: type=1804 audit(1671282286.693:90): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.h7QRjJ/7/file0/bus" dev="loop3" ino=2 res=1 errno=0 [pid 5250] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... mount resumed>) = 0 [pid 5252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5252] chdir("./file0") = 0 [pid 5252] ioctl(4, LOOP_CLR_FD) = 0 [pid 5252] close(4) = 0 [pid 5252] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5249] <... futex resumed>) = 0 [pid 5252] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5249] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5249] <... futex resumed>) = 0 [ 63.325037][ T27] audit: type=1800 audit(1671282286.693:91): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 63.352452][ T5252] REISERFS (device loop1): Using r5 hash to sort names [ 63.359580][ T5252] REISERFS (device loop1): using 3.5.x disk format [ 63.376360][ T5252] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5252] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5249] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... open resumed>) = 4 [pid 5252] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5252] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5249] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5249] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5252] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5249] <... futex resumed>) = 0 [pid 5252] sendfile(4, 5, NULL, 140737974943952 [pid 5249] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] exit_group(0 [pid 5251] <... futex resumed>) = ? [pid 5250] <... futex resumed>) = ? [pid 5241] <... exit_group resumed>) = ? [pid 5251] +++ exited with 0 +++ [pid 5250] +++ exited with 0 +++ [pid 5242] <... sendfile resumed>) = ? [pid 5242] +++ exited with 0 +++ [pid 5241] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5072] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [ 63.406058][ T27] audit: type=1800 audit(1671282286.813:92): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop1" ino=2 res=0 errno=0 [pid 5072] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./7/binderfs") = 0 [pid 5072] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5249] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5249] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5249] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5258], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5258 [pid 5249] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5258 attached [pid 5258] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5258] open("./bus", O_RDONLY [pid 5256] <... truncate resumed>) = 0 [pid 5256] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... open resumed>) = 6 [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... open resumed>) = 6 [pid 5257] <... truncate resumed>) = 0 [pid 5254] <... futex resumed>) = 0 [pid 5253] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... futex resumed>) = 0 [ 63.500714][ T27] audit: type=1804 audit(1671282286.903:93): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/7/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5253] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5249] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] fstat(4, [pid 5249] <... mmap resumed>) = 0x7fe8f428f000 [pid 5249] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE [pid 5072] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5249] <... mprotect resumed>) = 0 [pid 5072] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5249] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5072] getdents64(4, [pid 5249] <... clone resumed>, parent_tid=[5259], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5259 [pid 5072] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5249] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5249] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] close(4) = 0 [pid 5072] rmdir("./7/file0"./strace-static-x86_64: Process 5259 attached ) = 0 [pid 5259] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5072] getdents64(3, [pid 5259] truncate("./bus", 6 [pid 5072] <... getdents64 resumed>0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./7") = 0 [pid 5072] mkdir("./8", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5260 ./strace-static-x86_64: Process 5260 attached [pid 5260] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5260] chdir("./8") = 0 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5260] setpgid(0, 0) = 0 [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5260] write(3, "1000", 4) = 4 [pid 5260] close(3) = 0 [pid 5260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5260] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5260] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5261 attached [pid 5261] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5260] <... clone resumed>, parent_tid=[5261], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5261 [pid 5261] <... set_robust_list resumed>) = 0 [pid 5260] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] memfd_create("syzkaller", 0 [pid 5260] <... futex resumed>) = 0 [pid 5261] <... memfd_create resumed>) = 3 [pid 5260] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 63.534211][ T27] audit: type=1800 audit(1671282286.933:94): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 63.570522][ T27] audit: type=1804 audit(1671282286.933:95): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.KsgJcQ/7/file0/bus" dev="loop5" ino=2 res=1 errno=0 [pid 5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5240] exit_group(0 [pid 5257] <... futex resumed>) = ? [pid 5253] <... futex resumed>) = ? [pid 5240] <... exit_group resumed>) = ? [pid 5257] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ [pid 5244] exit_group(0 [pid 5256] <... futex resumed>) = ? [pid 5254] <... futex resumed>) = ? [pid 5244] <... exit_group resumed>) = ? [pid 5256] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 5245] <... sendfile resumed>) = ? [pid 5243] <... sendfile resumed>) = ? [pid 5245] +++ exited with 0 +++ [pid 5244] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5073] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] +++ exited with 0 +++ [pid 5240] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, [pid 5074] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 5074] fstat(3, [pid 5073] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] lstat("./7/binderfs", [pid 5074] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./7/binderfs" [pid 5074] lstat("./7/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./7/binderfs") = 0 [pid 5074] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] <... write resumed>) = 4194304 [pid 5261] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5261] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5261] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5261] close(3) = 0 [pid 5261] mkdir("./file0", 0777) = 0 [pid 5261] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./7/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./7") = 0 [pid 5073] mkdir("./8", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 63.735285][ T5261] loop3: detected capacity change from 0 to 8192 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5263 ./strace-static-x86_64: Process 5263 attached [pid 5263] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5263] chdir("./8") = 0 [pid 5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5263] setpgid(0, 0) = 0 [pid 5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5263] write(3, "1000", 4) = 4 [pid 5263] close(3) = 0 [pid 5263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5263] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5263] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5264], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5264 [pid 5263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5264 attached [pid 5264] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5264] memfd_create("syzkaller", 0) = 3 [ 63.802290][ T5261] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.827793][ T5261] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 63.840684][ T5261] REISERFS (device loop3): using ordered data mode [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5074] <... umount2 resumed>) = 0 [pid 5259] <... truncate resumed>) = 0 [pid 5258] <... open resumed>) = 6 [pid 5259] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5259] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 63.846211][ T27] audit: type=1804 audit(1671282287.253:96): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.RlmWgA/8/file0/bus" dev="loop1" ino=2 res=1 errno=0 [ 63.847876][ T5261] reiserfs: using flush barriers [ 63.878937][ T5261] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5074] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./7/file0") = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./7") = 0 [pid 5074] mkdir("./8", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3 [pid 5264] <... write resumed>) = 4194304 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5265 [pid 5264] munmap(0x7fe8f3ed1000, 4194304) = 0 ./strace-static-x86_64: Process 5265 attached [ 63.901948][ T5261] REISERFS (device loop3): checking transaction log (loop3) [pid 5264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5265] set_robust_list(0x5555558b65e0, 24 [pid 5264] <... openat resumed>) = 4 [pid 5265] <... set_robust_list resumed>) = 0 [pid 5264] ioctl(4, LOOP_SET_FD, 3 [pid 5265] chdir("./8") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5264] <... ioctl resumed>) = 0 [pid 5265] <... prctl resumed>) = 0 [pid 5264] close(3 [pid 5265] setpgid(0, 0 [pid 5264] <... close resumed>) = 0 [pid 5265] <... setpgid resumed>) = 0 [pid 5264] mkdir("./file0", 0777 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5264] <... mkdir resumed>) = 0 [pid 5265] <... openat resumed>) = 3 [pid 5264] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5265] write(3, "1000", 4) = 4 [pid 5265] close(3) = 0 [pid 5265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5265] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5265] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5265] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5267], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5267 [pid 5265] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5267 attached [pid 5267] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5267] memfd_create("syzkaller", 0) = 3 [ 63.969134][ T5264] loop4: detected capacity change from 0 to 8192 [ 63.999952][ T5264] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5249] exit_group(0 [pid 5259] <... futex resumed>) = ? [pid 5258] <... futex resumed>) = ? [pid 5249] <... exit_group resumed>) = ? [pid 5259] +++ exited with 0 +++ [pid 5258] +++ exited with 0 +++ [pid 5252] <... sendfile resumed>) = ? [pid 5252] +++ exited with 0 +++ [pid 5249] +++ exited with 0 +++ [pid 5261] <... mount resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5070] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./8/binderfs") = 0 [pid 5261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5070] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] <... openat resumed>) = 3 [ 64.001723][ T5261] REISERFS (device loop3): Using r5 hash to sort names [ 64.025051][ T5261] REISERFS (device loop3): using 3.5.x disk format [ 64.030479][ T5264] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 64.032845][ T5261] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 64.056643][ T5264] REISERFS (device loop4): using ordered data mode [ 64.063870][ T5264] reiserfs: using flush barriers [pid 5261] chdir("./file0" [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5261] <... chdir resumed>) = 0 [pid 5261] ioctl(4, LOOP_CLR_FD) = 0 [pid 5261] close(4) = 0 [pid 5261] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5260] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... open resumed>) = 4 [pid 5260] <... futex resumed>) = 0 [pid 5261] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... futex resumed>) = 0 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] openat(-1, "/proc/self/exe", O_RDONLY [pid 5260] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... openat resumed>) = 5 [pid 5260] <... futex resumed>) = 0 [pid 5261] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... futex resumed>) = 0 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] sendfile(4, 5, NULL, 140737974943952 [pid 5260] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 64.071370][ T5264] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5260] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... write resumed>) = 4194304 [pid 5267] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5267] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5267] ioctl(4, LOOP_SET_FD, 3 [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5260] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5260] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5268], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5268 [pid 5260] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5268 attached [pid 5267] <... ioctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5268] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5267] close(3 [pid 5070] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] open("./bus", O_RDONLY [pid 5267] <... close resumed>) = 0 [pid 5267] mkdir("./file0", 0777 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] <... mkdir resumed>) = 0 [pid 5070] lstat("./8/file0", [pid 5267] mount("/dev/loop5", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5070] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./8/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./8") = 0 [pid 5070] mkdir("./9", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5270 ./strace-static-x86_64: Process 5270 attached [ 64.124726][ T5264] REISERFS (device loop4): checking transaction log (loop4) [ 64.141384][ T5267] loop5: detected capacity change from 0 to 8192 [pid 5270] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5270] chdir("./9") = 0 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5270] setpgid(0, 0) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5270] write(3, "1000", 4) = 4 [pid 5270] close(3) = 0 [pid 5270] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5270] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5270] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5270] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5270] <... clone resumed>, parent_tid=[5271], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5271 [pid 5270] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5260] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5272], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5272 [ 64.183763][ T5267] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.200179][ T5267] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 64.214469][ T5267] REISERFS (device loop5): using ordered data mode [ 64.222821][ T5267] reiserfs: using flush barriers ./strace-static-x86_64: Process 5272 attached ./strace-static-x86_64: Process 5271 attached [pid 5272] set_robust_list(0x7fe8f42af9e0, 24 [pid 5271] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5272] <... set_robust_list resumed>) = 0 [pid 5271] <... set_robust_list resumed>) = 0 [pid 5272] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] memfd_create("syzkaller", 0) = 3 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5260] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5272] truncate("./bus", 6 [pid 5260] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 64.229635][ T5267] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.256079][ T5267] REISERFS (device loop5): checking transaction log (loop5) [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5271] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 64.307909][ T5267] REISERFS (device loop5): Using r5 hash to sort names [ 64.319326][ T5264] REISERFS (device loop4): Using r5 hash to sort names [ 64.326699][ T5267] REISERFS (device loop5): using 3.5.x disk format [ 64.333733][ T5264] REISERFS (device loop4): using 3.5.x disk format [ 64.344198][ T5267] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5267] <... mount resumed>) = 0 [pid 5264] <... mount resumed>) = 0 [pid 5267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] <... ioctl resumed>) = 0 [pid 5267] chdir("./file0" [pid 5264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5271] close(3 [pid 5267] <... chdir resumed>) = 0 [pid 5271] <... close resumed>) = 0 [pid 5271] mkdir("./file0", 0777 [pid 5267] ioctl(4, LOOP_CLR_FD [pid 5264] <... openat resumed>) = 3 [pid 5267] <... ioctl resumed>) = 0 [pid 5267] close(4) = 0 [pid 5267] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 0 [pid 5265] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... futex resumed>) = 1 [pid 5267] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5267] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5267] openat(-1, "/proc/self/exe", O_RDONLY [pid 5265] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... openat resumed>) = 5 [pid 5265] <... futex resumed>) = 0 [pid 5267] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] <... futex resumed>) = 0 [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5267] sendfile(4, 5, NULL, 140737974943952 [pid 5265] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] chdir("./file0") = 0 [pid 5264] ioctl(4, LOOP_CLR_FD) = 0 [pid 5264] close(4) = 0 [pid 5264] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5264] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = 0 [pid 5263] <... futex resumed>) = 1 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... open resumed>) = 4 [pid 5264] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... futex resumed>) = 0 [pid 5263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... mkdir resumed>) = 0 [pid 5264] openat(-1, "/proc/self/exe", O_RDONLY [pid 5263] <... futex resumed>) = 0 [pid 5271] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5264] <... openat resumed>) = 5 [pid 5263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... futex resumed>) = 0 [pid 5264] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] <... futex resumed>) = 0 [ 64.355250][ T5264] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 64.355371][ T5271] loop1: detected capacity change from 0 to 8192 [pid 5264] sendfile(4, 5, NULL, 140737974943952 [pid 5263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5265] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5265] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5274], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5274 [pid 5265] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5274] open("./bus", O_RDONLY [pid 5265] <... futex resumed>) = 0 [ 64.408958][ T5271] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.423597][ T5271] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 64.434560][ T5271] REISERFS (device loop1): using ordered data mode [ 64.442592][ T5271] reiserfs: using flush barriers [pid 5265] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5263] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5275], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5275 [pid 5263] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5275 attached [pid 5275] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5275] open("./bus", O_RDONLY [pid 5272] <... truncate resumed>) = 0 [pid 5268] <... open resumed>) = 6 [pid 5272] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5272] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5265] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5265] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5276], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5276 [pid 5265] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 64.452639][ T5271] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.469754][ T5271] REISERFS (device loop1): checking transaction log (loop1) [pid 5265] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5276 attached [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5276] set_robust_list(0x7fe8f42af9e0, 24 [pid 5263] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... set_robust_list resumed>) = 0 [pid 5263] <... futex resumed>) = 0 [pid 5276] truncate("./bus", 6 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5263] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5277 attached , parent_tid=[5277], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5277 [pid 5263] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] set_robust_list(0x7fe8f42af9e0, 24 [pid 5263] <... futex resumed>) = 0 [pid 5277] <... set_robust_list resumed>) = 0 [pid 5263] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] truncate("./bus", 6 [pid 5265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5271] <... mount resumed>) = 0 [pid 5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] chdir("./file0") = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5271] close(4) = 0 [pid 5271] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5271] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5270] <... futex resumed>) = 0 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5271] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5270] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... open resumed>) = 4 [pid 5271] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5271] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [ 64.553443][ T5271] REISERFS (device loop1): Using r5 hash to sort names [ 64.561860][ T5271] REISERFS (device loop1): using 3.5.x disk format [ 64.569084][ T5271] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5271] openat(-1, "/proc/self/exe", O_RDONLY [pid 5270] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... openat resumed>) = 5 [pid 5271] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5271] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] <... futex resumed>) = 0 [pid 5271] sendfile(4, 5, NULL, 140737974943952 [pid 5270] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5270] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5270] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5270] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5278], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5278 [pid 5270] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5278 attached [pid 5278] set_robust_list(0x7fe8f42d09e0, 24 [pid 5260] exit_group(0 [pid 5272] <... futex resumed>) = ? [pid 5268] <... futex resumed>) = ? [pid 5260] <... exit_group resumed>) = ? [pid 5272] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ [pid 5278] <... set_robust_list resumed>) = 0 [pid 5278] open("./bus", O_RDONLY [pid 5261] <... sendfile resumed>) = ? [pid 5261] +++ exited with 0 +++ [pid 5260] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5072] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5072] unlink("./8/binderfs") = 0 [pid 5072] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5270] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5270] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5270] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5279], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5279 [pid 5270] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5279 attached [pid 5279] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5279] truncate("./bus", 6 [pid 5277] <... truncate resumed>) = 0 [pid 5275] <... open resumed>) = 6 [pid 5277] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = 0 [pid 5275] <... futex resumed>) = 0 [pid 5277] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] exit_group(0 [pid 5277] <... futex resumed>) = ? [pid 5275] <... futex resumed>) = ? [pid 5263] <... exit_group resumed>) = ? [pid 5277] +++ exited with 0 +++ [pid 5275] +++ exited with 0 +++ [pid 5264] <... sendfile resumed>) = ? [pid 5264] +++ exited with 0 +++ [pid 5263] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5263, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./8/binderfs") = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5265] exit_group(0 [pid 5072] fstat(4, [pid 5265] <... exit_group resumed>) = ? [pid 5072] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./8/file0") = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./8") = 0 [pid 5072] mkdir("./9", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5280 ./strace-static-x86_64: Process 5280 attached [pid 5073] <... umount2 resumed>) = 0 [pid 5280] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5280] chdir("./9" [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] <... chdir resumed>) = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] setpgid(0, 0 [pid 5073] lstat("./8/file0", [pid 5280] <... setpgid resumed>) = 0 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5280] write(3, "1000", 4 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] <... write resumed>) = 4 [pid 5280] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5280] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... openat resumed>) = 4 [pid 5073] fstat(4, [pid 5280] <... symlink resumed>) = 0 [pid 5280] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5280] <... futex resumed>) = 0 [pid 5073] getdents64(4, [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5280] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5073] getdents64(4, [pid 5280] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... getdents64 resumed>0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./8/file0" [pid 5280] <... mprotect resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5280] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5280] <... clone resumed>, parent_tid=[5281], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5281 [pid 5073] close(3) = 0 [pid 5280] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] rmdir("./8" [pid 5280] <... futex resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5280] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] mkdir("./9", 0777./strace-static-x86_64: Process 5281 attached ) = 0 [pid 5281] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5281] <... set_robust_list resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5281] memfd_create("syzkaller", 0 [pid 5073] close(3 [pid 5281] <... memfd_create resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5281] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5282 ./strace-static-x86_64: Process 5282 attached [pid 5282] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5282] chdir("./9") = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4) = 4 [pid 5282] close(3) = 0 [pid 5279] <... truncate resumed>) = 0 [pid 5279] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... open resumed>) = 6 [pid 5279] <... futex resumed>) = 0 [pid 5278] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] <... futex resumed>) = 0 [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5278] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] <... symlink resumed>) = 0 [pid 5282] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5282] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5282] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5283], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5283 [pid 5282] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5283 attached ) = 0 [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5282] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5283] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5283] memfd_create("syzkaller", 0) = 3 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5281] <... write resumed>) = 4194304 [pid 5281] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5281] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5281] <... ioctl resumed>) = 0 [pid 5281] close(3) = 0 [pid 5281] mkdir("./file0", 0777) = 0 [ 65.013050][ T5281] loop3: detected capacity change from 0 to 8192 [ 65.034150][ T5281] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.047845][ T5281] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [pid 5281] mount("/dev/loop3", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5283] <... write resumed>) = 4194304 [pid 5283] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5283] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5270] exit_group(0) = ? [pid 5283] ioctl(4, LOOP_SET_FD, 3 [pid 5279] <... futex resumed>) = ? [pid 5278] <... futex resumed>) = ? [pid 5279] +++ exited with 0 +++ [pid 5278] +++ exited with 0 +++ [pid 5271] <... sendfile resumed>) = ? [pid 5271] +++ exited with 0 +++ [pid 5270] +++ exited with 0 +++ [pid 5283] <... ioctl resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5070] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./9/binderfs") = 0 [pid 5070] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] close(3) = 0 [pid 5283] mkdir("./file0", 0777) = 0 [ 65.058967][ T5281] REISERFS (device loop3): using ordered data mode [ 65.067334][ T5281] reiserfs: using flush barriers [ 65.076501][ T5283] loop4: detected capacity change from 0 to 8192 [ 65.080597][ T5281] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.094021][ T5283] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.099437][ T5281] REISERFS (device loop3): checking transaction log (loop3) [pid 5283] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 65.159966][ T5283] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [pid 5070] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./9/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./9") = 0 [pid 5070] mkdir("./10", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5286 ./strace-static-x86_64: Process 5286 attached [pid 5286] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5286] chdir("./10") = 0 [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5286] setpgid(0, 0) = 0 [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5286] write(3, "1000", 4) = 4 [pid 5286] close(3) = 0 [pid 5286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5286] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5286] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5286] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5287], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5287 [pid 5286] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5287 attached [pid 5287] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5287] memfd_create("syzkaller", 0) = 3 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 65.203543][ T5283] REISERFS (device loop4): using ordered data mode [ 65.210839][ T5283] reiserfs: using flush barriers [ 65.222199][ T5283] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.230562][ T5281] REISERFS (device loop3): Using r5 hash to sort names [ 65.239999][ T5283] REISERFS (device loop4): checking transaction log (loop4) [pid 5281] <... mount resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5281] chdir("./file0") = 0 [pid 5281] ioctl(4, LOOP_CLR_FD) = 0 [pid 5281] close(4 [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5281] <... close resumed>) = 0 [pid 5281] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 0 [pid 5280] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... futex resumed>) = 1 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5281] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 0 [pid 5280] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... futex resumed>) = 1 [pid 5281] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5281] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] sendfile(4, 5, NULL, 140737974943952 [pid 5280] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.281060][ T5281] REISERFS (device loop3): using 3.5.x disk format [ 65.290639][ T5281] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5280] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... write resumed>) = 4194304 [pid 5287] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5287] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5287] ioctl(4, LOOP_SET_FD, 3 [pid 5280] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5287] <... ioctl resumed>) = 0 [pid 5287] close(3) = 0 [pid 5287] mkdir("./file0", 0777) = 0 [ 65.357726][ T5283] REISERFS (device loop4): Using r5 hash to sort names [ 65.373989][ T5283] REISERFS (device loop4): using 3.5.x disk format [ 65.379106][ T5287] loop1: detected capacity change from 0 to 8192 [ 65.382494][ T5283] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5287] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5283] <... mount resumed>) = 0 [pid 5280] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5280] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5280] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5289], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5289 [pid 5280] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5283] chdir("./file0") = 0 [pid 5283] ioctl(4, LOOP_CLR_FD) = 0 [pid 5283] close(4./strace-static-x86_64: Process 5289 attached ) = 0 [pid 5283] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5282] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... futex resumed>) = 1 [pid 5283] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5283] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5289] set_robust_list(0x7fe8f42d09e0, 24 [pid 5283] openat(-1, "/proc/self/exe", O_RDONLY [pid 5282] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... openat resumed>) = 5 [pid 5282] <... futex resumed>) = 0 [pid 5283] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] sendfile(4, 5, NULL, 140737974943952 [pid 5282] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... set_robust_list resumed>) = 0 [pid 5289] open("./bus", O_RDONLY [pid 5280] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5280] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5280] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5280] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5290], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5290 [pid 5280] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.392728][ T5287] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.410481][ T5287] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 65.421795][ T5287] REISERFS (device loop1): using ordered data mode [ 65.429210][ T5287] reiserfs: using flush barriers [ 65.439131][ T5287] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5280] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5290 attached [pid 5290] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5290] truncate("./bus", 6 [pid 5282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5282] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5282] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5282] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5291], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5291 [pid 5282] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5291 attached [pid 5291] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5291] open("./bus", O_RDONLY [pid 5280] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 65.459464][ T5287] REISERFS (device loop1): checking transaction log (loop1) [pid 5282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5282] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5282] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5282] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5292], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5292 [pid 5282] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5292] truncate("./bus", 6 [pid 5287] <... mount resumed>) = 0 [pid 5287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5287] chdir("./file0") = 0 [pid 5287] ioctl(4, LOOP_CLR_FD) = 0 [pid 5287] close(4) = 0 [pid 5287] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5287] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5286] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5287] <... futex resumed>) = 0 [pid 5286] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] openat(-1, "/proc/self/exe", O_RDONLY [pid 5286] <... futex resumed>) = 0 [ 65.534034][ T5287] REISERFS (device loop1): Using r5 hash to sort names [ 65.541704][ T5287] REISERFS (device loop1): using 3.5.x disk format [ 65.549045][ T5287] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5286] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... openat resumed>) = 5 [pid 5287] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5286] <... futex resumed>) = 0 [pid 5287] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] <... futex resumed>) = 0 [pid 5287] sendfile(4, 5, NULL, 140737974943952 [pid 5286] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5286] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5286] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5286] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5293 attached , parent_tid=[5293], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5293 [pid 5293] set_robust_list(0x7fe8f42d09e0, 24 [pid 5286] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5286] <... futex resumed>) = 0 [pid 5293] open("./bus", O_RDONLY [pid 5286] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5286] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5286] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5286] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5294 attached [pid 5294] set_robust_list(0x7fe8f42af9e0, 24 [pid 5286] <... clone resumed>, parent_tid=[5294], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5294 [pid 5286] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] <... set_robust_list resumed>) = 0 [pid 5286] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] truncate("./bus", 6 [pid 5280] exit_group(0) = ? [pid 5286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5282] exit_group(0) = ? [pid 5283] <... sendfile resumed>) = ? [pid 5291] <... open resumed>) = ? [pid 5283] +++ exited with 0 +++ [pid 5291] +++ exited with 0 +++ [pid 5292] <... truncate resumed>) = ? [pid 5292] +++ exited with 0 +++ [pid 5282] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5073] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./9/binderfs") = 0 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./9/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./9") = 0 [pid 5073] mkdir("./10", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5295 attached , child_tidptr=0x5555558b65d0) = 5295 [pid 5295] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5295] chdir("./10") = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [pid 5295] close(3) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5295] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5293] <... open resumed>) = 6 [pid 5294] <... truncate resumed>) = 0 [pid 5293] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... mmap resumed>) = 0x7fe8fc2d1000 [pid 5294] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5295] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE [pid 5294] <... futex resumed>) = 0 [pid 5293] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] <... mprotect resumed>) = 0 [pid 5295] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5296], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5296 [pid 5295] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5296 attached [pid 5296] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5296] memfd_create("syzkaller", 0) = 3 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5286] exit_group(0 [pid 5294] <... futex resumed>) = ? [pid 5293] <... futex resumed>) = ? [pid 5286] <... exit_group resumed>) = ? [pid 5294] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5296] <... write resumed>) = 4194304 [pid 5296] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5296] close(3) = 0 [pid 5296] mkdir("./file0", 0777) = 0 [pid 5296] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5287] <... sendfile resumed>) = ? [pid 5287] +++ exited with 0 +++ [pid 5286] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5286, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5070] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5070] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./10/binderfs") = 0 [ 66.008758][ T5296] loop4: detected capacity change from 0 to 8192 [ 66.020437][ T5296] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.033802][ T5296] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 66.043331][ T5296] REISERFS (device loop4): using ordered data mode [ 66.050509][ T5296] reiserfs: using flush barriers [pid 5070] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5070] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./10/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./10") = 0 [pid 5070] mkdir("./11", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5298 ./strace-static-x86_64: Process 5298 attached [pid 5298] set_robust_list(0x5555558b65e0, 24) = 0 [ 66.057503][ T5296] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.084614][ T5296] REISERFS (device loop4): checking transaction log (loop4) [pid 5298] chdir("./11") = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5298] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5298] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5299], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5299 [pid 5298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5299 attached [pid 5299] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5299] memfd_create("syzkaller", 0) = 3 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5296] <... mount resumed>) = 0 [pid 5296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file0") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5296] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] <... futex resumed>) = 0 [pid 5296] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5295] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... write resumed>) = 4194304 [pid 5296] <... open resumed>) = 4 [pid 5299] munmap(0x7fe8f3ed1000, 4194304 [pid 5296] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... munmap resumed>) = 0 [pid 5296] <... futex resumed>) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5296] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... openat resumed>) = 4 [pid 5296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] <... futex resumed>) = 0 [ 66.171315][ T5296] REISERFS (device loop4): Using r5 hash to sort names [ 66.180094][ T5296] REISERFS (device loop4): using 3.5.x disk format [ 66.187444][ T5296] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5299] ioctl(4, LOOP_SET_FD, 3 [pid 5296] openat(-1, "/proc/self/exe", O_RDONLY [pid 5295] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... ioctl resumed>) = 0 [pid 5296] <... openat resumed>) = 5 [pid 5299] close(3 [pid 5296] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... close resumed>) = 0 [pid 5296] <... futex resumed>) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5299] mkdir("./file0", 0777 [pid 5296] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... mkdir resumed>) = 0 [pid 5296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] <... futex resumed>) = 0 [pid 5299] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5296] sendfile(4, 5, NULL, 140737974943952 [ 66.228681][ T5299] loop1: detected capacity change from 0 to 8192 [ 66.248811][ T5299] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.262169][ T5299] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [pid 5295] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5295] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5295] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5301], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5301 [pid 5295] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5301 attached [pid 5301] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5301] open("./bus", O_RDONLY [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5295] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5302], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5302 [pid 5295] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.272701][ T5299] REISERFS (device loop1): using ordered data mode [ 66.279869][ T5299] reiserfs: using flush barriers [ 66.287779][ T5299] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.304514][ T5299] REISERFS (device loop1): checking transaction log (loop1) [pid 5295] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5302 attached [pid 5302] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5302] truncate("./bus", 6 [pid 5299] <... mount resumed>) = 0 [pid 5299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5299] chdir("./file0") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [pid 5299] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5299] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... open resumed>) = 4 [pid 5299] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5299] openat(-1, "/proc/self/exe", O_RDONLY [pid 5298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... openat resumed>) = 5 [pid 5298] <... futex resumed>) = 0 [pid 5299] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] sendfile(4, 5, NULL, 140737974943952 [pid 5298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 66.370760][ T5299] REISERFS (device loop1): Using r5 hash to sort names [ 66.378586][ T5299] REISERFS (device loop1): using 3.5.x disk format [ 66.385889][ T5299] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5298] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5298] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5303 attached , parent_tid=[5303], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5303 [pid 5298] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5303] open("./bus", O_RDONLY [pid 5298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5298] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5298] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5304 attached , parent_tid=[5304], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5304 [pid 5304] set_robust_list(0x7fe8f42af9e0, 24 [pid 5298] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] <... set_robust_list resumed>) = 0 [pid 5304] truncate("./bus", 6 [pid 5298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] exit_group(0) = ? [pid 5296] <... sendfile resumed>) = ? [pid 5302] <... truncate resumed>) = ? [pid 5301] <... open resumed>) = ? [pid 5302] +++ exited with 0 +++ [pid 5296] +++ exited with 0 +++ [pid 5301] +++ exited with 0 +++ [pid 5295] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./10/binderfs") = 0 [pid 5073] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./10/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./10") = 0 [pid 5073] mkdir("./11", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5305 ./strace-static-x86_64: Process 5305 attached [pid 5305] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5305] chdir("./11") = 0 [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5305] setpgid(0, 0) = 0 [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5305] write(3, "1000", 4) = 4 [pid 5305] close(3) = 0 [pid 5305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5305] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5305] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5305] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5306 attached , parent_tid=[5306], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5306 [pid 5305] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5306] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5305] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5306] <... set_robust_list resumed>) = 0 [pid 5306] memfd_create("syzkaller", 0) = 3 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5303] <... open resumed>) = 6 [pid 5304] <... truncate resumed>) = 0 [pid 5303] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... futex resumed>) = 0 [pid 5304] <... futex resumed>) = 0 [pid 5303] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5306] <... write resumed>) = 4194304 [pid 5306] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5306] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5306] close(3) = 0 [pid 5306] mkdir("./file0", 0777) = 0 [pid 5306] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5298] exit_group(0 [pid 5304] <... futex resumed>) = ? [pid 5303] <... futex resumed>) = ? [pid 5298] <... exit_group resumed>) = ? [pid 5304] +++ exited with 0 +++ [pid 5303] +++ exited with 0 +++ [pid 5299] <... sendfile resumed>) = ? [pid 5299] +++ exited with 0 +++ [pid 5298] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5070] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5070] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [ 66.783232][ T5306] loop4: detected capacity change from 0 to 8192 [ 66.798464][ T5306] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.811595][ T5306] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 66.821256][ T5306] REISERFS (device loop4): using ordered data mode [ 66.828011][ T5306] reiserfs: using flush barriers [pid 5070] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] unlink("./11/binderfs") = 0 [ 66.834432][ T5306] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.852645][ T5306] REISERFS (device loop4): checking transaction log (loop4) [pid 5070] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5070] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./11/file0") = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./11") = 0 [pid 5070] mkdir("./12", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3 [pid 5306] <... mount resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5306] chdir("./file0") = 0 [pid 5306] ioctl(4, LOOP_CLR_FD) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5308 [pid 5306] close(4) = 0 [pid 5306] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5305] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5308 attached [pid 5306] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] set_robust_list(0x5555558b65e0, 24 [pid 5306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5305] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... set_robust_list resumed>) = 0 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5305] <... futex resumed>) = 0 [pid 5308] chdir("./12" [pid 5306] <... open resumed>) = 4 [pid 5305] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... chdir resumed>) = 0 [pid 5306] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5306] <... futex resumed>) = 0 [pid 5305] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... prctl resumed>) = 0 [pid 5306] openat(-1, "/proc/self/exe", O_RDONLY [pid 5305] <... futex resumed>) = 0 [pid 5308] setpgid(0, 0 [pid 5306] <... openat resumed>) = 5 [pid 5305] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... setpgid resumed>) = 0 [pid 5306] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5306] <... futex resumed>) = 0 [pid 5305] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... openat resumed>) = 3 [pid 5306] sendfile(4, 5, NULL, 140737974943952 [pid 5305] <... futex resumed>) = 0 [pid 5308] write(3, "1000", 4 [pid 5305] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... write resumed>) = 4 [pid 5308] close(3) = 0 [pid 5308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5308] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5308] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5309], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5309 ./strace-static-x86_64: Process 5309 attached [pid 5308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5309] set_robust_list(0x7fe8fc2f19e0, 24 [ 66.924880][ T5306] REISERFS (device loop4): Using r5 hash to sort names [ 66.934285][ T5306] REISERFS (device loop4): using 3.5.x disk format [ 66.941290][ T5306] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5309] <... set_robust_list resumed>) = 0 [pid 5309] memfd_create("syzkaller", 0) = 3 [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5305] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5305] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5305] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5310], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5310 [pid 5305] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5305] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5310 attached [pid 5310] set_robust_list(0x7fe8f42d09e0, 24 [pid 5309] <... write resumed>) = 4194304 [pid 5310] <... set_robust_list resumed>) = 0 [pid 5309] munmap(0x7fe8f3ed1000, 4194304 [pid 5310] open("./bus", O_RDONLY [pid 5309] <... munmap resumed>) = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5309] close(3) = 0 [pid 5309] mkdir("./file0", 0777) = 0 [pid 5309] mount("/dev/loop1", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5305] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5305] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5305] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5312], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5312 [pid 5305] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5305] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5312 attached [pid 5312] set_robust_list(0x7fe8f42af9e0, 24) = 0 [ 67.073246][ T5309] loop1: detected capacity change from 0 to 8192 [ 67.084261][ T5309] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.097431][ T5309] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 67.107055][ T5309] REISERFS (device loop1): using ordered data mode [ 67.114515][ T5309] reiserfs: using flush barriers [pid 5312] truncate("./bus", 6 [pid 5305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 67.121361][ T5309] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.137911][ T5309] REISERFS (device loop1): checking transaction log (loop1) [pid 5309] <... mount resumed>) = 0 [pid 5309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5309] chdir("./file0") = 0 [pid 5309] ioctl(4, LOOP_CLR_FD) = 0 [pid 5309] close(4) = 0 [pid 5309] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... open resumed>) = 4 [pid 5308] <... futex resumed>) = 0 [pid 5309] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... futex resumed>) = 0 [pid 5308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5309] openat(-1, "/proc/self/exe", O_RDONLY [pid 5308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... openat resumed>) = 5 [pid 5308] <... futex resumed>) = 0 [pid 5309] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... futex resumed>) = 0 [pid 5308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5309] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] <... futex resumed>) = 0 [pid 5309] sendfile(4, 5, NULL, 140737974943952 [ 67.179860][ T5309] REISERFS (device loop1): Using r5 hash to sort names [ 67.187240][ T5309] REISERFS (device loop1): using 3.5.x disk format [ 67.194212][ T5309] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5308] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5308] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5313 attached , parent_tid=[5313], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5313 [pid 5308] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] set_robust_list(0x7fe8f42d09e0, 24 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] <... set_robust_list resumed>) = 0 [pid 5313] open("./bus", O_RDONLY [pid 5308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5308] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5308] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5314 attached , parent_tid=[5314], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5314 [pid 5314] set_robust_list(0x7fe8f42af9e0, 24 [pid 5308] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... set_robust_list resumed>) = 0 [pid 5314] truncate("./bus", 6 [pid 5312] <... truncate resumed>) = 0 [pid 5310] <... open resumed>) = 6 [pid 5312] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = 0 [pid 5310] <... futex resumed>) = 0 [pid 5312] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5310] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5305] exit_group(0 [pid 5312] <... futex resumed>) = ? [pid 5310] <... futex resumed>) = ? [pid 5305] <... exit_group resumed>) = ? [pid 5312] +++ exited with 0 +++ [pid 5310] +++ exited with 0 +++ [pid 5308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5306] <... sendfile resumed>) = ? [pid 5306] +++ exited with 0 +++ [pid 5305] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5073] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./11/binderfs") = 0 [pid 5073] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./11/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./11") = 0 [pid 5073] mkdir("./12", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5315 attached , child_tidptr=0x5555558b65d0) = 5315 [pid 5315] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5315] chdir("./12") = 0 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5315] setpgid(0, 0) = 0 [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5315] write(3, "1000", 4) = 4 [pid 5315] close(3) = 0 [pid 5315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5315] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5315] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5316], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5316 [pid 5315] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5316 attached [pid 5316] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5308] exit_group(0) = ? [pid 5316] <... write resumed>) = 4194304 [pid 5316] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5316] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5316] close(3) = 0 [pid 5316] mkdir("./file0", 0777) = 0 [ 67.588416][ T5316] loop4: detected capacity change from 0 to 8192 [ 67.599483][ T5316] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 67.612957][ T5316] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 67.622387][ T5316] REISERFS (device loop4): using ordered data mode [ 67.629334][ T5316] reiserfs: using flush barriers [ 67.635346][ T5316] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.651960][ T5316] REISERFS (device loop4): checking transaction log (loop4) [pid 5316] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5316] chdir("./file0") = 0 [pid 5316] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] close(4) = 0 [pid 5316] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5316] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5315] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... open resumed>) = 4 [pid 5316] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5316] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5316] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5316] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] <... futex resumed>) = 0 [pid 5316] sendfile(4, 5, NULL, 140737974943952 [ 67.696290][ T5316] REISERFS (device loop4): Using r5 hash to sort names [ 67.703384][ T5316] REISERFS (device loop4): using 3.5.x disk format [ 67.710411][ T5316] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5315] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5315] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5315] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5318 attached , parent_tid=[5318], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5318 [pid 5315] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5318] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5318] open("./bus", O_RDONLY [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5315] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5315] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5319], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5319 [pid 5315] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5319 attached [pid 5319] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5315] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] truncate("./bus", 6 [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5315] exit_group(0) = ? [pid 5319] <... truncate resumed>) = ? [pid 5318] <... open resumed>) = ? [pid 5316] <... sendfile resumed>) = ? [pid 5319] +++ exited with 0 +++ [pid 5318] +++ exited with 0 +++ [pid 5316] +++ exited with 0 +++ [pid 5315] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./12/binderfs") = 0 [ 68.128354][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 68.128370][ T27] audit: type=1804 audit(1671282291.533:128): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/12/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 68.158007][ T27] audit: type=1800 audit(1671282291.533:129): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./12/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./12") = 0 [pid 5073] mkdir("./13", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5320 ./strace-static-x86_64: Process 5320 attached [pid 5320] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5320] chdir("./13") = 0 [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5320] setpgid(0, 0) = 0 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5320] write(3, "1000", 4) = 4 [pid 5320] close(3) = 0 [pid 5320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5320] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5320] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5320] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5321 attached , parent_tid=[5321], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5321 [pid 5320] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5321] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5321] memfd_create("syzkaller", 0) = 3 [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5321] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5321] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5321] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5321] close(3) = 0 [pid 5321] mkdir("./file0", 0777) = 0 [ 68.330597][ T5321] loop4: detected capacity change from 0 to 8192 [ 68.341302][ T5321] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.354627][ T5321] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 68.364608][ T5321] REISERFS (device loop4): using ordered data mode [ 68.371223][ T5321] reiserfs: using flush barriers [ 68.377768][ T5321] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.394665][ T5321] REISERFS (device loop4): checking transaction log (loop4) [pid 5321] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5321] chdir("./file0") = 0 [pid 5321] ioctl(4, LOOP_CLR_FD) = 0 [pid 5321] close(4) = 0 [pid 5321] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5321] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] <... futex resumed>) = 0 [pid 5321] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 68.443519][ T5321] REISERFS (device loop4): Using r5 hash to sort names [ 68.450779][ T5321] REISERFS (device loop4): using 3.5.x disk format [ 68.458000][ T5321] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5320] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... open resumed>) = 4 [pid 5321] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5321] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] <... futex resumed>) = 0 [pid 5321] openat(-1, "/proc/self/exe", O_RDONLY [pid 5320] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... openat resumed>) = 5 [pid 5321] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5321] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] <... futex resumed>) = 0 [pid 5321] sendfile(4, 5, NULL, 140737974943952 [ 68.490759][ T27] audit: type=1800 audit(1671282291.893:130): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5320] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5320] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5320] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5320] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5323], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5323 [pid 5320] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5323 attached [pid 5320] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5323] open("./bus", O_RDONLY [pid 5320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5320] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5320] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5320] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5324 attached , parent_tid=[5324], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5324 [pid 5320] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5324] truncate("./bus", 6 [pid 5320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5320] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5324] <... truncate resumed>) = 0 [pid 5323] <... open resumed>) = 6 [pid 5324] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5324] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] exit_group(0 [pid 5324] <... futex resumed>) = ? [pid 5323] <... futex resumed>) = ? [pid 5320] <... exit_group resumed>) = ? [pid 5323] +++ exited with 0 +++ [pid 5324] +++ exited with 0 +++ [pid 5321] <... sendfile resumed>) = ? [pid 5321] +++ exited with 0 +++ [pid 5320] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 68.855691][ T27] audit: type=1804 audit(1671282292.263:131): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/13/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 68.880213][ T27] audit: type=1800 audit(1671282292.283:132): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./13/binderfs") = 0 [pid 5074] kill(-5265, SIGKILL [pid 5073] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... kill resumed>) = 0 [pid 5074] kill(5265, SIGKILL) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./13/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./13") = 0 [pid 5073] mkdir("./14", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5325 ./strace-static-x86_64: Process 5325 attached [pid 5325] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5325] chdir("./14") = 0 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5325] setpgid(0, 0) = 0 [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5325] write(3, "1000", 4) = 4 [pid 5325] close(3) = 0 [pid 5325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5325] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5325] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5325] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5326 attached [pid 5326] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5325] <... clone resumed>, parent_tid=[5326], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5326 [pid 5326] <... set_robust_list resumed>) = 0 [pid 5325] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5326] memfd_create("syzkaller", 0) = 3 [pid 5326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5326] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5326] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5326] close(3) = 0 [pid 5326] mkdir("./file0", 0777) = 0 [ 69.102903][ T5326] loop4: detected capacity change from 0 to 8192 [ 69.113535][ T5326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.126633][ T5326] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 69.135990][ T5326] REISERFS (device loop4): using ordered data mode [ 69.142873][ T5326] reiserfs: using flush barriers [pid 5326] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5074] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5074] getdents64(3, 0x5555558b7620 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [ 69.149059][ T5326] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.165651][ T5326] REISERFS (device loop4): checking transaction log (loop4) [pid 5326] <... mount resumed>) = 0 [pid 5326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5326] chdir("./file0") = 0 [pid 5326] ioctl(4, LOOP_CLR_FD) = 0 [pid 5326] close(4) = 0 [pid 5326] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5326] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5325] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... open resumed>) = 4 [pid 5325] <... futex resumed>) = 0 [pid 5326] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] openat(-1, "/proc/self/exe", O_RDONLY [pid 5325] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... openat resumed>) = 5 [pid 5325] <... futex resumed>) = 0 [pid 5326] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] sendfile(4, 5, NULL, 140737974943952 [pid 5325] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.213314][ T5326] REISERFS (device loop4): Using r5 hash to sort names [ 69.220354][ T5326] REISERFS (device loop4): using 3.5.x disk format [ 69.227192][ T5326] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5325] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5325] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5325] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5325] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5325] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5328 attached , parent_tid=[5328], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5328 [pid 5328] set_robust_list(0x7fe8f42d09e0, 24 [ 69.247441][ T27] audit: type=1800 audit(1671282292.653:133): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5325] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... set_robust_list resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5328] open("./bus", O_RDONLY [pid 5325] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5325] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5325] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5325] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5329], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5329 ./strace-static-x86_64: Process 5329 attached [pid 5325] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] set_robust_list(0x7fe8f42af9e0, 24 [pid 5325] <... futex resumed>) = 0 [pid 5325] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... set_robust_list resumed>) = 0 [pid 5329] truncate("./bus", 6 [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5325] exit_group(0) = ? [pid 5326] <... sendfile resumed>) = ? [pid 5328] <... open resumed>) = ? [pid 5326] +++ exited with 0 +++ [pid 5329] <... truncate resumed>) = ? [pid 5329] +++ exited with 0 +++ [pid 5328] +++ exited with 0 +++ [pid 5325] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./14/binderfs") = 0 [ 69.598499][ T27] audit: type=1804 audit(1671282293.003:134): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/14/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 69.622049][ T27] audit: type=1800 audit(1671282293.003:135): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./14/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./14") = 0 [pid 5073] mkdir("./15", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5330 ./strace-static-x86_64: Process 5330 attached [pid 5330] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5330] chdir("./15") = 0 [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5330] setpgid(0, 0) = 0 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5330] write(3, "1000", 4) = 4 [pid 5330] close(3) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5330] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5330] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5331 attached [pid 5331] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5330] <... clone resumed>, parent_tid=[5331], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5331 [pid 5331] <... set_robust_list resumed>) = 0 [pid 5331] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5330] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5331] memfd_create("syzkaller", 0) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5331] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5331] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5331] close(3) = 0 [pid 5331] mkdir("./file0", 0777) = 0 [ 69.816345][ T5331] loop4: detected capacity change from 0 to 8192 [ 69.828054][ T5331] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 69.841080][ T5331] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 69.850676][ T5331] REISERFS (device loop4): using ordered data mode [ 69.857326][ T5331] reiserfs: using flush barriers [pid 5331] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "" [pid 5072] kill(-5280, SIGKILL) = 0 [pid 5072] kill(5280, SIGKILL) = 0 [ 69.863759][ T5331] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.881761][ T5331] REISERFS (device loop4): checking transaction log (loop4) [pid 5331] <... mount resumed>) = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./file0") = 0 [pid 5331] ioctl(4, LOOP_CLR_FD) = 0 [pid 5331] close(4) = 0 [pid 5331] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5331] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5330] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] <... open resumed>) = 4 [pid 5331] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5331] openat(-1, "/proc/self/exe", O_RDONLY [pid 5330] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] <... openat resumed>) = 5 [pid 5331] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5331] sendfile(4, 5, NULL, 140737974943952 [ 69.922153][ T5331] REISERFS (device loop4): Using r5 hash to sort names [ 69.929091][ T5331] REISERFS (device loop4): using 3.5.x disk format [ 69.935884][ T5331] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5330] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.955552][ T27] audit: type=1800 audit(1671282293.363:136): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5330] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5330] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5330] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5333 attached , parent_tid=[5333], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5333 [pid 5333] set_robust_list(0x7fe8f42d09e0, 24 [pid 5330] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... set_robust_list resumed>) = 0 [pid 5333] open("./bus", O_RDONLY [pid 5330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5330] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5330] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5334 attached , parent_tid=[5334], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5334 [pid 5330] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5334] truncate("./bus", 6 [pid 5330] <... futex resumed>) = 0 [pid 5330] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5072] getdents64(3, 0x5555558b7620 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5330] exit_group(0) = ? [pid 5333] <... open resumed>) = ? [pid 5331] <... sendfile resumed>) = ? [pid 5333] +++ exited with 0 +++ [pid 5334] <... truncate resumed>) = ? [pid 5334] +++ exited with 0 +++ [pid 5331] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5330, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./15/binderfs") = 0 [ 70.328394][ T27] audit: type=1804 audit(1671282293.733:137): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/15/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./15/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./15") = 0 [pid 5073] mkdir("./16", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5336 ./strace-static-x86_64: Process 5336 attached [pid 5336] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5336] chdir("./16") = 0 [pid 5336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5336] setpgid(0, 0) = 0 [pid 5336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5336] write(3, "1000", 4) = 4 [pid 5336] close(3) = 0 [pid 5336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5336] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5336] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5336] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5337 attached , parent_tid=[5337], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5337 [pid 5337] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5337] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5336] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5336] <... futex resumed>) = 0 [pid 5336] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5337] memfd_create("syzkaller", 0) = 3 [pid 5337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5337] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5337] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5337] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5337] close(3) = 0 [pid 5337] mkdir("./file0", 0777) = 0 [ 70.496130][ T5337] loop4: detected capacity change from 0 to 8192 [ 70.506513][ T5337] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.519712][ T5337] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 70.529014][ T5337] REISERFS (device loop4): using ordered data mode [ 70.535628][ T5337] reiserfs: using flush barriers [ 70.543218][ T5337] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.560013][ T5337] REISERFS (device loop4): checking transaction log (loop4) [pid 5337] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5337] chdir("./file0") = 0 [pid 5337] ioctl(4, LOOP_CLR_FD) = 0 [pid 5337] close(4) = 0 [pid 5337] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5336] <... futex resumed>) = 0 [pid 5337] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5336] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5336] <... futex resumed>) = 0 [pid 5337] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5336] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5337] <... open resumed>) = 4 [pid 5337] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5336] <... futex resumed>) = 0 [pid 5337] openat(-1, "/proc/self/exe", O_RDONLY [pid 5336] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] <... openat resumed>) = 5 [pid 5336] <... futex resumed>) = 0 [pid 5337] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5337] <... futex resumed>) = 0 [pid 5336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5336] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5336] <... futex resumed>) = 0 [pid 5337] sendfile(4, 5, NULL, 140737974943952 [ 70.600546][ T5337] REISERFS (device loop4): Using r5 hash to sort names [ 70.607503][ T5337] REISERFS (device loop4): using 3.5.x disk format [ 70.614219][ T5337] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5336] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5336] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5336] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5336] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5339], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5339 [pid 5336] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5336] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5339 attached [pid 5339] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5339] open("./bus", O_RDONLY [pid 5336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5336] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5336] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5336] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5336] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5340], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5340 [pid 5336] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5336] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5340 attached [pid 5340] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5340] truncate("./bus", 6 [pid 5336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5336] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5336] exit_group(0) = ? [pid 5340] <... truncate resumed>) = ? [pid 5339] <... open resumed>) = ? [pid 5337] <... sendfile resumed>) = ? [pid 5340] +++ exited with 0 +++ [pid 5339] +++ exited with 0 +++ [pid 5337] +++ exited with 0 +++ [pid 5336] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5336, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./16/binderfs") = 0 [pid 5073] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./16/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./16") = 0 [pid 5073] mkdir("./17", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5341 ./strace-static-x86_64: Process 5341 attached [pid 5341] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5341] chdir("./17") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5341] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5342 attached [pid 5342] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5341] <... clone resumed>, parent_tid=[5342], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5342 [pid 5341] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5342] memfd_create("syzkaller", 0) = 3 [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5342] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5342] close(3) = 0 [pid 5342] mkdir("./file0", 0777) = 0 [ 71.186785][ T5342] loop4: detected capacity change from 0 to 8192 [ 71.198462][ T5342] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.211529][ T5342] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 71.220922][ T5342] REISERFS (device loop4): using ordered data mode [ 71.227624][ T5342] reiserfs: using flush barriers [ 71.233915][ T5342] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.250596][ T5342] REISERFS (device loop4): checking transaction log (loop4) [pid 5342] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5342] chdir("./file0") = 0 [pid 5342] ioctl(4, LOOP_CLR_FD) = 0 [pid 5342] close(4) = 0 [pid 5342] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5342] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5342] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5342] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5342] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = 0 [pid 5341] <... futex resumed>) = 1 [pid 5342] openat(-1, "/proc/self/exe", O_RDONLY [pid 5341] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] <... openat resumed>) = 5 [pid 5342] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5342] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5342] sendfile(4, 5, NULL, 140737974943952 [ 71.294750][ T5342] REISERFS (device loop4): Using r5 hash to sort names [ 71.301763][ T5342] REISERFS (device loop4): using 3.5.x disk format [ 71.308649][ T5342] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5341] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5341] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5341] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5344 attached , parent_tid=[5344], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5344 [pid 5344] set_robust_list(0x7fe8f42d09e0, 24 [pid 5341] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... set_robust_list resumed>) = 0 [pid 5344] open("./bus", O_RDONLY [pid 5341] <... futex resumed>) = 0 [pid 5341] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5341] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5341] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5341] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5345 attached , parent_tid=[5345], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5345 [pid 5341] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5345] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5345] truncate("./bus", 6 [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5341] exit_group(0) = ? [pid 5344] <... open resumed>) = ? [pid 5342] <... sendfile resumed>) = ? [pid 5345] <... truncate resumed>) = ? [pid 5344] +++ exited with 0 +++ [pid 5345] +++ exited with 0 +++ [pid 5342] +++ exited with 0 +++ [pid 5341] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./17/binderfs") = 0 [pid 5073] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./17/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./17") = 0 [pid 5073] mkdir("./18", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5346 attached , child_tidptr=0x5555558b65d0) = 5346 [pid 5346] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5346] chdir("./18") = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5346] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5346] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5347], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5347 [pid 5346] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5347 attached [pid 5347] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5347] memfd_create("syzkaller", 0) = 3 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5347] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5347] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5347] close(3) = 0 [pid 5347] mkdir("./file0", 0777) = 0 [ 71.809575][ T5347] loop4: detected capacity change from 0 to 8192 [ 71.819568][ T5347] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 71.832962][ T5347] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 71.842441][ T5347] REISERFS (device loop4): using ordered data mode [ 71.849064][ T5347] reiserfs: using flush barriers [ 71.855293][ T5347] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.871844][ T5347] REISERFS (device loop4): checking transaction log (loop4) [pid 5347] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5347] chdir("./file0") = 0 [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 5347] close(4) = 0 [pid 5347] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5347] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] <... futex resumed>) = 0 [pid 5346] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = 1 [pid 5347] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5346] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... open resumed>) = 4 [pid 5347] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5347] openat(-1, "/proc/self/exe", O_RDONLY [pid 5346] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... openat resumed>) = 5 [pid 5346] <... futex resumed>) = 0 [pid 5347] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5346] <... futex resumed>) = 0 [pid 5347] sendfile(4, 5, NULL, 140737974943952 [pid 5346] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] kill(-5308, SIGKILL) = 0 [pid 5070] kill(5308, SIGKILL) = 0 [ 71.910907][ T5347] REISERFS (device loop4): Using r5 hash to sort names [ 71.918085][ T5347] REISERFS (device loop4): using 3.5.x disk format [ 71.924913][ T5347] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5346] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5346] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5346] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5349], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5349 [pid 5346] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5349 attached [pid 5349] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5349] open("./bus", O_RDONLY [pid 5346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5346] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5346] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5346] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5350], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5350 ./strace-static-x86_64: Process 5350 attached [pid 5346] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] set_robust_list(0x7fe8f42af9e0, 24 [pid 5346] <... futex resumed>) = 0 [pid 5350] <... set_robust_list resumed>) = 0 [pid 5346] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] truncate("./bus", 6 [pid 5346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5070] getdents64(3, 0x5555558b7620 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5346] exit_group(0) = ? [pid 5347] <... sendfile resumed>) = ? [pid 5349] <... open resumed>) = ? [pid 5347] +++ exited with 0 +++ [pid 5350] <... truncate resumed>) = ? [pid 5349] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 5346] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./18/binderfs") = 0 [pid 5073] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./18/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./18") = 0 [pid 5073] mkdir("./19", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5351 ./strace-static-x86_64: Process 5351 attached [pid 5351] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5351] chdir("./19") = 0 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5351] close(3) = 0 [pid 5351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5351] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5351] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5352], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5352 [pid 5351] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5352 attached [pid 5352] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5352] memfd_create("syzkaller", 0) = 3 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5352] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5352] close(3) = 0 [pid 5352] mkdir("./file0", 0777) = 0 [ 72.440895][ T5352] loop4: detected capacity change from 0 to 8192 [ 72.451509][ T5352] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.465134][ T5352] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 72.475014][ T5352] REISERFS (device loop4): using ordered data mode [ 72.481907][ T5352] reiserfs: using flush barriers [ 72.488672][ T5352] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.505762][ T5352] REISERFS (device loop4): checking transaction log (loop4) [pid 5352] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5352] chdir("./file0") = 0 [pid 5352] ioctl(4, LOOP_CLR_FD) = 0 [pid 5352] close(4) = 0 [pid 5352] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5352] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] <... futex resumed>) = 0 [pid 5351] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5351] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... futex resumed>) = 0 [pid 5352] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5352] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5351] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] openat(-1, "/proc/self/exe", O_RDONLY [pid 5351] <... futex resumed>) = 0 [pid 5352] <... openat resumed>) = 5 [pid 5351] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5352] sendfile(4, 5, NULL, 140737974943952 [pid 5351] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 72.548884][ T5352] REISERFS (device loop4): Using r5 hash to sort names [ 72.555861][ T5352] REISERFS (device loop4): using 3.5.x disk format [ 72.562643][ T5352] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5351] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5351] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5351] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5354 attached , parent_tid=[5354], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5354 [pid 5354] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5354] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = 0 [pid 5351] <... futex resumed>) = 1 [pid 5354] open("./bus", O_RDONLY [pid 5351] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5351] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5351] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5355], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5355 [pid 5351] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5355 attached ) = 0 [pid 5355] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5355] truncate("./bus", 6 [pid 5351] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5351] exit_group(0) = ? [pid 5352] <... sendfile resumed>) = ? [pid 5352] +++ exited with 0 +++ [pid 5354] <... open resumed>) = ? [pid 5355] <... truncate resumed>) = ? [pid 5354] +++ exited with 0 +++ [pid 5355] +++ exited with 0 +++ [pid 5351] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./19/binderfs") = 0 [pid 5073] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./19/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./19") = 0 [pid 5073] mkdir("./20", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5356 ./strace-static-x86_64: Process 5356 attached [pid 5356] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5356] chdir("./20") = 0 [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5356] setpgid(0, 0) = 0 [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5356] write(3, "1000", 4) = 4 [pid 5356] close(3) = 0 [pid 5356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5356] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5356] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5356] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5357], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5357 [pid 5356] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5356] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5357 attached [pid 5357] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5357] memfd_create("syzkaller", 0) = 3 [pid 5357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5357] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5357] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5357] close(3) = 0 [pid 5357] mkdir("./file0", 0777) = 0 [ 73.050395][ T5357] loop4: detected capacity change from 0 to 8192 [ 73.060627][ T5357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.073874][ T5357] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 73.083165][ T5357] REISERFS (device loop4): using ordered data mode [ 73.089836][ T5357] reiserfs: using flush barriers [ 73.095928][ T5357] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.112765][ T5357] REISERFS (device loop4): checking transaction log (loop4) [pid 5357] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5357] chdir("./file0") = 0 [pid 5357] ioctl(4, LOOP_CLR_FD) = 0 [pid 5357] close(4) = 0 [pid 5357] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5356] <... futex resumed>) = 0 [pid 5357] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5356] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] <... futex resumed>) = 0 [pid 5356] <... futex resumed>) = 1 [pid 5357] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5356] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] <... open resumed>) = 4 [pid 5357] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5356] <... futex resumed>) = 0 [pid 5357] openat(-1, "/proc/self/exe", O_RDONLY [pid 5356] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] <... openat resumed>) = 5 [pid 5356] <... futex resumed>) = 0 [pid 5357] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] <... futex resumed>) = 0 [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5357] sendfile(4, 5, NULL, 140737974943952 [pid 5356] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.155169][ T5357] REISERFS (device loop4): Using r5 hash to sort names [ 73.162501][ T5357] REISERFS (device loop4): using 3.5.x disk format [ 73.169448][ T5357] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 73.186100][ T27] kauditd_printk_skb: 13 callbacks suppressed [pid 5356] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5356] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5356] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5356] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5359 attached [pid 5359] set_robust_list(0x7fe8f42d09e0, 24 [pid 5356] <... clone resumed>, parent_tid=[5359], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5359 [pid 5356] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... set_robust_list resumed>) = 0 [pid 5359] open("./bus", O_RDONLY [pid 5356] <... futex resumed>) = 0 [ 73.186115][ T27] audit: type=1800 audit(1671282296.583:151): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5356] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5356] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5356] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5356] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5360], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5360 [pid 5356] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5360 attached [pid 5360] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5360] truncate("./bus", 6 [pid 5356] <... futex resumed>) = 0 [pid 5356] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5356] exit_group(0) = ? [pid 5360] <... truncate resumed>) = ? [pid 5359] <... open resumed>) = ? [pid 5357] <... sendfile resumed>) = ? [pid 5360] +++ exited with 0 +++ [pid 5359] +++ exited with 0 +++ [pid 5357] +++ exited with 0 +++ [pid 5356] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5356, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./20/binderfs") = 0 [pid 5073] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.538284][ T27] audit: type=1804 audit(1671282296.943:152): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/20/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 73.561958][ T27] audit: type=1800 audit(1671282296.943:153): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./20/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./20") = 0 [pid 5073] mkdir("./21", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5361 ./strace-static-x86_64: Process 5361 attached [pid 5361] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5361] chdir("./21") = 0 [pid 5361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5361] setpgid(0, 0) = 0 [pid 5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5361] write(3, "1000", 4) = 4 [pid 5361] close(3) = 0 [pid 5361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5361] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5361] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5361] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5362], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5362 [pid 5361] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5362 attached [pid 5362] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5362] memfd_create("syzkaller", 0) = 3 [pid 5362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5362] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5362] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5362] close(3) = 0 [pid 5362] mkdir("./file0", 0777) = 0 [ 73.693295][ T5362] loop4: detected capacity change from 0 to 8192 [ 73.703141][ T5362] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.716566][ T5362] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 73.725932][ T5362] REISERFS (device loop4): using ordered data mode [ 73.732460][ T5362] reiserfs: using flush barriers [ 73.738657][ T5362] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.755226][ T5362] REISERFS (device loop4): checking transaction log (loop4) [pid 5362] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5362] chdir("./file0") = 0 [pid 5362] ioctl(4, LOOP_CLR_FD) = 0 [pid 5362] close(4) = 0 [pid 5362] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... futex resumed>) = 0 [pid 5361] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... futex resumed>) = 1 [pid 5362] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5362] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] <... futex resumed>) = 0 [pid 5361] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5361] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... futex resumed>) = 0 [pid 5362] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5362] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... futex resumed>) = 0 [pid 5361] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] <... futex resumed>) = 1 [pid 5361] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 73.792982][ T5362] REISERFS (device loop4): Using r5 hash to sort names [ 73.800023][ T5362] REISERFS (device loop4): using 3.5.x disk format [ 73.806831][ T5362] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 73.821056][ T27] audit: type=1800 audit(1671282297.223:154): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5362] sendfile(4, 5, NULL, 140737974943952 [pid 5361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5361] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5361] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5361] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5364 attached [pid 5364] set_robust_list(0x7fe8f42d09e0, 24 [pid 5361] <... clone resumed>, parent_tid=[5364], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5364 [pid 5364] <... set_robust_list resumed>) = 0 [pid 5361] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] open("./bus", O_RDONLY [pid 5361] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5361] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5361] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5361] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5365 attached , parent_tid=[5365], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5365 [pid 5361] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5365] truncate("./bus", 6 [pid 5361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5361] exit_group(0) = ? [pid 5362] <... sendfile resumed>) = ? [pid 5364] <... open resumed>) = ? [pid 5362] +++ exited with 0 +++ [pid 5365] <... truncate resumed>) = ? [pid 5364] +++ exited with 0 +++ [pid 5365] +++ exited with 0 +++ [pid 5361] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5361, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./21/binderfs") = 0 [ 74.188185][ T27] audit: type=1804 audit(1671282297.593:155): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/21/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 74.212375][ T27] audit: type=1800 audit(1671282297.593:156): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./21/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./21") = 0 [pid 5073] mkdir("./22", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5366 ./strace-static-x86_64: Process 5366 attached [pid 5366] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5366] chdir("./22") = 0 [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5366] setpgid(0, 0) = 0 [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5366] write(3, "1000", 4) = 4 [pid 5366] close(3) = 0 [pid 5366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5366] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5366] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5366] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5367], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5367 [pid 5366] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5367 attached [pid 5367] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5367] memfd_create("syzkaller", 0) = 3 [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5367] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5367] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5367] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5367] close(3) = 0 [pid 5367] mkdir("./file0", 0777) = 0 [ 74.353930][ T5367] loop4: detected capacity change from 0 to 8192 [ 74.363929][ T5367] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.377079][ T5367] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 74.386529][ T5367] REISERFS (device loop4): using ordered data mode [ 74.393061][ T5367] reiserfs: using flush barriers [ 74.399251][ T5367] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.415862][ T5367] REISERFS (device loop4): checking transaction log (loop4) [pid 5367] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5367] chdir("./file0") = 0 [pid 5367] ioctl(4, LOOP_CLR_FD) = 0 [pid 5367] close(4) = 0 [pid 5367] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5367] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] <... futex resumed>) = 0 [pid 5366] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 0 [pid 5366] <... futex resumed>) = 1 [pid 5367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5366] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... open resumed>) = 4 [pid 5367] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5366] <... futex resumed>) = 0 [pid 5367] openat(-1, "/proc/self/exe", O_RDONLY [pid 5366] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... openat resumed>) = 5 [pid 5366] <... futex resumed>) = 0 [pid 5367] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... futex resumed>) = 0 [pid 5366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] sendfile(4, 5, NULL, 140737974943952 [pid 5366] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.457076][ T5367] REISERFS (device loop4): Using r5 hash to sort names [ 74.464134][ T5367] REISERFS (device loop4): using 3.5.x disk format [ 74.471024][ T5367] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5366] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 74.489629][ T27] audit: type=1800 audit(1671282297.893:157): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5366] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5366] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5366] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5369 attached , parent_tid=[5369], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5369 [pid 5369] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5369] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5366] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... futex resumed>) = 0 [pid 5369] open("./bus", O_RDONLY [pid 5366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5366] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5366] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5366] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5370], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5370 [pid 5366] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5370 attached [pid 5370] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5370] truncate("./bus", 6 [pid 5366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5366] exit_group(0) = ? [pid 5367] <... sendfile resumed>) = ? [pid 5369] <... open resumed>) = ? [pid 5367] +++ exited with 0 +++ [pid 5370] <... truncate resumed>) = ? [pid 5370] +++ exited with 0 +++ [pid 5369] +++ exited with 0 +++ [pid 5366] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5366, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./22/binderfs") = 0 [pid 5073] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./22/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./22") = 0 [ 74.838858][ T27] audit: type=1804 audit(1671282298.243:158): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/22/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 74.862147][ T27] audit: type=1800 audit(1671282298.243:159): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] mkdir("./23", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5371 ./strace-static-x86_64: Process 5371 attached [pid 5371] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5371] chdir("./23") = 0 [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5371] setpgid(0, 0) = 0 [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5371] write(3, "1000", 4) = 4 [pid 5371] close(3) = 0 [pid 5371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5371] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5371] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5371] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5372], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5372 [pid 5371] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5371] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5372 attached [pid 5372] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5372] memfd_create("syzkaller", 0) = 3 [pid 5372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5372] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5372] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5372] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5372] close(3) = 0 [pid 5372] mkdir("./file0", 0777) = 0 [ 74.976111][ T5372] loop4: detected capacity change from 0 to 8192 [ 74.985945][ T5372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.999131][ T5372] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 75.008661][ T5372] REISERFS (device loop4): using ordered data mode [ 75.015194][ T5372] reiserfs: using flush barriers [ 75.021693][ T5372] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.038126][ T5372] REISERFS (device loop4): checking transaction log (loop4) [pid 5372] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5372] chdir("./file0") = 0 [pid 5372] ioctl(4, LOOP_CLR_FD) = 0 [pid 5372] close(4) = 0 [pid 5372] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5371] <... futex resumed>) = 0 [pid 5372] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 75.080457][ T5372] REISERFS (device loop4): Using r5 hash to sort names [ 75.087491][ T5372] REISERFS (device loop4): using 3.5.x disk format [ 75.095056][ T5372] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5371] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... open resumed>) = 4 [pid 5371] <... futex resumed>) = 0 [pid 5372] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] openat(-1, "/proc/self/exe", O_RDONLY [pid 5371] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... openat resumed>) = 5 [pid 5371] <... futex resumed>) = 0 [pid 5372] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] sendfile(4, 5, NULL, 140737974943952 [pid 5371] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 75.125581][ T27] audit: type=1800 audit(1671282298.523:160): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5371] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5371] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5371] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5371] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5374 attached , parent_tid=[5374], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5374 [pid 5374] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5374] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 1 [pid 5371] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] open("./bus", O_RDONLY [pid 5371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5371] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5371] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5371] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5375], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5375 ./strace-static-x86_64: Process 5375 attached [pid 5371] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5375] set_robust_list(0x7fe8f42af9e0, 24 [pid 5371] <... futex resumed>) = 0 [pid 5375] <... set_robust_list resumed>) = 0 [pid 5371] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5375] truncate("./bus", 6 [pid 5371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5371] exit_group(0) = ? [pid 5372] <... sendfile resumed>) = ? [pid 5375] <... truncate resumed>) = ? [pid 5374] <... open resumed>) = ? [pid 5372] +++ exited with 0 +++ [pid 5375] +++ exited with 0 +++ [pid 5374] +++ exited with 0 +++ [pid 5371] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./23/binderfs") = 0 [pid 5073] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./23/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./23") = 0 [pid 5073] mkdir("./24", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5376 ./strace-static-x86_64: Process 5376 attached [pid 5376] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5376] chdir("./24") = 0 [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5376] setpgid(0, 0) = 0 [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5376] write(3, "1000", 4) = 4 [pid 5376] close(3) = 0 [pid 5376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5376] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5376] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5376] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5377], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5377 [pid 5376] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5377 attached [pid 5377] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5377] memfd_create("syzkaller", 0) = 3 [pid 5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5377] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5377] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5377] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5377] close(3) = 0 [pid 5377] mkdir("./file0", 0777) = 0 [ 75.626000][ T5377] loop4: detected capacity change from 0 to 8192 [ 75.636641][ T5377] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.649823][ T5377] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 75.659136][ T5377] REISERFS (device loop4): using ordered data mode [ 75.665756][ T5377] reiserfs: using flush barriers [ 75.671482][ T5377] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.688277][ T5377] REISERFS (device loop4): checking transaction log (loop4) [pid 5377] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5377] chdir("./file0") = 0 [pid 5377] ioctl(4, LOOP_CLR_FD) = 0 [pid 5377] close(4) = 0 [pid 5377] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5376] <... futex resumed>) = 0 [pid 5377] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5377] <... futex resumed>) = 0 [pid 5376] <... futex resumed>) = 1 [pid 5377] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5376] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5377] <... open resumed>) = 4 [pid 5377] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5376] <... futex resumed>) = 0 [pid 5377] openat(-1, "/proc/self/exe", O_RDONLY [pid 5376] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5377] <... openat resumed>) = 5 [pid 5376] <... futex resumed>) = 0 [pid 5377] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5377] <... futex resumed>) = 0 [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5377] sendfile(4, 5, NULL, 140737974943952 [pid 5376] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 75.723957][ T5377] REISERFS (device loop4): Using r5 hash to sort names [ 75.730959][ T5377] REISERFS (device loop4): using 3.5.x disk format [ 75.737830][ T5377] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5376] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5376] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5376] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5376] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5379 attached [pid 5379] set_robust_list(0x7fe8f42d09e0, 24 [pid 5376] <... clone resumed>, parent_tid=[5379], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5379 [pid 5379] <... set_robust_list resumed>) = 0 [pid 5376] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] open("./bus", O_RDONLY [pid 5376] <... futex resumed>) = 0 [ 75.797721][ T896] cfg80211: failed to load regulatory.db [pid 5376] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5376] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5376] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5376] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5380 attached , parent_tid=[5380], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5380 [pid 5380] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5380] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5376] <... futex resumed>) = 0 [pid 5380] truncate("./bus", 6 [pid 5376] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5376] exit_group(0) = ? [pid 5377] <... sendfile resumed>) = ? [pid 5380] <... truncate resumed>) = ? [pid 5379] <... open resumed>) = ? [pid 5377] +++ exited with 0 +++ [pid 5380] +++ exited with 0 +++ [pid 5379] +++ exited with 0 +++ [pid 5376] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5376, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./24/binderfs") = 0 [pid 5073] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./24/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./24") = 0 [pid 5073] mkdir("./25", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5381 ./strace-static-x86_64: Process 5381 attached [pid 5381] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5381] chdir("./25") = 0 [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5381] setpgid(0, 0) = 0 [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5381] write(3, "1000", 4) = 4 [pid 5381] close(3) = 0 [pid 5381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5381] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5381] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5381] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5382 attached , parent_tid=[5382], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5382 [pid 5381] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5382] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5382] memfd_create("syzkaller", 0) = 3 [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5382] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5382] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5382] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5382] close(3) = 0 [pid 5382] mkdir("./file0", 0777) = 0 [ 76.207715][ T5382] loop4: detected capacity change from 0 to 8192 [ 76.217807][ T5382] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.231171][ T5382] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 76.240515][ T5382] REISERFS (device loop4): using ordered data mode [ 76.247070][ T5382] reiserfs: using flush barriers [ 76.252899][ T5382] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.269456][ T5382] REISERFS (device loop4): checking transaction log (loop4) [pid 5382] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5382] chdir("./file0") = 0 [pid 5382] ioctl(4, LOOP_CLR_FD) = 0 [pid 5382] close(4) = 0 [pid 5382] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5382] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] <... futex resumed>) = 0 [pid 5381] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5381] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5382] <... futex resumed>) = 0 [pid 5382] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5382] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... futex resumed>) = 0 [pid 5381] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5382] <... futex resumed>) = 1 [pid 5382] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5382] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5381] <... futex resumed>) = 0 [pid 5381] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 76.314853][ T5382] REISERFS (device loop4): Using r5 hash to sort names [ 76.322616][ T5382] REISERFS (device loop4): using 3.5.x disk format [ 76.329607][ T5382] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5382] sendfile(4, 5, NULL, 140737974943952 [pid 5381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5381] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5381] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5381] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5384], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5384 [pid 5381] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5384 attached [pid 5384] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5384] open("./bus", O_RDONLY [pid 5381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5381] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5381] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5381] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5385], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5385 [pid 5381] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5385 attached [pid 5385] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5385] truncate("./bus", 6 [pid 5381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5381] exit_group(0) = ? [pid 5382] <... sendfile resumed>) = ? [pid 5384] <... open resumed>) = ? [pid 5382] +++ exited with 0 +++ [pid 5385] <... truncate resumed>) = ? [pid 5384] +++ exited with 0 +++ [pid 5385] +++ exited with 0 +++ [pid 5381] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./25/binderfs") = 0 [pid 5073] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./25/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./25") = 0 [pid 5073] mkdir("./26", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5386 ./strace-static-x86_64: Process 5386 attached [pid 5386] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5386] chdir("./26") = 0 [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5386] setpgid(0, 0) = 0 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5386] write(3, "1000", 4) = 4 [pid 5386] close(3) = 0 [pid 5386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5386] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5386] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5386] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5387], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5387 [pid 5386] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5387 attached [pid 5387] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5387] memfd_create("syzkaller", 0) = 3 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5387] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5387] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5387] close(3) = 0 [pid 5387] mkdir("./file0", 0777) = 0 [ 76.814808][ T5387] loop4: detected capacity change from 0 to 8192 [ 76.824858][ T5387] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.837989][ T5387] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 76.847545][ T5387] REISERFS (device loop4): using ordered data mode [ 76.854072][ T5387] reiserfs: using flush barriers [ 76.859927][ T5387] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.876345][ T5387] REISERFS (device loop4): checking transaction log (loop4) [pid 5387] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5387] chdir("./file0") = 0 [pid 5387] ioctl(4, LOOP_CLR_FD) = 0 [pid 5387] close(4) = 0 [pid 5387] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] <... futex resumed>) = 0 [pid 5386] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5386] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... open resumed>) = 4 [pid 5387] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5386] <... futex resumed>) = 0 [pid 5387] openat(-1, "/proc/self/exe", O_RDONLY [pid 5386] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... openat resumed>) = 5 [pid 5387] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5386] <... futex resumed>) = 0 [pid 5387] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5386] <... futex resumed>) = 0 [pid 5387] sendfile(4, 5, NULL, 140737974943952 [ 76.918697][ T5387] REISERFS (device loop4): Using r5 hash to sort names [ 76.925821][ T5387] REISERFS (device loop4): using 3.5.x disk format [ 76.932539][ T5387] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5386] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5386] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5386] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5386] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5389 attached , parent_tid=[5389], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5389 [pid 5389] set_robust_list(0x7fe8f42d09e0, 24 [pid 5386] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... set_robust_list resumed>) = 0 [pid 5389] open("./bus", O_RDONLY [pid 5386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5386] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5386] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5386] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5390], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5390 [pid 5386] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5390 attached [pid 5390] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5390] truncate("./bus", 6 [pid 5386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5386] exit_group(0) = ? [pid 5389] <... open resumed>) = ? [pid 5387] <... sendfile resumed>) = ? [pid 5390] <... truncate resumed>) = ? [pid 5389] +++ exited with 0 +++ [pid 5387] +++ exited with 0 +++ [pid 5390] +++ exited with 0 +++ [pid 5386] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5386, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./26/binderfs") = 0 [pid 5073] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./26/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./26") = 0 [pid 5073] mkdir("./27", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5391 ./strace-static-x86_64: Process 5391 attached [pid 5391] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5391] chdir("./27") = 0 [pid 5391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5391] setpgid(0, 0) = 0 [pid 5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5391] write(3, "1000", 4) = 4 [pid 5391] close(3) = 0 [pid 5391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5391] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5391] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5391] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5392], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5392 [pid 5391] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5392 attached [pid 5392] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5392] memfd_create("syzkaller", 0) = 3 [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5392] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file0", 0777) = 0 [ 77.413538][ T5392] loop4: detected capacity change from 0 to 8192 [ 77.423770][ T5392] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.436784][ T5392] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 77.446312][ T5392] REISERFS (device loop4): using ordered data mode [ 77.452916][ T5392] reiserfs: using flush barriers [ 77.459083][ T5392] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.475805][ T5392] REISERFS (device loop4): checking transaction log (loop4) [pid 5392] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5392] chdir("./file0") = 0 [pid 5392] ioctl(4, LOOP_CLR_FD) = 0 [pid 5392] close(4) = 0 [pid 5392] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5392] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] <... futex resumed>) = 0 [pid 5391] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... futex resumed>) = 0 [pid 5391] <... futex resumed>) = 1 [pid 5391] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5392] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5392] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] <... futex resumed>) = 0 [pid 5392] openat(-1, "/proc/self/exe", O_RDONLY [pid 5391] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... openat resumed>) = 5 [pid 5392] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5391] <... futex resumed>) = 0 [pid 5391] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5392] sendfile(4, 5, NULL, 140737974943952 [ 77.518132][ T5392] REISERFS (device loop4): Using r5 hash to sort names [ 77.525559][ T5392] REISERFS (device loop4): using 3.5.x disk format [ 77.532359][ T5392] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5391] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5391] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5391] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5391] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5394 attached [pid 5394] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5391] <... clone resumed>, parent_tid=[5394], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5394 [pid 5394] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 0 [pid 5391] <... futex resumed>) = 1 [pid 5394] open("./bus", O_RDONLY [pid 5391] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5391] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5391] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5391] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5395 attached [pid 5395] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5395] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] <... clone resumed>, parent_tid=[5395], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5395 [pid 5391] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5395] <... futex resumed>) = 0 [pid 5391] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] truncate("./bus", 6 [pid 5391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5391] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5391] exit_group(0) = ? [pid 5394] <... open resumed>) = ? [pid 5392] <... sendfile resumed>) = ? [pid 5395] <... truncate resumed>) = ? [pid 5394] +++ exited with 0 +++ [pid 5395] +++ exited with 0 +++ [pid 5392] +++ exited with 0 +++ [pid 5391] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./27/binderfs") = 0 [pid 5073] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./27/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./27") = 0 [pid 5073] mkdir("./28", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5396 ./strace-static-x86_64: Process 5396 attached [pid 5396] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5396] chdir("./28") = 0 [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5396] setpgid(0, 0) = 0 [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5396] write(3, "1000", 4) = 4 [pid 5396] close(3) = 0 [pid 5396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5396] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5396] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5396] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5397], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5397 ./strace-static-x86_64: Process 5397 attached [pid 5396] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5397] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5397] memfd_create("syzkaller", 0) = 3 [pid 5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5397] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5397] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5397] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5397] close(3) = 0 [pid 5397] mkdir("./file0", 0777) = 0 [ 78.049171][ T5397] loop4: detected capacity change from 0 to 8192 [ 78.059563][ T5397] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.073172][ T5397] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 78.082416][ T5397] REISERFS (device loop4): using ordered data mode [ 78.089712][ T5397] reiserfs: using flush barriers [ 78.095627][ T5397] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.112533][ T5397] REISERFS (device loop4): checking transaction log (loop4) [pid 5397] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5397] chdir("./file0") = 0 [pid 5397] ioctl(4, LOOP_CLR_FD) = 0 [pid 5397] close(4) = 0 [pid 5397] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5397] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5396] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... open resumed>) = 4 [pid 5396] <... futex resumed>) = 0 [pid 5396] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5397] openat(-1, "/proc/self/exe", O_RDONLY [pid 5396] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... openat resumed>) = 5 [pid 5396] <... futex resumed>) = 0 [pid 5397] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5397] sendfile(4, 5, NULL, 140737974943952 [pid 5396] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 78.155007][ T5397] REISERFS (device loop4): Using r5 hash to sort names [ 78.162252][ T5397] REISERFS (device loop4): using 3.5.x disk format [ 78.169135][ T5397] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5396] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5396] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5396] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5396] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5399 attached , parent_tid=[5399], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5399 [pid 5399] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5399] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5399] <... futex resumed>) = 0 [pid 5396] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5399] open("./bus", O_RDONLY [pid 5396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5396] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5396] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5396] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5396] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5400 attached , parent_tid=[5400], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5400 [pid 5396] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] set_robust_list(0x7fe8f42af9e0, 24 [pid 5396] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5400] <... set_robust_list resumed>) = 0 [pid 5400] truncate("./bus", 6 [pid 5396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5396] exit_group(0) = ? [pid 5397] <... sendfile resumed>) = ? [pid 5400] <... truncate resumed>) = ? [pid 5399] <... open resumed>) = ? [pid 5397] +++ exited with 0 +++ [pid 5400] +++ exited with 0 +++ [pid 5399] +++ exited with 0 +++ [pid 5396] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./28/binderfs") = 0 [ 78.538314][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 78.538450][ T27] audit: type=1804 audit(1671282301.943:176): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/28/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 78.568132][ T27] audit: type=1800 audit(1671282301.943:177): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./28/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./28") = 0 [pid 5073] mkdir("./29", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5401 ./strace-static-x86_64: Process 5401 attached [pid 5401] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5401] chdir("./29") = 0 [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5401] setpgid(0, 0) = 0 [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5401] write(3, "1000", 4) = 4 [pid 5401] close(3) = 0 [pid 5401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5401] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5401] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5401] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5402 attached [pid 5402] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5401] <... clone resumed>, parent_tid=[5402], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5402 [pid 5402] <... set_robust_list resumed>) = 0 [pid 5402] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5401] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5401] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5402] <... futex resumed>) = 0 [pid 5402] memfd_create("syzkaller", 0) = 3 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5402] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5402] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5402] close(3) = 0 [pid 5402] mkdir("./file0", 0777) = 0 [ 78.705144][ T5402] loop4: detected capacity change from 0 to 8192 [ 78.717050][ T5402] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 78.730105][ T5402] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 78.739364][ T5402] REISERFS (device loop4): using ordered data mode [ 78.745978][ T5402] reiserfs: using flush barriers [ 78.751792][ T5402] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.768342][ T5402] REISERFS (device loop4): checking transaction log (loop4) [pid 5402] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5402] chdir("./file0") = 0 [pid 5402] ioctl(4, LOOP_CLR_FD) = 0 [pid 5402] close(4) = 0 [pid 5402] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5402] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5401] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] <... futex resumed>) = 0 [pid 5402] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5402] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] <... futex resumed>) = 1 [pid 5402] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5402] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] <... futex resumed>) = 1 [ 78.806243][ T5402] REISERFS (device loop4): Using r5 hash to sort names [ 78.813153][ T5402] REISERFS (device loop4): using 3.5.x disk format [ 78.820877][ T5402] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5402] sendfile(4, 5, NULL, 140737974943952 [pid 5401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5401] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5401] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5401] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5404 attached , parent_tid=[5404], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5404 [ 78.836874][ T27] audit: type=1800 audit(1671282302.243:178): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5401] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] set_robust_list(0x7fe8f42d09e0, 24 [pid 5401] <... futex resumed>) = 0 [pid 5404] <... set_robust_list resumed>) = 0 [pid 5401] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] open("./bus", O_RDONLY [pid 5401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5401] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5401] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5401] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5405], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5405 ./strace-static-x86_64: Process 5405 attached [pid 5401] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] set_robust_list(0x7fe8f42af9e0, 24 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] <... set_robust_list resumed>) = 0 [pid 5405] truncate("./bus", 6 [pid 5401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5401] exit_group(0) = ? [pid 5402] <... sendfile resumed>) = ? [pid 5404] <... open resumed>) = ? [pid 5402] +++ exited with 0 +++ [pid 5405] <... truncate resumed>) = ? [pid 5405] +++ exited with 0 +++ [pid 5404] +++ exited with 0 +++ [pid 5401] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./29/binderfs") = 0 [ 79.168731][ T27] audit: type=1804 audit(1671282302.573:179): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/29/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 79.192130][ T27] audit: type=1800 audit(1671282302.573:180): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./29/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./29") = 0 [pid 5073] mkdir("./30", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5406 ./strace-static-x86_64: Process 5406 attached [pid 5406] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5406] chdir("./30") = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5406] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5406] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5407 attached , parent_tid=[5407], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5407 [pid 5407] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5406] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5407] memfd_create("syzkaller", 0) = 3 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5407] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5407] close(3) = 0 [pid 5407] mkdir("./file0", 0777) = 0 [ 79.324471][ T5407] loop4: detected capacity change from 0 to 8192 [ 79.335209][ T5407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.348308][ T5407] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 79.357588][ T5407] REISERFS (device loop4): using ordered data mode [ 79.364277][ T5407] reiserfs: using flush barriers [ 79.370567][ T5407] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.387234][ T5407] REISERFS (device loop4): checking transaction log (loop4) [pid 5407] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5407] chdir("./file0") = 0 [pid 5407] ioctl(4, LOOP_CLR_FD) = 0 [pid 5407] close(4) = 0 [pid 5407] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5407] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] <... futex resumed>) = 0 [pid 5406] <... futex resumed>) = 1 [pid 5407] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5406] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... open resumed>) = 4 [pid 5407] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5406] <... futex resumed>) = 0 [pid 5407] openat(-1, "/proc/self/exe", O_RDONLY [pid 5406] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... openat resumed>) = 5 [pid 5407] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] sendfile(4, 5, NULL, 140737974943952 [pid 5406] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 79.429560][ T5407] REISERFS (device loop4): Using r5 hash to sort names [ 79.436873][ T5407] REISERFS (device loop4): using 3.5.x disk format [ 79.443600][ T5407] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5406] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5406] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5406] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5409], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5409 [pid 5406] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5409 attached [pid 5409] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5409] open("./bus", O_RDONLY [pid 5406] <... futex resumed>) = 0 [ 79.464611][ T27] audit: type=1800 audit(1671282302.863:181): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5406] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5406] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5406] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5410 attached , parent_tid=[5410], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5410 [pid 5410] set_robust_list(0x7fe8f42af9e0, 24 [pid 5406] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5410] <... set_robust_list resumed>) = 0 [pid 5406] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5410] truncate("./bus", 6 [pid 5406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5406] exit_group(0) = ? [pid 5410] <... truncate resumed>) = ? [pid 5409] <... open resumed>) = ? [pid 5407] <... sendfile resumed>) = ? [pid 5410] +++ exited with 0 +++ [pid 5409] +++ exited with 0 +++ [pid 5407] +++ exited with 0 +++ [pid 5406] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5406, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./30/binderfs") = 0 [pid 5073] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 79.837928][ T27] audit: type=1804 audit(1671282303.243:182): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/30/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 79.861134][ T27] audit: type=1800 audit(1671282303.243:183): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./30/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./30") = 0 [pid 5073] mkdir("./31", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5411 ./strace-static-x86_64: Process 5411 attached [pid 5411] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5411] chdir("./31") = 0 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5411] setpgid(0, 0) = 0 [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5411] write(3, "1000", 4) = 4 [pid 5411] close(3) = 0 [pid 5411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5411] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5411] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5411] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5412], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5412 [pid 5411] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5412 attached [pid 5412] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5412] memfd_create("syzkaller", 0) = 3 [pid 5412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5412] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5412] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5412] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5412] close(3) = 0 [pid 5412] mkdir("./file0", 0777) = 0 [ 79.989113][ T5412] loop4: detected capacity change from 0 to 8192 [ 79.999665][ T5412] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.013309][ T5412] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 80.023026][ T5412] REISERFS (device loop4): using ordered data mode [ 80.029686][ T5412] reiserfs: using flush barriers [ 80.035611][ T5412] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.053301][ T5412] REISERFS (device loop4): checking transaction log (loop4) [pid 5412] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5412] chdir("./file0") = 0 [pid 5412] ioctl(4, LOOP_CLR_FD) = 0 [pid 5412] close(4) = 0 [pid 5412] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5411] <... futex resumed>) = 0 [pid 5412] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5411] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5412] <... open resumed>) = 4 [pid 5412] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5412] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5411] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5411] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5411] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] <... futex resumed>) = 0 [pid 5412] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5412] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5411] <... futex resumed>) = 0 [pid 5412] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5411] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5411] <... futex resumed>) = 0 [pid 5412] sendfile(4, 5, NULL, 140737974943952 [ 80.095703][ T5412] REISERFS (device loop4): Using r5 hash to sort names [ 80.102804][ T5412] REISERFS (device loop4): using 3.5.x disk format [ 80.109713][ T5412] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 80.122447][ T27] audit: type=1800 audit(1671282303.523:184): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5411] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5411] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5411] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5411] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5414 attached [pid 5414] set_robust_list(0x7fe8f42d09e0, 24 [pid 5411] <... clone resumed>, parent_tid=[5414], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5414 [pid 5411] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... set_robust_list resumed>) = 0 [pid 5411] <... futex resumed>) = 0 [pid 5414] open("./bus", O_RDONLY [pid 5411] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5411] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5411] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5411] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5415], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5415 [pid 5411] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5415 attached [pid 5415] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5415] truncate("./bus", 6 [pid 5411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5411] exit_group(0) = ? [pid 5414] <... open resumed>) = ? [pid 5412] <... sendfile resumed>) = ? [pid 5414] +++ exited with 0 +++ [pid 5415] <... truncate resumed>) = ? [pid 5412] +++ exited with 0 +++ [pid 5415] +++ exited with 0 +++ [pid 5411] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./31/binderfs") = 0 [ 80.478187][ T27] audit: type=1804 audit(1671282303.883:185): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/31/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./31/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./31") = 0 [pid 5073] mkdir("./32", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5416 ./strace-static-x86_64: Process 5416 attached [pid 5416] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5416] chdir("./32") = 0 [pid 5416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5416] setpgid(0, 0) = 0 [pid 5416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5416] write(3, "1000", 4) = 4 [pid 5416] close(3) = 0 [pid 5416] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5416] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5416] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5416] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5417 attached , parent_tid=[5417], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5417 [pid 5416] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5417] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5417] memfd_create("syzkaller", 0) = 3 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5417] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5417] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5417] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5417] close(3) = 0 [pid 5417] mkdir("./file0", 0777) = 0 [ 80.620083][ T5417] loop4: detected capacity change from 0 to 8192 [ 80.630177][ T5417] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.643394][ T5417] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 80.652762][ T5417] REISERFS (device loop4): using ordered data mode [ 80.659411][ T5417] reiserfs: using flush barriers [ 80.665263][ T5417] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.681702][ T5417] REISERFS (device loop4): checking transaction log (loop4) [pid 5417] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5417] chdir("./file0") = 0 [pid 5417] ioctl(4, LOOP_CLR_FD) = 0 [pid 5417] close(4) = 0 [pid 5417] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] <... futex resumed>) = 0 [pid 5416] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5417] <... futex resumed>) = 1 [pid 5417] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5417] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] <... futex resumed>) = 0 [pid 5416] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5417] <... futex resumed>) = 1 [pid 5417] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5417] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] <... futex resumed>) = 0 [pid 5416] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5417] <... futex resumed>) = 1 [ 80.720089][ T5417] REISERFS (device loop4): Using r5 hash to sort names [ 80.727630][ T5417] REISERFS (device loop4): using 3.5.x disk format [ 80.734309][ T5417] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5417] sendfile(4, 5, NULL, 140737974943952 [pid 5416] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5416] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5416] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5416] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5419], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5419 ./strace-static-x86_64: Process 5419 attached [pid 5416] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5419] open("./bus", O_RDONLY [pid 5416] <... futex resumed>) = 0 [pid 5416] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5416] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5416] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5416] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5420 attached , parent_tid=[5420], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5420 [pid 5416] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5420] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5420] truncate("./bus", 6 [pid 5416] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5416] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5416] exit_group(0) = ? [pid 5417] <... sendfile resumed>) = ? [pid 5417] +++ exited with 0 +++ [pid 5419] <... open resumed>) = ? [pid 5420] <... truncate resumed>) = ? [pid 5419] +++ exited with 0 +++ [pid 5420] +++ exited with 0 +++ [pid 5416] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5416, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./32/binderfs") = 0 [pid 5073] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./32/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./32") = 0 [pid 5073] mkdir("./33", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5421 ./strace-static-x86_64: Process 5421 attached [pid 5421] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5421] chdir("./33") = 0 [pid 5421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5421] setpgid(0, 0) = 0 [pid 5421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5421] write(3, "1000", 4) = 4 [pid 5421] close(3) = 0 [pid 5421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5421] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5421] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5421] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5422 attached , parent_tid=[5422], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5422 [pid 5422] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5421] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... set_robust_list resumed>) = 0 [pid 5421] <... futex resumed>) = 0 [pid 5421] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5422] memfd_create("syzkaller", 0) = 3 [pid 5422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5422] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5422] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5422] close(3) = 0 [pid 5422] mkdir("./file0", 0777) = 0 [ 81.206947][ T5422] loop4: detected capacity change from 0 to 8192 [ 81.217015][ T5422] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.230101][ T5422] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 81.239580][ T5422] REISERFS (device loop4): using ordered data mode [ 81.246180][ T5422] reiserfs: using flush barriers [ 81.251955][ T5422] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.269855][ T5422] REISERFS (device loop4): checking transaction log (loop4) [pid 5422] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5422] chdir("./file0") = 0 [pid 5422] ioctl(4, LOOP_CLR_FD) = 0 [pid 5422] close(4) = 0 [pid 5422] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] <... futex resumed>) = 0 [pid 5421] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] <... futex resumed>) = 0 [pid 5422] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5422] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] <... futex resumed>) = 0 [pid 5422] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5421] <... futex resumed>) = 0 [pid 5422] openat(-1, "/proc/self/exe", O_RDONLY [pid 5421] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5422] <... openat resumed>) = 5 [pid 5422] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] <... futex resumed>) = 0 [pid 5421] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] sendfile(4, 5, NULL, 140737974943952 [pid 5421] <... futex resumed>) = 0 [ 81.313172][ T5422] REISERFS (device loop4): Using r5 hash to sort names [ 81.320218][ T5422] REISERFS (device loop4): using 3.5.x disk format [ 81.327062][ T5422] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5421] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5421] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5421] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5421] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5424 attached [pid 5424] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5424] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] <... clone resumed>, parent_tid=[5424], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5424 [pid 5421] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] <... futex resumed>) = 0 [pid 5424] open("./bus", O_RDONLY [pid 5421] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5421] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5421] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5421] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5425 attached , parent_tid=[5425], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5425 [pid 5425] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5421] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] truncate("./bus", 6 [pid 5421] <... futex resumed>) = 0 [pid 5421] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5421] exit_group(0) = ? [pid 5422] <... sendfile resumed>) = ? [pid 5425] <... truncate resumed>) = ? [pid 5424] <... open resumed>) = ? [pid 5422] +++ exited with 0 +++ [pid 5425] +++ exited with 0 +++ [pid 5424] +++ exited with 0 +++ [pid 5421] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5421, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./33/binderfs") = 0 [pid 5073] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./33/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./33") = 0 [pid 5073] mkdir("./34", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5426 ./strace-static-x86_64: Process 5426 attached [pid 5426] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5426] chdir("./34") = 0 [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5426] setpgid(0, 0) = 0 [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5426] write(3, "1000", 4) = 4 [pid 5426] close(3) = 0 [pid 5426] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5426] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5426] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5426] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5427], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5427 [pid 5426] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5427 attached [pid 5427] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5427] memfd_create("syzkaller", 0) = 3 [pid 5427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5427] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5427] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5427] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5427] close(3) = 0 [pid 5427] mkdir("./file0", 0777) = 0 [ 81.824071][ T5427] loop4: detected capacity change from 0 to 8192 [ 81.834119][ T5427] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.848055][ T5427] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 81.857499][ T5427] REISERFS (device loop4): using ordered data mode [ 81.864510][ T5427] reiserfs: using flush barriers [ 81.870429][ T5427] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.886899][ T5427] REISERFS (device loop4): checking transaction log (loop4) [pid 5427] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5427] chdir("./file0") = 0 [pid 5427] ioctl(4, LOOP_CLR_FD) = 0 [pid 5427] close(4) = 0 [pid 5427] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5427] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] <... futex resumed>) = 0 [pid 5426] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = 0 [pid 5426] <... futex resumed>) = 1 [pid 5427] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5426] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] <... open resumed>) = 4 [pid 5427] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5427] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5427] openat(-1, "/proc/self/exe", O_RDONLY [pid 5426] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] <... openat resumed>) = 5 [pid 5427] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5427] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5427] sendfile(4, 5, NULL, 140737974943952 [ 81.928636][ T5427] REISERFS (device loop4): Using r5 hash to sort names [ 81.935755][ T5427] REISERFS (device loop4): using 3.5.x disk format [ 81.942604][ T5427] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5426] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5426] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5426] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5426] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5429], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5429 [pid 5426] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5429 attached [pid 5429] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5429] open("./bus", O_RDONLY [pid 5426] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5426] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5426] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5426] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5430 attached [pid 5430] set_robust_list(0x7fe8f42af9e0, 24 [pid 5426] <... clone resumed>, parent_tid=[5430], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5430 [pid 5430] <... set_robust_list resumed>) = 0 [pid 5426] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] truncate("./bus", 6 [pid 5426] <... futex resumed>) = 0 [pid 5426] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5426] exit_group(0) = ? [pid 5427] <... sendfile resumed>) = ? [pid 5429] <... open resumed>) = ? [pid 5427] +++ exited with 0 +++ [pid 5430] <... truncate resumed>) = ? [pid 5429] +++ exited with 0 +++ [pid 5430] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5426, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./34/binderfs") = 0 [pid 5073] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./34/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./34") = 0 [pid 5073] mkdir("./35", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5431 ./strace-static-x86_64: Process 5431 attached [pid 5431] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5431] chdir("./35") = 0 [pid 5431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5431] setpgid(0, 0) = 0 [pid 5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5431] write(3, "1000", 4) = 4 [pid 5431] close(3) = 0 [pid 5431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5431] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5431] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5431] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5432], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5432 [pid 5431] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5432 attached [pid 5432] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5432] memfd_create("syzkaller", 0) = 3 [pid 5432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5432] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5432] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5432] close(3) = 0 [pid 5432] mkdir("./file0", 0777) = 0 [ 82.451545][ T5432] loop4: detected capacity change from 0 to 8192 [ 82.461879][ T5432] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.475100][ T5432] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 82.484444][ T5432] REISERFS (device loop4): using ordered data mode [ 82.491132][ T5432] reiserfs: using flush barriers [ 82.496838][ T5432] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.513968][ T5432] REISERFS (device loop4): checking transaction log (loop4) [pid 5432] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5432] chdir("./file0") = 0 [pid 5432] ioctl(4, LOOP_CLR_FD) = 0 [pid 5432] close(4) = 0 [pid 5432] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5432] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5431] <... futex resumed>) = 0 [pid 5431] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5431] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... futex resumed>) = 0 [pid 5432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5432] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] <... futex resumed>) = 0 [pid 5431] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... futex resumed>) = 1 [pid 5432] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5432] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] <... futex resumed>) = 0 [pid 5431] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... futex resumed>) = 1 [pid 5431] <... futex resumed>) = 0 [pid 5432] sendfile(4, 5, NULL, 140737974943952 [ 82.554841][ T5432] REISERFS (device loop4): Using r5 hash to sort names [ 82.561964][ T5432] REISERFS (device loop4): using 3.5.x disk format [ 82.569060][ T5432] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5431] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5431] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5431] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5431] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5434], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5434 [pid 5431] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5434 attached [pid 5434] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5434] open("./bus", O_RDONLY [pid 5431] <... futex resumed>) = 0 [pid 5431] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5431] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5431] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5431] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5435 attached [pid 5435] set_robust_list(0x7fe8f42af9e0, 24 [pid 5431] <... clone resumed>, parent_tid=[5435], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5435 [pid 5431] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5435] <... set_robust_list resumed>) = 0 [pid 5431] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5435] truncate("./bus", 6 [pid 5431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5431] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5431] exit_group(0) = ? [pid 5432] <... sendfile resumed>) = ? [pid 5432] +++ exited with 0 +++ [pid 5434] <... open resumed>) = ? [pid 5434] +++ exited with 0 +++ [pid 5435] <... truncate resumed>) = ? [pid 5435] +++ exited with 0 +++ [pid 5431] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5431, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./35/binderfs") = 0 [pid 5073] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./35/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./35") = 0 [pid 5073] mkdir("./36", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5436 ./strace-static-x86_64: Process 5436 attached [pid 5436] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5436] chdir("./36") = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5436] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5436] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5437], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5437 ./strace-static-x86_64: Process 5437 attached [pid 5436] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5437] <... set_robust_list resumed>) = 0 [pid 5437] memfd_create("syzkaller", 0) = 3 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5437] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5437] close(3) = 0 [pid 5437] mkdir("./file0", 0777) = 0 [ 83.088595][ T5437] loop4: detected capacity change from 0 to 8192 [ 83.098740][ T5437] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.111929][ T5437] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 83.121394][ T5437] REISERFS (device loop4): using ordered data mode [ 83.128145][ T5437] reiserfs: using flush barriers [ 83.134135][ T5437] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.150697][ T5437] REISERFS (device loop4): checking transaction log (loop4) [pid 5437] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5437] chdir("./file0") = 0 [pid 5437] ioctl(4, LOOP_CLR_FD) = 0 [pid 5437] close(4) = 0 [pid 5437] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5436] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5437] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5436] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] openat(-1, "/proc/self/exe", O_RDONLY [pid 5436] <... futex resumed>) = 0 [pid 5437] <... openat resumed>) = 5 [pid 5436] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5437] sendfile(4, 5, NULL, 140737974943952 [pid 5436] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 83.192547][ T5437] REISERFS (device loop4): Using r5 hash to sort names [ 83.199644][ T5437] REISERFS (device loop4): using 3.5.x disk format [ 83.206504][ T5437] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5436] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5436] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5436] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5439 attached [pid 5439] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5436] <... clone resumed>, parent_tid=[5439], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5439 [pid 5439] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] open("./bus", O_RDONLY [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5436] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5436] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5440 attached , parent_tid=[5440], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5440 [pid 5440] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5440] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5440] <... futex resumed>) = 0 [pid 5436] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] truncate("./bus", 6 [pid 5436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5436] exit_group(0) = ? [pid 5437] <... sendfile resumed>) = ? [pid 5439] <... open resumed>) = ? [pid 5439] +++ exited with 0 +++ [pid 5440] <... truncate resumed>) = ? [pid 5437] +++ exited with 0 +++ [pid 5440] +++ exited with 0 +++ [pid 5436] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./36/binderfs") = 0 [ 83.568446][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 83.568459][ T27] audit: type=1804 audit(1671282306.973:200): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/36/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.599073][ T27] audit: type=1800 audit(1671282306.973:201): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./36/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./36") = 0 [pid 5073] mkdir("./37", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5441 ./strace-static-x86_64: Process 5441 attached [pid 5441] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5441] chdir("./37") = 0 [pid 5441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5441] setpgid(0, 0) = 0 [pid 5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5441] write(3, "1000", 4) = 4 [pid 5441] close(3) = 0 [pid 5441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5441] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5441] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5441] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5442], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5442 [pid 5441] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5442 attached [pid 5442] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5442] memfd_create("syzkaller", 0) = 3 [pid 5442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5442] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5442] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5442] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5442] close(3) = 0 [pid 5442] mkdir("./file0", 0777) = 0 [ 83.732753][ T5442] loop4: detected capacity change from 0 to 8192 [ 83.742937][ T5442] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.755982][ T5442] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 83.765148][ T5442] REISERFS (device loop4): using ordered data mode [ 83.771708][ T5442] reiserfs: using flush barriers [ 83.777596][ T5442] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.794247][ T5442] REISERFS (device loop4): checking transaction log (loop4) [pid 5442] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5442] chdir("./file0") = 0 [pid 5442] ioctl(4, LOOP_CLR_FD) = 0 [pid 5442] close(4) = 0 [pid 5442] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] <... futex resumed>) = 0 [pid 5441] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5441] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] <... futex resumed>) = 0 [pid 5442] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5442] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... futex resumed>) = 0 [pid 5441] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] <... futex resumed>) = 1 [pid 5442] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5442] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... futex resumed>) = 0 [pid 5441] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] <... futex resumed>) = 1 [ 83.836315][ T5442] REISERFS (device loop4): Using r5 hash to sort names [ 83.843263][ T5442] REISERFS (device loop4): using 3.5.x disk format [ 83.850402][ T5442] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5442] sendfile(4, 5, NULL, 140737974943952 [pid 5441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5441] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 83.867450][ T27] audit: type=1800 audit(1671282307.273:202): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5441] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5441] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5444], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5444 [pid 5441] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5444 attached [pid 5444] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5444] open("./bus", O_RDONLY [pid 5441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5441] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5441] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5441] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5441] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5445 attached , parent_tid=[5445], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5445 [pid 5445] set_robust_list(0x7fe8f42af9e0, 24 [pid 5441] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... set_robust_list resumed>) = 0 [pid 5441] <... futex resumed>) = 0 [pid 5445] truncate("./bus", 6 [pid 5441] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5441] exit_group(0) = ? [pid 5442] <... sendfile resumed>) = ? [pid 5445] <... truncate resumed>) = ? [pid 5444] <... open resumed>) = ? [pid 5445] +++ exited with 0 +++ [pid 5444] +++ exited with 0 +++ [pid 5442] +++ exited with 0 +++ [pid 5441] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./37/binderfs") = 0 [pid 5073] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./37/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./37") = 0 [pid 5073] mkdir("./38", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 84.228225][ T27] audit: type=1804 audit(1671282307.633:203): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/37/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 84.251538][ T27] audit: type=1800 audit(1671282307.633:204): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5446 ./strace-static-x86_64: Process 5446 attached [pid 5446] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5446] chdir("./38") = 0 [pid 5446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5446] setpgid(0, 0) = 0 [pid 5446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5446] write(3, "1000", 4) = 4 [pid 5446] close(3) = 0 [pid 5446] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5446] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5446] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5446] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5447 attached , parent_tid=[5447], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5447 [pid 5446] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5446] <... futex resumed>) = 0 [pid 5447] <... set_robust_list resumed>) = 0 [pid 5446] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5447] memfd_create("syzkaller", 0) = 3 [pid 5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5447] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5447] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5447] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5447] close(3) = 0 [pid 5447] mkdir("./file0", 0777) = 0 [ 84.369158][ T5447] loop4: detected capacity change from 0 to 8192 [ 84.379586][ T5447] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.392735][ T5447] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 84.402734][ T5447] REISERFS (device loop4): using ordered data mode [ 84.409260][ T5447] reiserfs: using flush barriers [ 84.414895][ T5447] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.431356][ T5447] REISERFS (device loop4): checking transaction log (loop4) [pid 5447] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5447] chdir("./file0") = 0 [pid 5447] ioctl(4, LOOP_CLR_FD) = 0 [pid 5447] close(4) = 0 [pid 5447] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... futex resumed>) = 0 [pid 5446] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] <... futex resumed>) = 1 [pid 5447] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5447] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... futex resumed>) = 0 [pid 5446] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] <... futex resumed>) = 1 [pid 5447] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5447] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... futex resumed>) = 0 [pid 5446] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] <... futex resumed>) = 1 [ 84.474199][ T5447] REISERFS (device loop4): Using r5 hash to sort names [ 84.481166][ T5447] REISERFS (device loop4): using 3.5.x disk format [ 84.488332][ T5447] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5447] sendfile(4, 5, NULL, 140737974943952 [pid 5446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5446] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 84.506527][ T27] audit: type=1800 audit(1671282307.913:205): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5446] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5446] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5449], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5449 [pid 5446] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5449 attached [pid 5449] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5449] open("./bus", O_RDONLY [pid 5446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5446] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5446] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5446] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5450 attached [pid 5450] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5450] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5446] <... clone resumed>, parent_tid=[5450], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5450 [pid 5446] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5450] <... futex resumed>) = 0 [pid 5446] <... futex resumed>) = 1 [pid 5450] truncate("./bus", 6 [pid 5446] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5446] exit_group(0) = ? [pid 5447] <... sendfile resumed>) = ? [pid 5450] <... truncate resumed>) = ? [pid 5449] <... open resumed>) = ? [pid 5450] +++ exited with 0 +++ [pid 5449] +++ exited with 0 +++ [pid 5447] +++ exited with 0 +++ [pid 5446] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5446, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./38/binderfs") = 0 [pid 5073] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./38/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./38") = 0 [pid 5073] mkdir("./39", 0777) = 0 [ 84.868097][ T27] audit: type=1804 audit(1671282308.273:206): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/38/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 84.891533][ T27] audit: type=1800 audit(1671282308.273:207): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5451 ./strace-static-x86_64: Process 5451 attached [pid 5451] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5451] chdir("./39") = 0 [pid 5451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5451] setpgid(0, 0) = 0 [pid 5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5451] write(3, "1000", 4) = 4 [pid 5451] close(3) = 0 [pid 5451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5451] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5451] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5451] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5452 attached [pid 5452] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5452] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5451] <... clone resumed>, parent_tid=[5452], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5452 [pid 5451] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5451] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5452] memfd_create("syzkaller", 0) = 3 [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5452] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5452] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5452] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5452] close(3) = 0 [pid 5452] mkdir("./file0", 0777) = 0 [ 85.015792][ T5452] loop4: detected capacity change from 0 to 8192 [ 85.025918][ T5452] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.039307][ T5452] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 85.048908][ T5452] REISERFS (device loop4): using ordered data mode [ 85.055640][ T5452] reiserfs: using flush barriers [ 85.061648][ T5452] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.078309][ T5452] REISERFS (device loop4): checking transaction log (loop4) [pid 5452] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5452] chdir("./file0") = 0 [pid 5452] ioctl(4, LOOP_CLR_FD) = 0 [pid 5452] close(4) = 0 [pid 5452] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5451] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 0 [ 85.115737][ T5452] REISERFS (device loop4): Using r5 hash to sort names [ 85.122661][ T5452] REISERFS (device loop4): using 3.5.x disk format [ 85.129694][ T5452] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5452] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5452] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... futex resumed>) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5452] openat(-1, "/proc/self/exe", O_RDONLY [pid 5451] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... openat resumed>) = 5 [pid 5452] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... futex resumed>) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5452] sendfile(4, 5, NULL, 140737974943952 [ 85.147485][ T27] audit: type=1800 audit(1671282308.553:208): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5451] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5451] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5451] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5451] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5454], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5454 ./strace-static-x86_64: Process 5454 attached [pid 5451] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] set_robust_list(0x7fe8f42d09e0, 24 [pid 5451] <... futex resumed>) = 0 [pid 5451] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5454] <... set_robust_list resumed>) = 0 [pid 5454] open("./bus", O_RDONLY [pid 5451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5451] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5451] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5451] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5451] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5455 attached , parent_tid=[5455], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5455 [pid 5451] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5455] truncate("./bus", 6 [pid 5451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5451] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5451] exit_group(0) = ? [pid 5455] <... truncate resumed>) = ? [pid 5454] <... open resumed>) = ? [pid 5452] <... sendfile resumed>) = ? [pid 5455] +++ exited with 0 +++ [pid 5454] +++ exited with 0 +++ [pid 5452] +++ exited with 0 +++ [pid 5451] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./39/binderfs") = 0 [ 85.528021][ T27] audit: type=1804 audit(1671282308.933:209): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/39/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./39/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./39") = 0 [pid 5073] mkdir("./40", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5456 ./strace-static-x86_64: Process 5456 attached [pid 5456] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5456] chdir("./40") = 0 [pid 5456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5456] setpgid(0, 0) = 0 [pid 5456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5456] write(3, "1000", 4) = 4 [pid 5456] close(3) = 0 [pid 5456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5456] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5456] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5456] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5457 attached [pid 5457] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5456] <... clone resumed>, parent_tid=[5457], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5457 [pid 5457] <... set_robust_list resumed>) = 0 [pid 5457] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5456] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5456] <... futex resumed>) = 0 [pid 5457] memfd_create("syzkaller", 0 [pid 5456] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5457] <... memfd_create resumed>) = 3 [pid 5457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5457] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5457] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5457] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5457] close(3) = 0 [pid 5457] mkdir("./file0", 0777) = 0 [ 85.683681][ T5457] loop4: detected capacity change from 0 to 8192 [ 85.694401][ T5457] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.707599][ T5457] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 85.716912][ T5457] REISERFS (device loop4): using ordered data mode [ 85.723630][ T5457] reiserfs: using flush barriers [ 85.729726][ T5457] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.746294][ T5457] REISERFS (device loop4): checking transaction log (loop4) [pid 5457] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5457] chdir("./file0") = 0 [pid 5457] ioctl(4, LOOP_CLR_FD) = 0 [pid 5457] close(4) = 0 [pid 5457] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5456] <... futex resumed>) = 0 [pid 5457] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5456] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5456] <... futex resumed>) = 0 [pid 5457] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5456] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] <... open resumed>) = 4 [pid 5457] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5456] <... futex resumed>) = 0 [pid 5457] openat(-1, "/proc/self/exe", O_RDONLY [pid 5456] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... openat resumed>) = 5 [pid 5456] <... futex resumed>) = 0 [pid 5457] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] <... futex resumed>) = 0 [pid 5456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] sendfile(4, 5, NULL, 140737974943952 [pid 5456] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.789142][ T5457] REISERFS (device loop4): Using r5 hash to sort names [ 85.796266][ T5457] REISERFS (device loop4): using 3.5.x disk format [ 85.802988][ T5457] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5456] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5456] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5456] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5456] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5459], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5459 [pid 5456] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5459 attached ) = 0 [pid 5459] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5456] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] open("./bus", O_RDONLY [pid 5456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5456] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5456] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5456] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5460], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5460 [pid 5456] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5456] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5460 attached [pid 5460] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5460] truncate("./bus", 6 [pid 5456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5456] exit_group(0) = ? [pid 5457] <... sendfile resumed>) = ? [pid 5459] <... open resumed>) = ? [pid 5457] +++ exited with 0 +++ [pid 5459] +++ exited with 0 +++ [pid 5460] <... truncate resumed>) = ? [pid 5460] +++ exited with 0 +++ [pid 5456] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5456, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./40/binderfs") = 0 [pid 5073] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./40/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./40") = 0 [pid 5073] mkdir("./41", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5461 ./strace-static-x86_64: Process 5461 attached [pid 5461] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5461] chdir("./41") = 0 [pid 5461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5461] setpgid(0, 0) = 0 [pid 5461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5461] write(3, "1000", 4) = 4 [pid 5461] close(3) = 0 [pid 5461] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5461] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5461] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5461] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5462 attached , parent_tid=[5462], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5462 [pid 5461] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5462] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5462] memfd_create("syzkaller", 0) = 3 [pid 5462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5462] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5462] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5462] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5462] close(3) = 0 [pid 5462] mkdir("./file0", 0777) = 0 [ 86.326619][ T5462] loop4: detected capacity change from 0 to 8192 [ 86.337373][ T5462] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.350532][ T5462] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 86.360422][ T5462] REISERFS (device loop4): using ordered data mode [ 86.367296][ T5462] reiserfs: using flush barriers [ 86.373186][ T5462] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.389631][ T5462] REISERFS (device loop4): checking transaction log (loop4) [pid 5462] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5462] chdir("./file0") = 0 [pid 5462] ioctl(4, LOOP_CLR_FD) = 0 [pid 5462] close(4) = 0 [pid 5462] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5461] <... futex resumed>) = 0 [pid 5462] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5461] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... open resumed>) = 4 [pid 5461] <... futex resumed>) = 0 [pid 5462] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... futex resumed>) = 0 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5462] openat(-1, "/proc/self/exe", O_RDONLY [pid 5461] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... openat resumed>) = 5 [pid 5461] <... futex resumed>) = 0 [pid 5462] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... futex resumed>) = 0 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5462] sendfile(4, 5, NULL, 140737974943952 [pid 5461] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.431770][ T5462] REISERFS (device loop4): Using r5 hash to sort names [ 86.438783][ T5462] REISERFS (device loop4): using 3.5.x disk format [ 86.445674][ T5462] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5461] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5461] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5461] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5461] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5461] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5464 attached [pid 5464] set_robust_list(0x7fe8f42d09e0, 24 [pid 5461] <... clone resumed>, parent_tid=[5464], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5464 [pid 5464] <... set_robust_list resumed>) = 0 [pid 5461] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] open("./bus", O_RDONLY [pid 5461] <... futex resumed>) = 0 [pid 5461] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5461] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5461] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5461] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5465 attached , parent_tid=[5465], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5465 [pid 5461] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5465] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5465] truncate("./bus", 6 [pid 5461] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5461] exit_group(0) = ? [pid 5462] <... sendfile resumed>) = ? [pid 5464] <... open resumed>) = ? [pid 5462] +++ exited with 0 +++ [pid 5465] <... truncate resumed>) = ? [pid 5464] +++ exited with 0 +++ [pid 5465] +++ exited with 0 +++ [pid 5461] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5461, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./41/binderfs") = 0 [pid 5073] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./41/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./41") = 0 [pid 5073] mkdir("./42", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5466 ./strace-static-x86_64: Process 5466 attached [pid 5466] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5466] chdir("./42") = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5466] setpgid(0, 0) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5466] write(3, "1000", 4) = 4 [pid 5466] close(3) = 0 [pid 5466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5466] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5466] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5466] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5467], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5467 [pid 5466] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5467 attached [pid 5467] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5467] memfd_create("syzkaller", 0) = 3 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5467] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5467] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5467] close(3) = 0 [pid 5467] mkdir("./file0", 0777) = 0 [ 86.921633][ T5467] loop4: detected capacity change from 0 to 8192 [ 86.931846][ T5467] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.945047][ T5467] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 86.954920][ T5467] REISERFS (device loop4): using ordered data mode [ 86.961901][ T5467] reiserfs: using flush barriers [ 86.967787][ T5467] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.984379][ T5467] REISERFS (device loop4): checking transaction log (loop4) [pid 5467] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5467] chdir("./file0") = 0 [pid 5467] ioctl(4, LOOP_CLR_FD) = 0 [pid 5467] close(4) = 0 [pid 5467] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5467] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] <... futex resumed>) = 0 [pid 5466] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 0 [pid 5467] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5467] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... futex resumed>) = 0 [pid 5466] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 1 [pid 5467] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5467] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5467] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] <... futex resumed>) = 0 [pid 5466] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 0 [ 87.021831][ T5467] REISERFS (device loop4): Using r5 hash to sort names [ 87.028818][ T5467] REISERFS (device loop4): using 3.5.x disk format [ 87.036448][ T5467] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5467] sendfile(4, 5, NULL, 140737974943952 [pid 5466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5466] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5466] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5469 attached , parent_tid=[5469], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5469 [pid 5469] set_robust_list(0x7fe8f42d09e0, 24 [pid 5466] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] <... set_robust_list resumed>) = 0 [pid 5469] open("./bus", O_RDONLY [pid 5466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5466] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5466] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5470 attached [pid 5470] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5470] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] <... clone resumed>, parent_tid=[5470], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5470 [pid 5466] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] <... futex resumed>) = 0 [pid 5466] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] truncate("./bus", 6 [pid 5466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] exit_group(0) = ? [pid 5467] <... sendfile resumed>) = ? [pid 5469] <... open resumed>) = ? [pid 5467] +++ exited with 0 +++ [pid 5469] +++ exited with 0 +++ [pid 5470] <... truncate resumed>) = ? [pid 5470] +++ exited with 0 +++ [pid 5466] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./42/binderfs") = 0 [pid 5073] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./42/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./42") = 0 [pid 5073] mkdir("./43", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5471 attached , child_tidptr=0x5555558b65d0) = 5471 [pid 5471] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5471] chdir("./43") = 0 [pid 5471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5471] setpgid(0, 0) = 0 [pid 5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5471] write(3, "1000", 4) = 4 [pid 5471] close(3) = 0 [pid 5471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5471] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5471] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5471] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5472], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5472 [pid 5471] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5472 attached [pid 5472] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5472] memfd_create("syzkaller", 0) = 3 [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5472] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5472] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5472] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5472] close(3) = 0 [pid 5472] mkdir("./file0", 0777) = 0 [ 87.526820][ T5472] loop4: detected capacity change from 0 to 8192 [ 87.537255][ T5472] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.550303][ T5472] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 87.559663][ T5472] REISERFS (device loop4): using ordered data mode [ 87.566328][ T5472] reiserfs: using flush barriers [ 87.572006][ T5472] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.588589][ T5472] REISERFS (device loop4): checking transaction log (loop4) [pid 5472] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5472] chdir("./file0") = 0 [pid 5472] ioctl(4, LOOP_CLR_FD) = 0 [pid 5472] close(4) = 0 [pid 5472] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5472] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5471] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] <... futex resumed>) = 0 [pid 5472] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5472] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] <... futex resumed>) = 1 [pid 5472] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5472] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] <... futex resumed>) = 1 [ 87.631739][ T5472] REISERFS (device loop4): Using r5 hash to sort names [ 87.638939][ T5472] REISERFS (device loop4): using 3.5.x disk format [ 87.645924][ T5472] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5472] sendfile(4, 5, NULL, 140737974943952 [pid 5471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5471] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5471] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5471] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5474 attached [pid 5474] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5474] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] <... clone resumed>, parent_tid=[5474], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5474 [pid 5471] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5474] open("./bus", O_RDONLY [pid 5471] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5471] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5471] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5471] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5475 attached , parent_tid=[5475], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5475 [pid 5471] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5475] truncate("./bus", 6 [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5471] exit_group(0) = ? [pid 5474] <... open resumed>) = ? [pid 5472] <... sendfile resumed>) = ? [pid 5474] +++ exited with 0 +++ [pid 5475] <... truncate resumed>) = ? [pid 5475] +++ exited with 0 +++ [pid 5472] +++ exited with 0 +++ [pid 5471] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./43/binderfs") = 0 [pid 5073] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./43/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./43") = 0 [pid 5073] mkdir("./44", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5476 ./strace-static-x86_64: Process 5476 attached [pid 5476] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5476] chdir("./44") = 0 [pid 5476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5476] setpgid(0, 0) = 0 [pid 5476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5476] write(3, "1000", 4) = 4 [pid 5476] close(3) = 0 [pid 5476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5476] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5476] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5476] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5477 attached , parent_tid=[5477], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5477 [pid 5477] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5477] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5476] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5477] <... futex resumed>) = 0 [pid 5477] memfd_create("syzkaller", 0 [pid 5476] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5477] <... memfd_create resumed>) = 3 [pid 5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5477] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5477] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5477] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5477] close(3) = 0 [pid 5477] mkdir("./file0", 0777) = 0 [ 88.127074][ T5477] loop4: detected capacity change from 0 to 8192 [ 88.137000][ T5477] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.150047][ T5477] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 88.159319][ T5477] REISERFS (device loop4): using ordered data mode [ 88.165946][ T5477] reiserfs: using flush barriers [ 88.171680][ T5477] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.188177][ T5477] REISERFS (device loop4): checking transaction log (loop4) [pid 5477] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5477] chdir("./file0") = 0 [pid 5477] ioctl(4, LOOP_CLR_FD) = 0 [pid 5477] close(4) = 0 [pid 5477] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5477] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5476] <... futex resumed>) = 0 [pid 5476] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5476] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5477] <... futex resumed>) = 0 [pid 5477] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5477] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... futex resumed>) = 0 [pid 5476] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5477] <... futex resumed>) = 1 [pid 5477] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5477] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... futex resumed>) = 0 [pid 5476] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5477] <... futex resumed>) = 1 [ 88.226313][ T5477] REISERFS (device loop4): Using r5 hash to sort names [ 88.233256][ T5477] REISERFS (device loop4): using 3.5.x disk format [ 88.240177][ T5477] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5477] sendfile(4, 5, NULL, 140737974943952 [pid 5476] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5476] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5476] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5476] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5479 attached , parent_tid=[5479], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5479 [pid 5479] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5479] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5476] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5479] open("./bus", O_RDONLY [pid 5476] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5476] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5476] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5476] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5480 attached [pid 5480] set_robust_list(0x7fe8f42af9e0, 24 [pid 5476] <... clone resumed>, parent_tid=[5480], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5480 [pid 5480] <... set_robust_list resumed>) = 0 [pid 5480] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5476] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... futex resumed>) = 0 [pid 5476] <... futex resumed>) = 1 [pid 5480] truncate("./bus", 6 [pid 5476] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5476] exit_group(0) = ? [pid 5480] <... truncate resumed>) = ? [pid 5479] <... open resumed>) = ? [pid 5477] <... sendfile resumed>) = ? [pid 5480] +++ exited with 0 +++ [pid 5479] +++ exited with 0 +++ [pid 5477] +++ exited with 0 +++ [pid 5476] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5476, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./44/binderfs") = 0 [ 88.599110][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 88.599126][ T27] audit: type=1804 audit(1671282312.003:224): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/44/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 88.629022][ T27] audit: type=1800 audit(1671282312.003:225): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./44/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./44") = 0 [pid 5073] mkdir("./45", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5481 ./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5481] chdir("./45") = 0 [pid 5481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5481] setpgid(0, 0) = 0 [pid 5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5481] write(3, "1000", 4) = 4 [pid 5481] close(3) = 0 [pid 5481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5481] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5481] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5482], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5482 [pid 5481] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5482 attached [pid 5482] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5482] memfd_create("syzkaller", 0) = 3 [pid 5482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5482] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5482] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5482] close(3) = 0 [pid 5482] mkdir("./file0", 0777) = 0 [ 88.755107][ T5482] loop4: detected capacity change from 0 to 8192 [ 88.765610][ T5482] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.779010][ T5482] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 88.788471][ T5482] REISERFS (device loop4): using ordered data mode [ 88.795004][ T5482] reiserfs: using flush barriers [ 88.801302][ T5482] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.817984][ T5482] REISERFS (device loop4): checking transaction log (loop4) [pid 5482] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5482] chdir("./file0") = 0 [pid 5482] ioctl(4, LOOP_CLR_FD) = 0 [pid 5482] close(4) = 0 [pid 5482] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] <... futex resumed>) = 0 [pid 5481] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... futex resumed>) = 0 [pid 5482] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5482] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] <... futex resumed>) = 0 [pid 5482] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5481] <... futex resumed>) = 0 [pid 5482] openat(-1, "/proc/self/exe", O_RDONLY [pid 5481] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... openat resumed>) = 5 [pid 5482] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] <... futex resumed>) = 0 [pid 5482] sendfile(4, 5, NULL, 140737974943952 [pid 5481] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.859786][ T5482] REISERFS (device loop4): Using r5 hash to sort names [ 88.866759][ T5482] REISERFS (device loop4): using 3.5.x disk format [ 88.873557][ T5482] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 88.892103][ T27] audit: type=1800 audit(1671282312.293:226): pid=5482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5481] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5481] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5481] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5484], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5484 ./strace-static-x86_64: Process 5484 attached [pid 5481] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5484] open("./bus", O_RDONLY [pid 5481] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5481] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5481] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5485 attached , parent_tid=[5485], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5485 [pid 5485] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5485] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5481] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5485] <... futex resumed>) = 0 [pid 5485] truncate("./bus", 6 [pid 5481] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5481] exit_group(0) = ? [pid 5482] <... sendfile resumed>) = ? [pid 5485] <... truncate resumed>) = ? [pid 5484] <... open resumed>) = ? [pid 5482] +++ exited with 0 +++ [pid 5485] +++ exited with 0 +++ [pid 5484] +++ exited with 0 +++ [pid 5481] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5481, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./45/binderfs") = 0 [ 89.238499][ T27] audit: type=1804 audit(1671282312.643:227): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/45/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 89.262054][ T27] audit: type=1800 audit(1671282312.643:228): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./45/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./45") = 0 [pid 5073] mkdir("./46", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5486 ./strace-static-x86_64: Process 5486 attached [pid 5486] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5486] chdir("./46") = 0 [pid 5486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5486] setpgid(0, 0) = 0 [pid 5486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5486] write(3, "1000", 4) = 4 [pid 5486] close(3) = 0 [pid 5486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5486] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5486] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5486] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5487 attached , parent_tid=[5487], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5487 [pid 5487] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5487] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5487] <... futex resumed>) = 0 [pid 5486] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5487] memfd_create("syzkaller", 0) = 3 [pid 5487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5487] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5487] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5487] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5487] close(3) = 0 [pid 5487] mkdir("./file0", 0777) = 0 [ 89.396720][ T5487] loop4: detected capacity change from 0 to 8192 [ 89.407260][ T5487] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.420419][ T5487] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 89.429691][ T5487] REISERFS (device loop4): using ordered data mode [ 89.436348][ T5487] reiserfs: using flush barriers [ 89.442070][ T5487] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.458561][ T5487] REISERFS (device loop4): checking transaction log (loop4) [pid 5487] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5487] chdir("./file0") = 0 [pid 5487] ioctl(4, LOOP_CLR_FD) = 0 [pid 5487] close(4) = 0 [pid 5487] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5486] <... futex resumed>) = 0 [pid 5486] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 89.495967][ T5487] REISERFS (device loop4): Using r5 hash to sort names [ 89.502911][ T5487] REISERFS (device loop4): using 3.5.x disk format [ 89.509979][ T5487] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5487] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5487] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5486] <... futex resumed>) = 0 [pid 5487] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] <... futex resumed>) = 0 [pid 5487] openat(-1, "/proc/self/exe", O_RDONLY [pid 5486] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5487] <... openat resumed>) = 5 [pid 5487] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5486] <... futex resumed>) = 0 [pid 5487] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] <... futex resumed>) = 0 [pid 5487] sendfile(4, 5, NULL, 140737974943952 [ 89.529967][ T27] audit: type=1800 audit(1671282312.933:229): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5486] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5486] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5486] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5486] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5489], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5489 [pid 5486] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5489 attached [pid 5489] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5489] open("./bus", O_RDONLY [pid 5486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5486] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5486] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5486] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5490], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5490 [pid 5486] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5490 attached [pid 5490] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5490] truncate("./bus", 6 [pid 5486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5486] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5486] exit_group(0) = ? [pid 5487] <... sendfile resumed>) = ? [pid 5489] <... open resumed>) = ? [pid 5487] +++ exited with 0 +++ [pid 5490] <... truncate resumed>) = ? [pid 5490] +++ exited with 0 +++ [pid 5489] +++ exited with 0 +++ [pid 5486] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5486, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./46/binderfs") = 0 [pid 5073] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 89.918672][ T27] audit: type=1804 audit(1671282313.323:230): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/46/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 89.942527][ T27] audit: type=1800 audit(1671282313.323:231): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./46/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./46") = 0 [pid 5073] mkdir("./47", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5491 attached , child_tidptr=0x5555558b65d0) = 5491 [pid 5491] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5491] chdir("./47") = 0 [pid 5491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5491] setpgid(0, 0) = 0 [pid 5491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5491] write(3, "1000", 4) = 4 [pid 5491] close(3) = 0 [pid 5491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5491] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5491] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5491] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5492 attached , parent_tid=[5492], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5492 [pid 5491] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5491] <... futex resumed>) = 0 [pid 5492] <... set_robust_list resumed>) = 0 [pid 5491] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5492] memfd_create("syzkaller", 0) = 3 [pid 5492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5492] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5492] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5492] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5492] close(3) = 0 [pid 5492] mkdir("./file0", 0777) = 0 [ 90.077573][ T5492] loop4: detected capacity change from 0 to 8192 [ 90.087448][ T5492] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.100533][ T5492] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 90.110143][ T5492] REISERFS (device loop4): using ordered data mode [ 90.116995][ T5492] reiserfs: using flush barriers [ 90.122742][ T5492] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.139187][ T5492] REISERFS (device loop4): checking transaction log (loop4) [pid 5492] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5492] chdir("./file0") = 0 [pid 5492] ioctl(4, LOOP_CLR_FD) = 0 [pid 5492] close(4) = 0 [pid 5492] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5492] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5491] <... futex resumed>) = 0 [pid 5491] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5491] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5492] <... futex resumed>) = 0 [ 90.177618][ T5492] REISERFS (device loop4): Using r5 hash to sort names [ 90.184980][ T5492] REISERFS (device loop4): using 3.5.x disk format [ 90.191950][ T5492] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5492] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5492] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5491] <... futex resumed>) = 0 [pid 5491] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] <... futex resumed>) = 0 [pid 5491] <... futex resumed>) = 1 [pid 5492] openat(-1, "/proc/self/exe", O_RDONLY [pid 5491] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5492] <... openat resumed>) = 5 [pid 5492] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5491] <... futex resumed>) = 0 [pid 5492] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5491] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5491] <... futex resumed>) = 0 [pid 5492] sendfile(4, 5, NULL, 140737974943952 [ 90.210046][ T27] audit: type=1800 audit(1671282313.613:232): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5491] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5491] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5491] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5491] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5494], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5494 [pid 5491] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5491] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5494 attached [pid 5494] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5494] open("./bus", O_RDONLY [pid 5491] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5491] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5491] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5491] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5495 attached [pid 5495] set_robust_list(0x7fe8f42af9e0, 24 [pid 5491] <... clone resumed>, parent_tid=[5495], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5495 [pid 5491] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5495] <... set_robust_list resumed>) = 0 [pid 5491] <... futex resumed>) = 0 [pid 5495] truncate("./bus", 6 [pid 5491] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5491] exit_group(0) = ? [pid 5495] <... truncate resumed>) = ? [pid 5494] <... open resumed>) = ? [pid 5492] <... sendfile resumed>) = ? [pid 5495] +++ exited with 0 +++ [pid 5494] +++ exited with 0 +++ [pid 5492] +++ exited with 0 +++ [pid 5491] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5491, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./47/binderfs") = 0 [ 90.617905][ T27] audit: type=1804 audit(1671282314.023:233): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/47/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./47/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./47") = 0 [pid 5073] mkdir("./48", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5496 ./strace-static-x86_64: Process 5496 attached [pid 5496] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5496] chdir("./48") = 0 [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5496] setpgid(0, 0) = 0 [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5496] write(3, "1000", 4) = 4 [pid 5496] close(3) = 0 [pid 5496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5496] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5496] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5496] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5497 attached , parent_tid=[5497], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5497 [pid 5496] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5497] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5497] memfd_create("syzkaller", 0) = 3 [pid 5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5497] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5497] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5497] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5497] close(3) = 0 [pid 5497] mkdir("./file0", 0777) = 0 [ 90.793640][ T5497] loop4: detected capacity change from 0 to 8192 [ 90.804144][ T5497] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.817422][ T5497] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 90.826899][ T5497] REISERFS (device loop4): using ordered data mode [ 90.833458][ T5497] reiserfs: using flush barriers [ 90.839685][ T5497] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.856142][ T5497] REISERFS (device loop4): checking transaction log (loop4) [pid 5497] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5497] chdir("./file0") = 0 [pid 5497] ioctl(4, LOOP_CLR_FD) = 0 [pid 5497] close(4) = 0 [pid 5497] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5497] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] <... futex resumed>) = 0 [pid 5497] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5496] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5497] <... open resumed>) = 4 [pid 5497] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5497] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = 0 [pid 5496] <... futex resumed>) = 1 [pid 5497] openat(-1, "/proc/self/exe", O_RDONLY [pid 5496] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5497] <... openat resumed>) = 5 [pid 5497] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5497] sendfile(4, 5, NULL, 140737974943952 [pid 5496] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.897800][ T5497] REISERFS (device loop4): Using r5 hash to sort names [ 90.904802][ T5497] REISERFS (device loop4): using 3.5.x disk format [ 90.911816][ T5497] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5496] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5496] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5496] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5496] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5500] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] <... clone resumed>, parent_tid=[5500], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5500 [pid 5496] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... futex resumed>) = 0 [pid 5500] open("./bus", O_RDONLY [pid 5496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5496] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5496] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5496] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5496] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5501], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5501 [pid 5496] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5501 attached [pid 5501] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5501] truncate("./bus", 6 [pid 5496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5496] exit_group(0) = ? [pid 5497] <... sendfile resumed>) = ? [pid 5500] <... open resumed>) = ? [pid 5497] +++ exited with 0 +++ [pid 5500] +++ exited with 0 +++ [pid 5501] <... truncate resumed>) = ? [pid 5501] +++ exited with 0 +++ [pid 5496] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./48/binderfs") = 0 [pid 5073] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./48/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./48") = 0 [pid 5073] mkdir("./49", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5502 ./strace-static-x86_64: Process 5502 attached [pid 5502] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5502] chdir("./49") = 0 [pid 5502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5502] setpgid(0, 0) = 0 [pid 5502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5502] write(3, "1000", 4) = 4 [pid 5502] close(3) = 0 [pid 5502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5502] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5502] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5502] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5503], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5503 [pid 5502] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5503 attached [pid 5503] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5503] memfd_create("syzkaller", 0) = 3 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5503] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5503] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5503] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5503] close(3) = 0 [pid 5503] mkdir("./file0", 0777) = 0 [ 91.416763][ T5503] loop4: detected capacity change from 0 to 8192 [ 91.427261][ T5503] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.440374][ T5503] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 91.450143][ T5503] REISERFS (device loop4): using ordered data mode [ 91.456901][ T5503] reiserfs: using flush barriers [ 91.463573][ T5503] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.480366][ T5503] REISERFS (device loop4): checking transaction log (loop4) [pid 5503] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5503] chdir("./file0") = 0 [pid 5503] ioctl(4, LOOP_CLR_FD) = 0 [pid 5503] close(4) = 0 [pid 5503] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... futex resumed>) = 1 [pid 5503] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5503] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... futex resumed>) = 1 [pid 5503] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5503] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5503] <... futex resumed>) = 1 [ 91.522487][ T5503] REISERFS (device loop4): Using r5 hash to sort names [ 91.529735][ T5503] REISERFS (device loop4): using 3.5.x disk format [ 91.536713][ T5503] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5503] sendfile(4, 5, NULL, 140737974943952 [pid 5502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5502] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5502] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5502] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5505 attached [pid 5505] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5505] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5502] <... clone resumed>, parent_tid=[5505], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5505 [pid 5502] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5505] <... futex resumed>) = 0 [pid 5502] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5505] open("./bus", O_RDONLY [pid 5502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5502] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5502] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5502] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5506 attached , parent_tid=[5506], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5506 [pid 5506] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5506] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5502] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5506] truncate("./bus", 6 [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5502] exit_group(0) = ? [pid 5505] <... open resumed>) = ? [pid 5503] <... sendfile resumed>) = ? [pid 5506] <... truncate resumed>) = ? [pid 5505] +++ exited with 0 +++ [pid 5506] +++ exited with 0 +++ [pid 5503] +++ exited with 0 +++ [pid 5502] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5502, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./49/binderfs") = 0 [pid 5073] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./49/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./49") = 0 [pid 5073] mkdir("./50", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5507 ./strace-static-x86_64: Process 5507 attached [pid 5507] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5507] chdir("./50") = 0 [pid 5507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5507] setpgid(0, 0) = 0 [pid 5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5507] write(3, "1000", 4) = 4 [pid 5507] close(3) = 0 [pid 5507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5507] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5507] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5507] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5508], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5508 [pid 5507] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5507] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5508 attached [pid 5508] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5508] memfd_create("syzkaller", 0) = 3 [pid 5508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5508] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5508] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5508] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5508] close(3) = 0 [pid 5508] mkdir("./file0", 0777) = 0 [ 92.017812][ T5508] loop4: detected capacity change from 0 to 8192 [ 92.032002][ T5508] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.045250][ T5508] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 92.055185][ T5508] REISERFS (device loop4): using ordered data mode [ 92.061759][ T5508] reiserfs: using flush barriers [ 92.067637][ T5508] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.084289][ T5508] REISERFS (device loop4): checking transaction log (loop4) [pid 5508] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5508] chdir("./file0") = 0 [pid 5508] ioctl(4, LOOP_CLR_FD) = 0 [pid 5508] close(4) = 0 [pid 5508] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5507] <... futex resumed>) = 0 [pid 5507] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = 0 [pid 5507] <... futex resumed>) = 1 [pid 5508] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5507] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5508] <... open resumed>) = 4 [pid 5508] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5507] <... futex resumed>) = 0 [pid 5508] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5507] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5507] <... futex resumed>) = 0 [pid 5508] openat(-1, "/proc/self/exe", O_RDONLY [pid 5507] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5508] <... openat resumed>) = 5 [pid 5508] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5507] <... futex resumed>) = 0 [pid 5508] sendfile(4, 5, NULL, 140737974943952 [pid 5507] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.126838][ T5508] REISERFS (device loop4): Using r5 hash to sort names [ 92.133837][ T5508] REISERFS (device loop4): using 3.5.x disk format [ 92.140640][ T5508] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5507] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5507] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5507] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5507] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5510], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5510 [pid 5507] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5507] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5510 attached [pid 5510] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5510] open("./bus", O_RDONLY [pid 5507] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5507] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5507] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5507] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5507] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5511 attached , parent_tid=[5511], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5511 [pid 5507] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5507] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5511] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5511] truncate("./bus", 6 [pid 5507] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5507] exit_group(0) = ? [pid 5508] <... sendfile resumed>) = ? [pid 5511] <... truncate resumed>) = ? [pid 5510] <... open resumed>) = ? [pid 5508] +++ exited with 0 +++ [pid 5511] +++ exited with 0 +++ [pid 5510] +++ exited with 0 +++ [pid 5507] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./50/binderfs") = 0 [pid 5073] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./50/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./50") = 0 [pid 5073] mkdir("./51", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5512 ./strace-static-x86_64: Process 5512 attached [pid 5512] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5512] chdir("./51") = 0 [pid 5512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5512] setpgid(0, 0) = 0 [pid 5512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5512] write(3, "1000", 4) = 4 [pid 5512] close(3) = 0 [pid 5512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5512] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5512] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5512] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5513], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5513 [pid 5512] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5513 attached [pid 5513] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5513] memfd_create("syzkaller", 0) = 3 [pid 5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5513] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5513] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5513] close(3) = 0 [pid 5513] mkdir("./file0", 0777) = 0 [ 92.616783][ T5513] loop4: detected capacity change from 0 to 8192 [ 92.627375][ T5513] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.640444][ T5513] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 92.650136][ T5513] REISERFS (device loop4): using ordered data mode [ 92.656714][ T5513] reiserfs: using flush barriers [ 92.662492][ T5513] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.679074][ T5513] REISERFS (device loop4): checking transaction log (loop4) [pid 5513] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5513] chdir("./file0") = 0 [pid 5513] ioctl(4, LOOP_CLR_FD) = 0 [pid 5513] close(4) = 0 [pid 5513] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5513] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5512] <... futex resumed>) = 0 [pid 5512] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5512] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5513] <... futex resumed>) = 0 [pid 5513] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5513] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5512] <... futex resumed>) = 0 [pid 5512] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5513] <... futex resumed>) = 1 [pid 5513] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5513] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5512] <... futex resumed>) = 0 [pid 5512] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5513] <... futex resumed>) = 1 [ 92.716285][ T5513] REISERFS (device loop4): Using r5 hash to sort names [ 92.723215][ T5513] REISERFS (device loop4): using 3.5.x disk format [ 92.730126][ T5513] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5513] sendfile(4, 5, NULL, 140737974943952 [pid 5512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5512] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5512] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5512] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5512] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5515], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5515 [pid 5512] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5515 attached [pid 5515] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5515] open("./bus", O_RDONLY [pid 5512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5512] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5512] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5512] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5512] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5516], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5516 [pid 5512] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5516 attached [pid 5516] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5516] truncate("./bus", 6 [pid 5512] <... futex resumed>) = 0 [pid 5512] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5512] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5512] exit_group(0) = ? [pid 5515] <... open resumed>) = ? [pid 5513] <... sendfile resumed>) = ? [pid 5516] <... truncate resumed>) = ? [pid 5515] +++ exited with 0 +++ [pid 5513] +++ exited with 0 +++ [pid 5516] +++ exited with 0 +++ [pid 5512] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5512, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./51/binderfs") = 0 [pid 5073] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./51/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./51") = 0 [pid 5073] mkdir("./52", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5519 ./strace-static-x86_64: Process 5519 attached [pid 5519] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5519] chdir("./52") = 0 [pid 5519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5519] setpgid(0, 0) = 0 [pid 5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5519] write(3, "1000", 4) = 4 [pid 5519] close(3) = 0 [pid 5519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5519] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5519] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5519] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5520], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5520 ./strace-static-x86_64: Process 5520 attached [pid 5519] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5520] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5520] memfd_create("syzkaller", 0) = 3 [pid 5520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5520] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5520] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5520] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5520] close(3) = 0 [pid 5520] mkdir("./file0", 0777) = 0 [ 93.216238][ T5520] loop4: detected capacity change from 0 to 8192 [ 93.226454][ T5520] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.239698][ T5520] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 93.248954][ T5520] REISERFS (device loop4): using ordered data mode [ 93.255543][ T5520] reiserfs: using flush barriers [ 93.261463][ T5520] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.278006][ T5520] REISERFS (device loop4): checking transaction log (loop4) [pid 5520] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5520] chdir("./file0") = 0 [pid 5520] ioctl(4, LOOP_CLR_FD) = 0 [pid 5520] close(4) = 0 [pid 5520] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5519] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... futex resumed>) = 1 [pid 5520] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5520] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5519] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... futex resumed>) = 1 [pid 5520] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5520] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5519] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... futex resumed>) = 1 [ 93.319692][ T5520] REISERFS (device loop4): Using r5 hash to sort names [ 93.326952][ T5520] REISERFS (device loop4): using 3.5.x disk format [ 93.333995][ T5520] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5520] sendfile(4, 5, NULL, 140737974943952 [pid 5519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5519] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5519] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5519] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5522], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5522 [pid 5519] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5522 attached [pid 5522] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5522] open("./bus", O_RDONLY [pid 5519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5519] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5519] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5519] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5523], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5523 ./strace-static-x86_64: Process 5523 attached [pid 5519] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5523] set_robust_list(0x7fe8f42af9e0, 24 [pid 5519] <... futex resumed>) = 0 [pid 5523] <... set_robust_list resumed>) = 0 [pid 5519] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5523] truncate("./bus", 6 [pid 5519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5519] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5519] exit_group(0) = ? [pid 5522] <... open resumed>) = ? [pid 5520] <... sendfile resumed>) = ? [pid 5522] +++ exited with 0 +++ [pid 5523] <... truncate resumed>) = ? [pid 5523] +++ exited with 0 +++ [pid 5520] +++ exited with 0 +++ [pid 5519] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./52/binderfs") = 0 [ 93.727948][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 93.727964][ T27] audit: type=1804 audit(1671282317.133:248): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/52/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./52/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./52") = 0 [pid 5073] mkdir("./53", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5524 [ 93.758769][ T27] audit: type=1800 audit(1671282317.133:249): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 ./strace-static-x86_64: Process 5524 attached [pid 5524] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5524] chdir("./53") = 0 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5524] setpgid(0, 0) = 0 [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5524] write(3, "1000", 4) = 4 [pid 5524] close(3) = 0 [pid 5524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5524] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5524] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5524] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5525 attached , parent_tid=[5525], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5525 [pid 5524] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5524] <... futex resumed>) = 0 [pid 5525] <... set_robust_list resumed>) = 0 [pid 5524] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5525] memfd_create("syzkaller", 0) = 3 [pid 5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5525] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5525] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5525] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5525] close(3) = 0 [pid 5525] mkdir("./file0", 0777) = 0 [ 93.889255][ T5525] loop4: detected capacity change from 0 to 8192 [ 93.899709][ T5525] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.912756][ T5525] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 93.922446][ T5525] REISERFS (device loop4): using ordered data mode [ 93.929035][ T5525] reiserfs: using flush barriers [ 93.934975][ T5525] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.951449][ T5525] REISERFS (device loop4): checking transaction log (loop4) [pid 5525] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5525] chdir("./file0") = 0 [pid 5525] ioctl(4, LOOP_CLR_FD) = 0 [pid 5525] close(4) = 0 [pid 5525] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... futex resumed>) = 0 [pid 5524] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5525] <... futex resumed>) = 1 [pid 5525] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5525] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... futex resumed>) = 0 [pid 5524] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5525] <... futex resumed>) = 1 [pid 5525] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5525] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5524] <... futex resumed>) = 0 [pid 5525] sendfile(4, 5, NULL, 140737974943952 [pid 5524] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.995099][ T5525] REISERFS (device loop4): Using r5 hash to sort names [ 94.002110][ T5525] REISERFS (device loop4): using 3.5.x disk format [ 94.008918][ T5525] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5524] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5524] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5524] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5524] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5527 attached , parent_tid=[5527], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5527 [pid 5524] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5527] set_robust_list(0x7fe8f42d09e0, 24 [pid 5524] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... set_robust_list resumed>) = 0 [ 94.028308][ T27] audit: type=1800 audit(1671282317.423:250): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5527] open("./bus", O_RDONLY [pid 5524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5524] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5524] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5524] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5528 attached , parent_tid=[5528], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5528 [pid 5524] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5528] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5528] truncate("./bus", 6 [pid 5524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5524] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5524] exit_group(0) = ? [pid 5525] <... sendfile resumed>) = ? [pid 5527] <... open resumed>) = ? [pid 5527] +++ exited with 0 +++ [pid 5528] <... truncate resumed>) = ? [pid 5525] +++ exited with 0 +++ [pid 5528] +++ exited with 0 +++ [pid 5524] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./53/binderfs") = 0 [pid 5073] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./53/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./53") = 0 [pid 5073] mkdir("./54", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 94.369281][ T27] audit: type=1804 audit(1671282317.773:251): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/53/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 94.392388][ T27] audit: type=1800 audit(1671282317.773:252): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5529 ./strace-static-x86_64: Process 5529 attached [pid 5529] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5529] chdir("./54") = 0 [pid 5529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5529] setpgid(0, 0) = 0 [pid 5529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5529] write(3, "1000", 4) = 4 [pid 5529] close(3) = 0 [pid 5529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5529] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5529] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5530], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5530 [pid 5529] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5530 attached [pid 5530] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5530] memfd_create("syzkaller", 0) = 3 [pid 5530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5530] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5530] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5530] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5530] close(3) = 0 [pid 5530] mkdir("./file0", 0777) = 0 [ 94.503889][ T5530] loop4: detected capacity change from 0 to 8192 [ 94.513993][ T5530] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.527698][ T5530] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 94.538066][ T5530] REISERFS (device loop4): using ordered data mode [ 94.544650][ T5530] reiserfs: using flush barriers [ 94.551085][ T5530] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.568019][ T5530] REISERFS (device loop4): checking transaction log (loop4) [pid 5530] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5530] chdir("./file0") = 0 [pid 5530] ioctl(4, LOOP_CLR_FD) = 0 [pid 5530] close(4) = 0 [pid 5530] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5529] <... futex resumed>) = 0 [pid 5529] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5530] <... futex resumed>) = 0 [pid 5529] <... futex resumed>) = 1 [pid 5529] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5530] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] <... futex resumed>) = 0 [pid 5529] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] <... futex resumed>) = 1 [pid 5530] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5530] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] <... futex resumed>) = 0 [pid 5529] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] <... futex resumed>) = 1 [ 94.611404][ T5530] REISERFS (device loop4): Using r5 hash to sort names [ 94.618640][ T5530] REISERFS (device loop4): using 3.5.x disk format [ 94.625357][ T5530] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5530] sendfile(4, 5, NULL, 140737974943952 [pid 5529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5529] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5529] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5533], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5533 [pid 5529] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5533 attached [pid 5533] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 94.649188][ T27] audit: type=1800 audit(1671282318.053:253): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5533] open("./bus", O_RDONLY [pid 5529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5529] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5529] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5529] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5534], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5534 [pid 5529] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5534 attached [pid 5534] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5534] truncate("./bus", 6 [pid 5529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5529] exit_group(0) = ? [pid 5530] <... sendfile resumed>) = ? [pid 5533] <... open resumed>) = ? [pid 5530] +++ exited with 0 +++ [pid 5534] <... truncate resumed>) = ? [pid 5534] +++ exited with 0 +++ [pid 5533] +++ exited with 0 +++ [pid 5529] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5529, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./54/binderfs") = 0 [pid 5073] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 95.018218][ T27] audit: type=1804 audit(1671282318.423:254): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/54/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 95.041784][ T27] audit: type=1800 audit(1671282318.423:255): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./54/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./54") = 0 [pid 5073] mkdir("./55", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5536 ./strace-static-x86_64: Process 5536 attached [pid 5536] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5536] chdir("./55") = 0 [pid 5536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5536] setpgid(0, 0) = 0 [pid 5536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5536] write(3, "1000", 4) = 4 [pid 5536] close(3) = 0 [pid 5536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5536] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5536] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5536] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5537 attached , parent_tid=[5537], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5537 [pid 5537] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5537] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5536] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5537] <... futex resumed>) = 0 [pid 5537] memfd_create("syzkaller", 0 [pid 5536] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5537] <... memfd_create resumed>) = 3 [pid 5537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5537] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5537] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5537] close(3) = 0 [pid 5537] mkdir("./file0", 0777) = 0 [ 95.176444][ T5537] loop4: detected capacity change from 0 to 8192 [ 95.186788][ T5537] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.200108][ T5537] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 95.210086][ T5537] REISERFS (device loop4): using ordered data mode [ 95.216658][ T5537] reiserfs: using flush barriers [ 95.222840][ T5537] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.239746][ T5537] REISERFS (device loop4): checking transaction log (loop4) [pid 5537] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5537] chdir("./file0") = 0 [pid 5537] ioctl(4, LOOP_CLR_FD) = 0 [pid 5537] close(4) = 0 [pid 5537] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... futex resumed>) = 0 [pid 5536] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5537] <... futex resumed>) = 1 [pid 5537] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5537] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] <... futex resumed>) = 0 [pid 5536] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5537] <... futex resumed>) = 1 [pid 5537] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5537] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5536] <... futex resumed>) = 0 [pid 5537] sendfile(4, 5, NULL, 140737974943952 [pid 5536] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.284363][ T5537] REISERFS (device loop4): Using r5 hash to sort names [ 95.291876][ T5537] REISERFS (device loop4): using 3.5.x disk format [ 95.298684][ T5537] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 95.318753][ T27] audit: type=1800 audit(1671282318.723:256): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5536] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5536] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5536] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5536] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5539 attached , parent_tid=[5539], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5539 [pid 5536] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] set_robust_list(0x7fe8f42d09e0, 24 [pid 5536] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5539] <... set_robust_list resumed>) = 0 [pid 5539] open("./bus", O_RDONLY [pid 5536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5536] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5536] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5536] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5536] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5540], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5540 [pid 5536] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5540 attached [pid 5540] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5540] truncate("./bus", 6 [pid 5536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5536] exit_group(0) = ? [pid 5540] <... truncate resumed>) = ? [pid 5539] <... open resumed>) = ? [pid 5537] <... sendfile resumed>) = ? [pid 5540] +++ exited with 0 +++ [pid 5539] +++ exited with 0 +++ [pid 5537] +++ exited with 0 +++ [pid 5536] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5536, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./55/binderfs") = 0 [pid 5073] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 95.657986][ T27] audit: type=1804 audit(1671282319.063:257): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/55/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./55/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./55") = 0 [pid 5073] mkdir("./56", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5542 ./strace-static-x86_64: Process 5542 attached [pid 5542] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5542] chdir("./56") = 0 [pid 5542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5542] setpgid(0, 0) = 0 [pid 5542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5542] write(3, "1000", 4) = 4 [pid 5542] close(3) = 0 [pid 5542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5542] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5542] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5542] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5543 attached , parent_tid=[5543], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5543 [pid 5543] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] <... set_robust_list resumed>) = 0 [pid 5542] <... futex resumed>) = 0 [pid 5543] memfd_create("syzkaller", 0 [pid 5542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5543] <... memfd_create resumed>) = 3 [pid 5543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5543] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5543] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5543] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5543] close(3) = 0 [pid 5543] mkdir("./file0", 0777) = 0 [ 95.803558][ T5543] loop4: detected capacity change from 0 to 8192 [ 95.814029][ T5543] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.827082][ T5543] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 95.836259][ T5543] REISERFS (device loop4): using ordered data mode [ 95.842750][ T5543] reiserfs: using flush barriers [ 95.848720][ T5543] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.865215][ T5543] REISERFS (device loop4): checking transaction log (loop4) [pid 5543] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5543] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5543] chdir("./file0") = 0 [pid 5543] ioctl(4, LOOP_CLR_FD) = 0 [pid 5543] close(4) = 0 [pid 5543] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5542] <... futex resumed>) = 0 [pid 5543] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] <... open resumed>) = 4 [pid 5542] <... futex resumed>) = 0 [pid 5543] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5543] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5543] openat(-1, "/proc/self/exe", O_RDONLY [pid 5542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] <... openat resumed>) = 5 [pid 5542] <... futex resumed>) = 0 [pid 5543] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5543] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5543] sendfile(4, 5, NULL, 140737974943952 [pid 5542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.902165][ T5543] REISERFS (device loop4): Using r5 hash to sort names [ 95.909187][ T5543] REISERFS (device loop4): using 3.5.x disk format [ 95.916319][ T5543] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5542] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5542] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5542] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5545], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5545 [pid 5542] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5545 attached [pid 5545] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5545] open("./bus", O_RDONLY [pid 5542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5542] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5542] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5542] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5542] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5546 attached , parent_tid=[5546], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5546 [pid 5542] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5546] truncate("./bus", 6 [pid 5542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5542] exit_group(0) = ? [pid 5543] <... sendfile resumed>) = ? [pid 5545] <... open resumed>) = ? [pid 5543] +++ exited with 0 +++ [pid 5546] <... truncate resumed>) = ? [pid 5545] +++ exited with 0 +++ [pid 5546] +++ exited with 0 +++ [pid 5542] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5542, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./56/binderfs") = 0 [pid 5073] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./56/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./56") = 0 [pid 5073] mkdir("./57", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5547 ./strace-static-x86_64: Process 5547 attached [pid 5547] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5547] chdir("./57") = 0 [pid 5547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5547] setpgid(0, 0) = 0 [pid 5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5547] write(3, "1000", 4) = 4 [pid 5547] close(3) = 0 [pid 5547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5547] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5547] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5547] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5548], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5548 [pid 5547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5548 attached [pid 5548] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5548] memfd_create("syzkaller", 0) = 3 [pid 5548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5548] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5548] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5548] close(3) = 0 [pid 5548] mkdir("./file0", 0777) = 0 [ 96.408142][ T5548] loop4: detected capacity change from 0 to 8192 [ 96.418045][ T5548] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.431180][ T5548] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 96.440445][ T5548] REISERFS (device loop4): using ordered data mode [ 96.447016][ T5548] reiserfs: using flush barriers [ 96.452765][ T5548] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.469485][ T5548] REISERFS (device loop4): checking transaction log (loop4) [pid 5548] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5548] chdir("./file0") = 0 [pid 5548] ioctl(4, LOOP_CLR_FD) = 0 [pid 5548] close(4) = 0 [pid 5548] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... futex resumed>) = 0 [pid 5547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5548] <... futex resumed>) = 1 [pid 5548] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5548] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... futex resumed>) = 0 [pid 5548] <... futex resumed>) = 1 [pid 5547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5548] openat(-1, "/proc/self/exe", O_RDONLY [pid 5547] <... futex resumed>) = 0 [pid 5548] <... openat resumed>) = 5 [pid 5547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5548] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5547] <... futex resumed>) = 0 [pid 5548] sendfile(4, 5, NULL, 140737974943952 [pid 5547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 96.512557][ T5548] REISERFS (device loop4): Using r5 hash to sort names [ 96.520014][ T5548] REISERFS (device loop4): using 3.5.x disk format [ 96.526932][ T5548] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5547] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5547] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5547] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5550], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5550 [pid 5547] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5550 attached [pid 5550] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5550] open("./bus", O_RDONLY [pid 5547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5547] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5547] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5547] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5547] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5551], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5551 [pid 5547] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5551 attached [pid 5551] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5551] truncate("./bus", 6 [pid 5547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5547] exit_group(0) = ? [pid 5548] <... sendfile resumed>) = ? [pid 5548] +++ exited with 0 +++ [pid 5550] <... open resumed>) = ? [pid 5550] +++ exited with 0 +++ [pid 5551] <... truncate resumed>) = ? [pid 5551] +++ exited with 0 +++ [pid 5547] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./57/binderfs") = 0 [pid 5073] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./57/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./57") = 0 [pid 5073] mkdir("./58", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5552 ./strace-static-x86_64: Process 5552 attached [pid 5552] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5552] chdir("./58") = 0 [pid 5552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5552] setpgid(0, 0) = 0 [pid 5552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5552] write(3, "1000", 4) = 4 [pid 5552] close(3) = 0 [pid 5552] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5552] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5552] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5552] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5553 attached , parent_tid=[5553], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5553 [pid 5553] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5553] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5552] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5553] <... futex resumed>) = 0 [pid 5553] memfd_create("syzkaller", 0) = 3 [pid 5553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5552] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5553] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5553] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5553] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5553] close(3) = 0 [pid 5553] mkdir("./file0", 0777) = 0 [ 97.019439][ T5553] loop4: detected capacity change from 0 to 8192 [ 97.030026][ T5553] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.044868][ T5553] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 97.054743][ T5553] REISERFS (device loop4): using ordered data mode [ 97.061802][ T5553] reiserfs: using flush barriers [ 97.068242][ T5553] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.084565][ T5553] REISERFS (device loop4): checking transaction log (loop4) [pid 5553] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5553] chdir("./file0") = 0 [pid 5553] ioctl(4, LOOP_CLR_FD) = 0 [pid 5553] close(4) = 0 [pid 5553] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5552] <... futex resumed>) = 0 [pid 5552] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5553] <... futex resumed>) = 1 [pid 5553] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5553] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5552] <... futex resumed>) = 0 [pid 5552] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5553] <... futex resumed>) = 1 [pid 5553] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5553] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5552] <... futex resumed>) = 0 [pid 5552] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5553] <... futex resumed>) = 1 [ 97.126680][ T5553] REISERFS (device loop4): Using r5 hash to sort names [ 97.133641][ T5553] REISERFS (device loop4): using 3.5.x disk format [ 97.140500][ T5553] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5553] sendfile(4, 5, NULL, 140737974943952 [pid 5552] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5552] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5552] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5552] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5555 attached [pid 5555] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5555] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5552] <... clone resumed>, parent_tid=[5555], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5555 [pid 5552] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5555] <... futex resumed>) = 0 [pid 5555] open("./bus", O_RDONLY [pid 5552] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5552] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5552] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5552] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5552] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5556 attached , parent_tid=[5556], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5556 [pid 5552] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5556] truncate("./bus", 6 [pid 5552] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5552] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5552] exit_group(0) = ? [pid 5553] <... sendfile resumed>) = ? [pid 5555] <... open resumed>) = ? [pid 5556] <... truncate resumed>) = ? [pid 5553] +++ exited with 0 +++ [pid 5556] +++ exited with 0 +++ [pid 5555] +++ exited with 0 +++ [pid 5552] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5552, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./58/binderfs") = 0 [pid 5073] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./58/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./58") = 0 [pid 5073] mkdir("./59", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5557 ./strace-static-x86_64: Process 5557 attached [pid 5557] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5557] chdir("./59") = 0 [pid 5557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5557] setpgid(0, 0) = 0 [pid 5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5557] write(3, "1000", 4) = 4 [pid 5557] close(3) = 0 [pid 5557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5557] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5557] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5557] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5558], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5558 [pid 5557] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5558 attached [pid 5558] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5558] memfd_create("syzkaller", 0) = 3 [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5558] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5558] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5558] close(3) = 0 [pid 5558] mkdir("./file0", 0777) = 0 [ 97.647389][ T5558] loop4: detected capacity change from 0 to 8192 [ 97.657896][ T5558] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.671074][ T5558] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 97.680590][ T5558] REISERFS (device loop4): using ordered data mode [ 97.687189][ T5558] reiserfs: using flush barriers [ 97.693088][ T5558] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.709693][ T5558] REISERFS (device loop4): checking transaction log (loop4) [pid 5558] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5558] chdir("./file0") = 0 [pid 5558] ioctl(4, LOOP_CLR_FD) = 0 [pid 5558] close(4) = 0 [pid 5558] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 5557] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5558] <... futex resumed>) = 1 [pid 5558] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5558] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 5557] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5558] <... futex resumed>) = 1 [pid 5558] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5558] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 5557] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5558] <... futex resumed>) = 1 [ 97.752331][ T5558] REISERFS (device loop4): Using r5 hash to sort names [ 97.759438][ T5558] REISERFS (device loop4): using 3.5.x disk format [ 97.766462][ T5558] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5558] sendfile(4, 5, NULL, 140737974943952 [pid 5557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5557] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5557] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5557] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5557] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5560], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5560 [pid 5557] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5560 attached [pid 5560] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5560] open("./bus", O_RDONLY [pid 5557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5557] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5557] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5557] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5561 attached , parent_tid=[5561], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5561 [pid 5557] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5561] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5561] truncate("./bus", 6 [pid 5557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5557] exit_group(0) = ? [pid 5558] <... sendfile resumed>) = ? [pid 5560] <... open resumed>) = ? [pid 5561] <... truncate resumed>) = ? [pid 5558] +++ exited with 0 +++ [pid 5561] +++ exited with 0 +++ [pid 5560] +++ exited with 0 +++ [pid 5557] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./59/binderfs") = 0 [pid 5073] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./59/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./59") = 0 [pid 5073] mkdir("./60", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5562 ./strace-static-x86_64: Process 5562 attached [pid 5562] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5562] chdir("./60") = 0 [pid 5562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5562] setpgid(0, 0) = 0 [pid 5562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5562] write(3, "1000", 4) = 4 [pid 5562] close(3) = 0 [pid 5562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5562] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5562] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5562] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5563], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5563 [pid 5562] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5563 attached [pid 5563] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5563] memfd_create("syzkaller", 0) = 3 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5563] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5563] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5563] close(3) = 0 [pid 5563] mkdir("./file0", 0777) = 0 [ 98.252351][ T5563] loop4: detected capacity change from 0 to 8192 [ 98.262320][ T5563] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.275593][ T5563] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 98.284765][ T5563] REISERFS (device loop4): using ordered data mode [ 98.291548][ T5563] reiserfs: using flush barriers [ 98.297363][ T5563] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.314644][ T5563] REISERFS (device loop4): checking transaction log (loop4) [pid 5563] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5563] chdir("./file0") = 0 [pid 5563] ioctl(4, LOOP_CLR_FD) = 0 [pid 5563] close(4) = 0 [pid 5563] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5562] <... futex resumed>) = 0 [pid 5562] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 1 [pid 5563] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5563] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5562] <... futex resumed>) = 0 [pid 5562] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5563] <... futex resumed>) = 1 [pid 5563] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5563] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5562] <... futex resumed>) = 0 [pid 5563] sendfile(4, 5, NULL, 140737974943952 [pid 5562] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 98.356670][ T5563] REISERFS (device loop4): Using r5 hash to sort names [ 98.363703][ T5563] REISERFS (device loop4): using 3.5.x disk format [ 98.370630][ T5563] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5562] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5562] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5562] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5562] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5562] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5565], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5565 [pid 5562] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5565 attached [pid 5565] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5565] open("./bus", O_RDONLY [pid 5562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5562] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5562] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5562] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5566 attached , parent_tid=[5566], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5566 [pid 5566] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5566] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5562] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] truncate("./bus", 6 [pid 5562] <... futex resumed>) = 0 [pid 5562] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5562] exit_group(0) = ? [pid 5565] <... open resumed>) = ? [pid 5563] <... sendfile resumed>) = ? [pid 5565] +++ exited with 0 +++ [pid 5566] <... truncate resumed>) = ? [pid 5566] +++ exited with 0 +++ [pid 5563] +++ exited with 0 +++ [pid 5562] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5562, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./60/binderfs") = 0 [pid 5073] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [ 98.758263][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 98.758278][ T27] audit: type=1804 audit(1671282322.163:272): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/60/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 98.787485][ T27] audit: type=1800 audit(1671282322.163:273): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./60/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./60") = 0 [pid 5073] mkdir("./61", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5567 ./strace-static-x86_64: Process 5567 attached [pid 5567] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5567] chdir("./61") = 0 [pid 5567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5567] setpgid(0, 0) = 0 [pid 5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5567] write(3, "1000", 4) = 4 [pid 5567] close(3) = 0 [pid 5567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5567] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5567] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5567] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5568 attached , parent_tid=[5568], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5568 [pid 5567] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5568] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5568] memfd_create("syzkaller", 0) = 3 [pid 5568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5568] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5568] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5568] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5568] close(3) = 0 [pid 5568] mkdir("./file0", 0777) = 0 [ 98.898933][ T5568] loop4: detected capacity change from 0 to 8192 [ 98.909452][ T5568] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.923110][ T5568] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 98.932673][ T5568] REISERFS (device loop4): using ordered data mode [ 98.939270][ T5568] reiserfs: using flush barriers [ 98.945321][ T5568] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.961877][ T5568] REISERFS (device loop4): checking transaction log (loop4) [pid 5568] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5568] chdir("./file0") = 0 [pid 5568] ioctl(4, LOOP_CLR_FD) = 0 [pid 5568] close(4) = 0 [pid 5568] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] <... futex resumed>) = 0 [pid 5567] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5568] <... futex resumed>) = 1 [pid 5568] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5568] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] <... futex resumed>) = 0 [pid 5567] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5568] <... futex resumed>) = 1 [pid 5568] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5568] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] <... futex resumed>) = 0 [pid 5567] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5568] <... futex resumed>) = 1 [pid 5567] <... futex resumed>) = 0 [ 99.005193][ T5568] REISERFS (device loop4): Using r5 hash to sort names [ 99.012415][ T5568] REISERFS (device loop4): using 3.5.x disk format [ 99.019575][ T5568] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5568] sendfile(4, 5, NULL, 140737974943952 [ 99.035945][ T27] audit: type=1800 audit(1671282322.433:274): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5567] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5567] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5567] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5567] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5570 attached , parent_tid=[5570], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5570 [pid 5570] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5570] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5567] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5567] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5570] open("./bus", O_RDONLY [pid 5567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5567] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5567] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5567] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5571], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5571 [pid 5567] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5571 attached [pid 5571] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5571] truncate("./bus", 6 [pid 5567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5567] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5567] exit_group(0) = ? [pid 5570] <... open resumed>) = ? [pid 5568] <... sendfile resumed>) = ? [pid 5570] +++ exited with 0 +++ [pid 5571] <... truncate resumed>) = ? [pid 5571] +++ exited with 0 +++ [pid 5568] +++ exited with 0 +++ [pid 5567] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./61/binderfs") = 0 [pid 5073] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 99.398503][ T27] audit: type=1804 audit(1671282322.803:275): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/61/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 99.422142][ T27] audit: type=1800 audit(1671282322.803:276): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./61/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./61") = 0 [pid 5073] mkdir("./62", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5572 ./strace-static-x86_64: Process 5572 attached [pid 5572] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5572] chdir("./62") = 0 [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5572] setpgid(0, 0) = 0 [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5572] write(3, "1000", 4) = 4 [pid 5572] close(3) = 0 [pid 5572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5572] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5572] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5572] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5573], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5573 ./strace-static-x86_64: Process 5573 attached [pid 5573] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5572] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5573] <... set_robust_list resumed>) = 0 [pid 5572] <... futex resumed>) = 0 [pid 5573] memfd_create("syzkaller", 0 [pid 5572] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5573] <... memfd_create resumed>) = 3 [pid 5573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5573] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5573] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5573] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5573] close(3) = 0 [pid 5573] mkdir("./file0", 0777) = 0 [ 99.553576][ T5573] loop4: detected capacity change from 0 to 8192 [ 99.564822][ T5573] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.578088][ T5573] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 99.587409][ T5573] REISERFS (device loop4): using ordered data mode [ 99.594304][ T5573] reiserfs: using flush barriers [ 99.600473][ T5573] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.617070][ T5573] REISERFS (device loop4): checking transaction log (loop4) [pid 5573] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5573] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5573] chdir("./file0") = 0 [pid 5573] ioctl(4, LOOP_CLR_FD) = 0 [pid 5573] close(4) = 0 [pid 5573] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] <... futex resumed>) = 0 [pid 5572] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5573] <... futex resumed>) = 1 [pid 5573] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5573] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5573] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] <... futex resumed>) = 0 [pid 5572] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5572] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5573] <... futex resumed>) = 0 [pid 5573] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5573] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] <... futex resumed>) = 0 [pid 5572] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5573] <... futex resumed>) = 1 [ 99.662358][ T5573] REISERFS (device loop4): Using r5 hash to sort names [ 99.669471][ T5573] REISERFS (device loop4): using 3.5.x disk format [ 99.676371][ T5573] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 99.692993][ T27] audit: type=1800 audit(1671282323.093:277): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5573] sendfile(4, 5, NULL, 140737974943952 [pid 5572] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5572] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5572] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5572] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5575 attached , parent_tid=[5575], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5575 [pid 5572] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5575] open("./bus", O_RDONLY [pid 5572] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5572] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5572] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5572] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5572] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5576], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5576 [pid 5572] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5576 attached [pid 5572] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5576] truncate("./bus", 6 [pid 5572] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5572] exit_group(0) = ? [pid 5573] <... sendfile resumed>) = ? [pid 5575] <... open resumed>) = ? [pid 5575] +++ exited with 0 +++ [pid 5576] <... truncate resumed>) = ? [pid 5573] +++ exited with 0 +++ [pid 5576] +++ exited with 0 +++ [pid 5572] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./62/binderfs") = 0 [pid 5073] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 100.088479][ T27] audit: type=1804 audit(1671282323.493:278): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/62/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 100.112730][ T27] audit: type=1800 audit(1671282323.493:279): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./62/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./62") = 0 [pid 5073] mkdir("./63", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5577 ./strace-static-x86_64: Process 5577 attached [pid 5577] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5577] chdir("./63") = 0 [pid 5577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5577] setpgid(0, 0) = 0 [pid 5577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5577] write(3, "1000", 4) = 4 [pid 5577] close(3) = 0 [pid 5577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5577] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5577] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5578], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5578 [pid 5577] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5578 attached [pid 5578] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5578] memfd_create("syzkaller", 0) = 3 [pid 5578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5578] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5578] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5578] close(3) = 0 [pid 5578] mkdir("./file0", 0777) = 0 [ 100.231831][ T5578] loop4: detected capacity change from 0 to 8192 [ 100.241540][ T5578] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.255262][ T5578] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 100.264517][ T5578] REISERFS (device loop4): using ordered data mode [ 100.271071][ T5578] reiserfs: using flush barriers [ 100.276850][ T5578] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.293368][ T5578] REISERFS (device loop4): checking transaction log (loop4) [pid 5578] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5578] chdir("./file0") = 0 [pid 5578] ioctl(4, LOOP_CLR_FD) = 0 [pid 5578] close(4) = 0 [pid 5578] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... futex resumed>) = 1 [pid 5578] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5578] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... futex resumed>) = 1 [pid 5578] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5578] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] <... futex resumed>) = 0 [pid 5578] sendfile(4, 5, NULL, 140737974943952 [pid 5577] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 100.330532][ T5578] REISERFS (device loop4): Using r5 hash to sort names [ 100.337484][ T5578] REISERFS (device loop4): using 3.5.x disk format [ 100.344170][ T5578] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 100.364805][ T27] audit: type=1800 audit(1671282323.763:280): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5577] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5577] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5577] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5580], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5580 [pid 5577] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5580 attached [pid 5580] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5580] open("./bus", O_RDONLY [pid 5577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5577] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5577] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5581], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5581 [pid 5577] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5581 attached [pid 5581] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5581] truncate("./bus", 6 [pid 5577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5577] exit_group(0) = ? [pid 5578] <... sendfile resumed>) = ? [pid 5580] <... open resumed>) = ? [pid 5578] +++ exited with 0 +++ [pid 5580] +++ exited with 0 +++ [pid 5581] <... truncate resumed>) = ? [pid 5581] +++ exited with 0 +++ [pid 5577] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5577, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./63/binderfs") = 0 [ 100.718648][ T27] audit: type=1804 audit(1671282324.123:281): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/63/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./63/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./63") = 0 [pid 5073] mkdir("./64", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5582 ./strace-static-x86_64: Process 5582 attached [pid 5582] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5582] chdir("./64") = 0 [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5582] setpgid(0, 0) = 0 [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5582] write(3, "1000", 4) = 4 [pid 5582] close(3) = 0 [pid 5582] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5582] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5582] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5582] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5583], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5583 [pid 5582] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5583 attached [pid 5583] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5583] memfd_create("syzkaller", 0) = 3 [pid 5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5583] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5583] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5583] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5583] close(3) = 0 [pid 5583] mkdir("./file0", 0777) = 0 [ 100.846673][ T5583] loop4: detected capacity change from 0 to 8192 [ 100.856708][ T5583] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.869671][ T5583] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 100.878989][ T5583] REISERFS (device loop4): using ordered data mode [ 100.885561][ T5583] reiserfs: using flush barriers [ 100.891586][ T5583] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.908040][ T5583] REISERFS (device loop4): checking transaction log (loop4) [pid 5583] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5583] chdir("./file0") = 0 [pid 5583] ioctl(4, LOOP_CLR_FD) = 0 [pid 5583] close(4) = 0 [pid 5583] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5583] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] <... futex resumed>) = 0 [pid 5582] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... futex resumed>) = 0 [pid 5582] <... futex resumed>) = 1 [pid 5583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5582] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5583] <... open resumed>) = 4 [pid 5583] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5583] openat(-1, "/proc/self/exe", O_RDONLY [pid 5582] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5583] <... openat resumed>) = 5 [pid 5583] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5583] sendfile(4, 5, NULL, 140737974943952 [pid 5582] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 100.949119][ T5583] REISERFS (device loop4): Using r5 hash to sort names [ 100.956144][ T5583] REISERFS (device loop4): using 3.5.x disk format [ 100.962821][ T5583] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5582] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5582] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5582] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5582] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5585 attached , parent_tid=[5585], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5585 [pid 5585] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5585] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] <... futex resumed>) = 0 [pid 5582] <... futex resumed>) = 1 [pid 5585] open("./bus", O_RDONLY [pid 5582] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5582] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5582] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5582] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5586], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5586 [pid 5582] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5586 attached [pid 5586] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5586] truncate("./bus", 6 [pid 5582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5582] exit_group(0) = ? [pid 5583] <... sendfile resumed>) = ? [pid 5583] +++ exited with 0 +++ [pid 5585] <... open resumed>) = ? [pid 5585] +++ exited with 0 +++ [pid 5586] <... truncate resumed>) = ? [pid 5586] +++ exited with 0 +++ [pid 5582] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./64/binderfs") = 0 [pid 5073] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./64/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./64") = 0 [pid 5073] mkdir("./65", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5587 ./strace-static-x86_64: Process 5587 attached [pid 5587] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5587] chdir("./65") = 0 [pid 5587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5587] setpgid(0, 0) = 0 [pid 5587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5587] write(3, "1000", 4) = 4 [pid 5587] close(3) = 0 [pid 5587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5587] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5587] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5587] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5588], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5588 [pid 5587] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5588 attached [pid 5588] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5588] memfd_create("syzkaller", 0) = 3 [pid 5588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5588] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5588] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5588] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5588] close(3) = 0 [pid 5588] mkdir("./file0", 0777) = 0 [ 101.484974][ T5588] loop4: detected capacity change from 0 to 8192 [ 101.495251][ T5588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.508971][ T5588] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 101.518877][ T5588] REISERFS (device loop4): using ordered data mode [ 101.525623][ T5588] reiserfs: using flush barriers [ 101.531558][ T5588] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.547962][ T5588] REISERFS (device loop4): checking transaction log (loop4) [pid 5588] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5588] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5588] chdir("./file0") = 0 [pid 5588] ioctl(4, LOOP_CLR_FD) = 0 [pid 5588] close(4) = 0 [pid 5588] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... futex resumed>) = 0 [pid 5587] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5588] <... futex resumed>) = 1 [pid 5588] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5588] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... futex resumed>) = 0 [pid 5587] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5588] <... futex resumed>) = 1 [pid 5588] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5588] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... futex resumed>) = 0 [pid 5587] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5588] <... futex resumed>) = 1 [ 101.585100][ T5588] REISERFS (device loop4): Using r5 hash to sort names [ 101.592245][ T5588] REISERFS (device loop4): using 3.5.x disk format [ 101.599194][ T5588] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5588] sendfile(4, 5, NULL, 140737974943952 [pid 5587] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5587] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5587] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5587] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5587] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5590 attached [pid 5590] set_robust_list(0x7fe8f42d09e0, 24 [pid 5587] <... clone resumed>, parent_tid=[5590], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5590 [pid 5590] <... set_robust_list resumed>) = 0 [pid 5587] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] open("./bus", O_RDONLY [pid 5587] <... futex resumed>) = 0 [pid 5587] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5587] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5587] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5587] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5591], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5591 [pid 5587] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5591 attached [pid 5591] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5591] truncate("./bus", 6 [pid 5587] <... futex resumed>) = 0 [pid 5587] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5587] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5587] exit_group(0) = ? [pid 5590] <... open resumed>) = ? [pid 5588] <... sendfile resumed>) = ? [pid 5591] <... truncate resumed>) = ? [pid 5590] +++ exited with 0 +++ [pid 5591] +++ exited with 0 +++ [pid 5588] +++ exited with 0 +++ [pid 5587] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5587, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./65/binderfs") = 0 [pid 5073] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./65/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./65") = 0 [pid 5073] mkdir("./66", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5592 ./strace-static-x86_64: Process 5592 attached [pid 5592] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5592] chdir("./66") = 0 [pid 5592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5592] setpgid(0, 0) = 0 [pid 5592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5592] write(3, "1000", 4) = 4 [pid 5592] close(3) = 0 [pid 5592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5592] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5592] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5592] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5593 attached [pid 5593] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5592] <... clone resumed>, parent_tid=[5593], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5593 [pid 5593] <... set_robust_list resumed>) = 0 [pid 5593] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5592] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5593] <... futex resumed>) = 0 [pid 5592] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5593] memfd_create("syzkaller", 0) = 3 [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5593] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5593] close(3) = 0 [pid 5593] mkdir("./file0", 0777) = 0 [ 102.090809][ T5593] loop4: detected capacity change from 0 to 8192 [ 102.101087][ T5593] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.114300][ T5593] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 102.123605][ T5593] REISERFS (device loop4): using ordered data mode [ 102.130298][ T5593] reiserfs: using flush barriers [ 102.136498][ T5593] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.152950][ T5593] REISERFS (device loop4): checking transaction log (loop4) [pid 5593] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5593] chdir("./file0") = 0 [pid 5593] ioctl(4, LOOP_CLR_FD) = 0 [pid 5593] close(4) = 0 [pid 5593] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5592] <... futex resumed>) = 0 [pid 5593] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5592] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5592] <... futex resumed>) = 0 [pid 5593] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5592] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5593] <... open resumed>) = 4 [pid 5593] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5592] <... futex resumed>) = 0 [pid 5593] openat(-1, "/proc/self/exe", O_RDONLY [pid 5592] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... openat resumed>) = 5 [pid 5592] <... futex resumed>) = 0 [pid 5593] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5593] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5593] sendfile(4, 5, NULL, 140737974943952 [pid 5592] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.194697][ T5593] REISERFS (device loop4): Using r5 hash to sort names [ 102.201735][ T5593] REISERFS (device loop4): using 3.5.x disk format [ 102.208571][ T5593] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5592] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5592] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5592] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5592] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5595], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5595 [pid 5592] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5595 attached [pid 5595] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5595] open("./bus", O_RDONLY [pid 5592] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5592] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5592] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5592] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5596], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5596 [pid 5592] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5596 attached [pid 5596] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5596] truncate("./bus", 6 [pid 5592] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5592] exit_group(0) = ? [pid 5593] <... sendfile resumed>) = ? [pid 5595] <... open resumed>) = ? [pid 5593] +++ exited with 0 +++ [pid 5595] +++ exited with 0 +++ [pid 5596] <... truncate resumed>) = ? [pid 5596] +++ exited with 0 +++ [pid 5592] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5592, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./66/binderfs") = 0 [pid 5073] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./66/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./66") = 0 [pid 5073] mkdir("./67", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5597 ./strace-static-x86_64: Process 5597 attached [pid 5597] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5597] chdir("./67") = 0 [pid 5597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5597] setpgid(0, 0) = 0 [pid 5597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5597] write(3, "1000", 4) = 4 [pid 5597] close(3) = 0 [pid 5597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5597] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5597] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5597] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5598], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5598 [pid 5597] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5598 attached [pid 5598] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5598] memfd_create("syzkaller", 0) = 3 [pid 5598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5598] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5598] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5598] close(3) = 0 [pid 5598] mkdir("./file0", 0777) = 0 [ 102.694307][ T5598] loop4: detected capacity change from 0 to 8192 [ 102.705041][ T5598] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.718172][ T5598] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 102.727494][ T5598] REISERFS (device loop4): using ordered data mode [ 102.734045][ T5598] reiserfs: using flush barriers [ 102.740812][ T5598] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.757277][ T5598] REISERFS (device loop4): checking transaction log (loop4) [pid 5598] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5598] chdir("./file0") = 0 [pid 5598] ioctl(4, LOOP_CLR_FD) = 0 [pid 5598] close(4) = 0 [pid 5598] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5597] <... futex resumed>) = 0 [pid 5597] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5598] <... futex resumed>) = 1 [pid 5598] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5598] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5597] <... futex resumed>) = 0 [pid 5597] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5598] <... futex resumed>) = 1 [pid 5598] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5598] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5597] <... futex resumed>) = 0 [pid 5597] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5598] <... futex resumed>) = 1 [ 102.800786][ T5598] REISERFS (device loop4): Using r5 hash to sort names [ 102.807827][ T5598] REISERFS (device loop4): using 3.5.x disk format [ 102.814554][ T5598] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5598] sendfile(4, 5, NULL, 140737974943952 [pid 5597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5597] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5597] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5597] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5597] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5600 attached , parent_tid=[5600], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5600 [pid 5600] set_robust_list(0x7fe8f42d09e0, 24 [pid 5597] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5600] <... set_robust_list resumed>) = 0 [pid 5600] open("./bus", O_RDONLY [pid 5597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5597] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5597] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5597] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5601 attached [pid 5601] set_robust_list(0x7fe8f42af9e0, 24 [pid 5597] <... clone resumed>, parent_tid=[5601], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5601 [pid 5601] <... set_robust_list resumed>) = 0 [pid 5597] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] truncate("./bus", 6 [pid 5597] <... futex resumed>) = 0 [pid 5597] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5597] exit_group(0) = ? [pid 5600] <... open resumed>) = ? [pid 5598] <... sendfile resumed>) = ? [pid 5601] <... truncate resumed>) = ? [pid 5600] +++ exited with 0 +++ [pid 5601] +++ exited with 0 +++ [pid 5598] +++ exited with 0 +++ [pid 5597] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5597, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./67/binderfs") = 0 [pid 5073] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./67/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./67") = 0 [pid 5073] mkdir("./68", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5602 ./strace-static-x86_64: Process 5602 attached [pid 5602] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5602] chdir("./68") = 0 [pid 5602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5602] setpgid(0, 0) = 0 [pid 5602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5602] write(3, "1000", 4) = 4 [pid 5602] close(3) = 0 [pid 5602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5602] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5602] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5602] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5603], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5603 ./strace-static-x86_64: Process 5603 attached [pid 5603] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5602] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5603] <... set_robust_list resumed>) = 0 [pid 5603] memfd_create("syzkaller", 0) = 3 [pid 5603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5603] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5603] close(3) = 0 [pid 5603] mkdir("./file0", 0777) = 0 [ 103.309300][ T5603] loop4: detected capacity change from 0 to 8192 [ 103.319577][ T5603] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.332686][ T5603] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 103.341985][ T5603] REISERFS (device loop4): using ordered data mode [ 103.348523][ T5603] reiserfs: using flush barriers [ 103.354175][ T5603] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.370696][ T5603] REISERFS (device loop4): checking transaction log (loop4) [pid 5603] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5603] chdir("./file0") = 0 [pid 5603] ioctl(4, LOOP_CLR_FD) = 0 [pid 5603] close(4) = 0 [pid 5603] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... futex resumed>) = 0 [pid 5602] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5603] <... futex resumed>) = 1 [pid 5603] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5603] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... futex resumed>) = 0 [pid 5602] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5603] <... futex resumed>) = 1 [pid 5603] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5603] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... futex resumed>) = 0 [pid 5602] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5603] <... futex resumed>) = 1 [ 103.411960][ T5603] REISERFS (device loop4): Using r5 hash to sort names [ 103.419076][ T5603] REISERFS (device loop4): using 3.5.x disk format [ 103.426251][ T5603] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5603] sendfile(4, 5, NULL, 140737974943952 [pid 5602] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5602] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5602] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5602] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5602] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5605 attached , parent_tid=[5605], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5605 [pid 5605] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5605] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5602] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5602] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... futex resumed>) = 0 [pid 5605] open("./bus", O_RDONLY [pid 5602] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5602] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5602] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5602] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5606 attached , parent_tid=[5606], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5606 [pid 5606] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5606] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5602] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... futex resumed>) = 0 [pid 5602] <... futex resumed>) = 1 [pid 5606] truncate("./bus", 6 [pid 5602] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5602] exit_group(0) = ? [pid 5605] <... open resumed>) = ? [pid 5603] <... sendfile resumed>) = ? [pid 5605] +++ exited with 0 +++ [pid 5606] <... truncate resumed>) = ? [pid 5606] +++ exited with 0 +++ [pid 5603] +++ exited with 0 +++ [pid 5602] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5602, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./68/binderfs") = 0 [ 103.788087][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 103.788103][ T27] audit: type=1804 audit(1671282327.193:296): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/68/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./68/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./68") = 0 [pid 5073] mkdir("./69", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [ 103.819296][ T27] audit: type=1800 audit(1671282327.193:297): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5607 ./strace-static-x86_64: Process 5607 attached [pid 5607] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5607] chdir("./69") = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5607] setpgid(0, 0) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5607] write(3, "1000", 4) = 4 [pid 5607] close(3) = 0 [pid 5607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5607] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5607] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5607] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5608], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5608 [pid 5607] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5608 attached [pid 5608] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5608] memfd_create("syzkaller", 0) = 3 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5608] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5608] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5608] close(3) = 0 [pid 5608] mkdir("./file0", 0777) = 0 [ 103.941743][ T5608] loop4: detected capacity change from 0 to 8192 [ 103.951386][ T5608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.964437][ T5608] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 103.973697][ T5608] REISERFS (device loop4): using ordered data mode [ 103.980312][ T5608] reiserfs: using flush barriers [ 103.986330][ T5608] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.002711][ T5608] REISERFS (device loop4): checking transaction log (loop4) [pid 5608] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5608] chdir("./file0") = 0 [pid 5608] ioctl(4, LOOP_CLR_FD) = 0 [pid 5608] close(4) = 0 [pid 5608] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = 0 [pid 5607] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... futex resumed>) = 1 [pid 5608] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5608] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = 0 [pid 5607] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... futex resumed>) = 1 [pid 5608] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5608] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = 0 [pid 5607] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5608] <... futex resumed>) = 1 [pid 5608] sendfile(4, 5, NULL, 140737974943952 [pid 5607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 104.039989][ T5608] REISERFS (device loop4): Using r5 hash to sort names [ 104.047054][ T5608] REISERFS (device loop4): using 3.5.x disk format [ 104.053866][ T5608] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.067967][ T27] audit: type=1800 audit(1671282327.473:298): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5607] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5607] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5607] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5610], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5610 [pid 5607] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5610 attached [pid 5610] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5607] <... futex resumed>) = 0 [pid 5607] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] open("./bus", O_RDONLY [pid 5607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5607] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5607] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5607] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5611], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5611 ./strace-static-x86_64: Process 5611 attached [pid 5611] set_robust_list(0x7fe8f42af9e0, 24 [pid 5607] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... set_robust_list resumed>) = 0 [pid 5611] truncate("./bus", 6 [pid 5607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5607] exit_group(0) = ? [pid 5608] <... sendfile resumed>) = ? [pid 5610] <... open resumed>) = ? [pid 5608] +++ exited with 0 +++ [pid 5610] +++ exited with 0 +++ [pid 5611] <... truncate resumed>) = ? [pid 5611] +++ exited with 0 +++ [pid 5607] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./69/binderfs") = 0 [pid 5073] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 104.438174][ T27] audit: type=1804 audit(1671282327.843:299): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/69/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 104.462229][ T27] audit: type=1800 audit(1671282327.843:300): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./69/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./69") = 0 [pid 5073] mkdir("./70", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5612 ./strace-static-x86_64: Process 5612 attached [pid 5612] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5612] chdir("./70") = 0 [pid 5612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] setpgid(0, 0) = 0 [pid 5612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5612] write(3, "1000", 4) = 4 [pid 5612] close(3) = 0 [pid 5612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5612] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5612] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5612] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5613 attached , parent_tid=[5613], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5613 [pid 5613] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5612] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5613] <... set_robust_list resumed>) = 0 [pid 5613] memfd_create("syzkaller", 0) = 3 [pid 5613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5613] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5613] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5613] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5613] close(3) = 0 [pid 5613] mkdir("./file0", 0777) = 0 [ 104.604032][ T5613] loop4: detected capacity change from 0 to 8192 [ 104.614575][ T5613] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.627704][ T5613] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 104.637006][ T5613] REISERFS (device loop4): using ordered data mode [ 104.643514][ T5613] reiserfs: using flush barriers [ 104.649485][ T5613] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.666079][ T5613] REISERFS (device loop4): checking transaction log (loop4) [pid 5613] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5613] chdir("./file0") = 0 [pid 5613] ioctl(4, LOOP_CLR_FD) = 0 [pid 5613] close(4) = 0 [pid 5613] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... futex resumed>) = 0 [pid 5612] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... futex resumed>) = 0 [pid 5612] <... futex resumed>) = 1 [pid 5613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5612] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5613] <... open resumed>) = 4 [pid 5613] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] <... futex resumed>) = 0 [pid 5613] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... futex resumed>) = 0 [pid 5613] openat(-1, "/proc/self/exe", O_RDONLY [pid 5612] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5613] <... openat resumed>) = 5 [pid 5613] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] <... futex resumed>) = 0 [pid 5613] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5612] <... futex resumed>) = 0 [pid 5613] sendfile(4, 5, NULL, 140737974943952 [ 104.703203][ T5613] REISERFS (device loop4): Using r5 hash to sort names [ 104.710316][ T5613] REISERFS (device loop4): using 3.5.x disk format [ 104.717377][ T5613] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.734957][ T27] audit: type=1800 audit(1671282328.133:301): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5612] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5612] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5612] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5612] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5615 attached [pid 5615] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5615] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... clone resumed>, parent_tid=[5615], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5615 [pid 5612] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5612] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5615] <... futex resumed>) = 0 [pid 5615] open("./bus", O_RDONLY [pid 5612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5612] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5612] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5616 attached , parent_tid=[5616], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5616 [pid 5612] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5616] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5616] truncate("./bus", 6 [pid 5612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] exit_group(0) = ? [pid 5615] <... open resumed>) = ? [pid 5613] <... sendfile resumed>) = ? [pid 5615] +++ exited with 0 +++ [pid 5616] <... truncate resumed>) = ? [pid 5616] +++ exited with 0 +++ [pid 5613] +++ exited with 0 +++ [pid 5612] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5612, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./70/binderfs") = 0 [pid 5073] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 105.078896][ T27] audit: type=1804 audit(1671282328.483:302): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/70/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 105.102186][ T27] audit: type=1800 audit(1671282328.483:303): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./70/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./70") = 0 [pid 5073] mkdir("./71", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5617 ./strace-static-x86_64: Process 5617 attached [pid 5617] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5617] chdir("./71") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5617] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5617] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5618], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5618 [pid 5617] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5618 attached [pid 5618] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5618] memfd_create("syzkaller", 0) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5618] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5618] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5618] close(3) = 0 [pid 5618] mkdir("./file0", 0777) = 0 [ 105.241058][ T5618] loop4: detected capacity change from 0 to 8192 [ 105.251890][ T5618] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.265487][ T5618] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 105.274829][ T5618] REISERFS (device loop4): using ordered data mode [ 105.281814][ T5618] reiserfs: using flush barriers [ 105.287689][ T5618] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.304216][ T5618] REISERFS (device loop4): checking transaction log (loop4) [pid 5618] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5618] chdir("./file0") = 0 [pid 5618] ioctl(4, LOOP_CLR_FD) = 0 [pid 5618] close(4) = 0 [pid 5618] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] <... futex resumed>) = 1 [ 105.347271][ T5618] REISERFS (device loop4): Using r5 hash to sort names [ 105.354478][ T5618] REISERFS (device loop4): using 3.5.x disk format [ 105.361326][ T5618] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5618] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5618] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5618] openat(-1, "/proc/self/exe", O_RDONLY [pid 5617] <... futex resumed>) = 0 [pid 5618] <... openat resumed>) = 5 [pid 5617] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5618] <... futex resumed>) = 0 [pid 5617] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] sendfile(4, 5, NULL, 140737974943952 [pid 5617] <... futex resumed>) = 0 [ 105.389963][ T27] audit: type=1800 audit(1671282328.793:304): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5617] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5617] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5617] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5620 attached [pid 5620] set_robust_list(0x7fe8f42d09e0, 24 [pid 5617] <... clone resumed>, parent_tid=[5620], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5620 [pid 5620] <... set_robust_list resumed>) = 0 [pid 5617] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5620] open("./bus", O_RDONLY [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5617] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5617] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5621 attached , parent_tid=[5621], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5621 [pid 5621] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5621] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5617] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] truncate("./bus", 6 [pid 5617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5617] exit_group(0) = ? [pid 5621] <... truncate resumed>) = ? [pid 5620] <... open resumed>) = ? [pid 5618] <... sendfile resumed>) = ? [pid 5621] +++ exited with 0 +++ [pid 5620] +++ exited with 0 +++ [pid 5618] +++ exited with 0 +++ [pid 5617] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./71/binderfs") = 0 [ 105.788111][ T27] audit: type=1804 audit(1671282329.193:305): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/71/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./71/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./71") = 0 [pid 5073] mkdir("./72", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5622 ./strace-static-x86_64: Process 5622 attached [pid 5622] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5622] chdir("./72") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5622] write(3, "1000", 4) = 4 [pid 5622] close(3) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5622] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5622] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5622] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5623], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5623 [pid 5622] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5623 attached [pid 5623] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5623] memfd_create("syzkaller", 0) = 3 [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5623] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5623] close(3) = 0 [pid 5623] mkdir("./file0", 0777) = 0 [ 105.917459][ T5623] loop4: detected capacity change from 0 to 8192 [ 105.927110][ T5623] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.940616][ T5623] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 105.949903][ T5623] REISERFS (device loop4): using ordered data mode [ 105.956631][ T5623] reiserfs: using flush barriers [ 105.962370][ T5623] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.978955][ T5623] REISERFS (device loop4): checking transaction log (loop4) [pid 5623] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5623] chdir("./file0") = 0 [pid 5623] ioctl(4, LOOP_CLR_FD) = 0 [pid 5623] close(4) = 0 [pid 5623] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 0 [pid 5623] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5623] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... futex resumed>) = 1 [pid 5623] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5623] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 106.016109][ T5623] REISERFS (device loop4): Using r5 hash to sort names [ 106.023224][ T5623] REISERFS (device loop4): using 3.5.x disk format [ 106.030130][ T5623] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5623] sendfile(4, 5, NULL, 140737974943952 [pid 5622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5622] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5622] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5622] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5625], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5625 ./strace-static-x86_64: Process 5625 attached [pid 5622] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] set_robust_list(0x7fe8f42d09e0, 24 [pid 5622] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5625] <... set_robust_list resumed>) = 0 [pid 5625] open("./bus", O_RDONLY [pid 5622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5622] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5622] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5622] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5626 attached , parent_tid=[5626], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5626 [pid 5626] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5626] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5622] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5626] truncate("./bus", 6 [pid 5622] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5622] exit_group(0) = ? [pid 5623] <... sendfile resumed>) = ? [pid 5625] <... open resumed>) = ? [pid 5623] +++ exited with 0 +++ [pid 5626] <... truncate resumed>) = ? [pid 5625] +++ exited with 0 +++ [pid 5626] +++ exited with 0 +++ [pid 5622] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./72/binderfs") = 0 [pid 5073] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./72/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./72") = 0 [pid 5073] mkdir("./73", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5627 ./strace-static-x86_64: Process 5627 attached [pid 5627] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5627] chdir("./73") = 0 [pid 5627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5627] setpgid(0, 0) = 0 [pid 5627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5627] write(3, "1000", 4) = 4 [pid 5627] close(3) = 0 [pid 5627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5627] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5627] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5627] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5628 attached , parent_tid=[5628], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5628 [pid 5628] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5627] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5628] <... set_robust_list resumed>) = 0 [pid 5628] memfd_create("syzkaller", 0) = 3 [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5628] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5628] close(3) = 0 [pid 5628] mkdir("./file0", 0777) = 0 [ 106.573848][ T5628] loop4: detected capacity change from 0 to 8192 [ 106.584097][ T5628] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.597413][ T5628] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 106.606727][ T5628] REISERFS (device loop4): using ordered data mode [ 106.613253][ T5628] reiserfs: using flush barriers [ 106.619299][ T5628] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.636431][ T5628] REISERFS (device loop4): checking transaction log (loop4) [pid 5628] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5628] chdir("./file0") = 0 [pid 5628] ioctl(4, LOOP_CLR_FD) = 0 [pid 5628] close(4) = 0 [pid 5628] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5628] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5627] <... futex resumed>) = 0 [pid 5627] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5627] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] <... futex resumed>) = 0 [pid 5628] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5628] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] <... futex resumed>) = 0 [pid 5627] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] <... futex resumed>) = 1 [pid 5628] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5628] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5627] <... futex resumed>) = 0 [pid 5628] sendfile(4, 5, NULL, 140737974943952 [pid 5627] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.680763][ T5628] REISERFS (device loop4): Using r5 hash to sort names [ 106.687920][ T5628] REISERFS (device loop4): using 3.5.x disk format [ 106.694608][ T5628] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5627] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5627] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5627] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5627] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5630], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5630 ./strace-static-x86_64: Process 5630 attached [pid 5627] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5630] open("./bus", O_RDONLY [pid 5627] <... futex resumed>) = 0 [pid 5627] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5627] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5627] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5627] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5631 attached [pid 5631] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5631] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5627] <... clone resumed>, parent_tid=[5631], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5631 [pid 5627] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5631] truncate("./bus", 6 [pid 5627] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5627] exit_group(0) = ? [pid 5630] <... open resumed>) = ? [pid 5628] <... sendfile resumed>) = ? [pid 5631] <... truncate resumed>) = ? [pid 5630] +++ exited with 0 +++ [pid 5631] +++ exited with 0 +++ [pid 5628] +++ exited with 0 +++ [pid 5627] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5627, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./73/binderfs") = 0 [pid 5073] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./73/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./73") = 0 [pid 5073] mkdir("./74", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5632 ./strace-static-x86_64: Process 5632 attached [pid 5632] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5632] chdir("./74") = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5632] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5632] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5632] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5633 attached , parent_tid=[5633], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5633 [pid 5633] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5632] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... set_robust_list resumed>) = 0 [pid 5632] <... futex resumed>) = 0 [pid 5632] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5633] memfd_create("syzkaller", 0) = 3 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5633] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5633] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5633] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5633] close(3) = 0 [pid 5633] mkdir("./file0", 0777) = 0 [ 107.229508][ T5633] loop4: detected capacity change from 0 to 8192 [ 107.239377][ T5633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.252736][ T5633] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 107.262473][ T5633] REISERFS (device loop4): using ordered data mode [ 107.269087][ T5633] reiserfs: using flush barriers [ 107.275039][ T5633] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.291508][ T5633] REISERFS (device loop4): checking transaction log (loop4) [pid 5633] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5633] chdir("./file0") = 0 [pid 5633] ioctl(4, LOOP_CLR_FD) = 0 [pid 5633] close(4) = 0 [pid 5633] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5633] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] <... futex resumed>) = 0 [pid 5632] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = 0 [pid 5632] <... futex resumed>) = 1 [pid 5633] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5632] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5633] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5633] <... futex resumed>) = 0 [pid 5632] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] openat(-1, "/proc/self/exe", O_RDONLY [pid 5632] <... futex resumed>) = 0 [pid 5633] <... openat resumed>) = 5 [pid 5632] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5633] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5633] <... futex resumed>) = 0 [pid 5632] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] sendfile(4, 5, NULL, 140737974943952 [pid 5632] <... futex resumed>) = 0 [ 107.333438][ T5633] REISERFS (device loop4): Using r5 hash to sort names [ 107.340987][ T5633] REISERFS (device loop4): using 3.5.x disk format [ 107.347968][ T5633] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5632] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5632] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5632] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5632] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5635 attached , parent_tid=[5635], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5635 [pid 5635] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5635] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5632] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... futex resumed>) = 0 [pid 5635] open("./bus", O_RDONLY [pid 5632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5632] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5632] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5632] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5636 attached , parent_tid=[5636], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5636 [pid 5636] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5632] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] truncate("./bus", 6 [pid 5632] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5632] exit_group(0) = ? [pid 5633] <... sendfile resumed>) = ? [pid 5635] <... open resumed>) = ? [pid 5633] +++ exited with 0 +++ [pid 5636] <... truncate resumed>) = ? [pid 5635] +++ exited with 0 +++ [pid 5636] +++ exited with 0 +++ [pid 5632] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./74/binderfs") = 0 [pid 5073] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./74/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./74") = 0 [pid 5073] mkdir("./75", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5637 ./strace-static-x86_64: Process 5637 attached [pid 5637] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5637] chdir("./75") = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5637] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5637] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5637] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5638 attached , parent_tid=[5638], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5638 [pid 5638] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5637] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... set_robust_list resumed>) = 0 [pid 5638] memfd_create("syzkaller", 0 [pid 5637] <... futex resumed>) = 0 [pid 5637] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5638] <... memfd_create resumed>) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5638] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5638] close(3) = 0 [pid 5638] mkdir("./file0", 0777) = 0 [ 107.898762][ T5638] loop4: detected capacity change from 0 to 8192 [ 107.909255][ T5638] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.922414][ T5638] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 107.931994][ T5638] REISERFS (device loop4): using ordered data mode [ 107.938558][ T5638] reiserfs: using flush barriers [ 107.944512][ T5638] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.961382][ T5638] REISERFS (device loop4): checking transaction log (loop4) [pid 5638] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5638] chdir("./file0") = 0 [pid 5638] ioctl(4, LOOP_CLR_FD) = 0 [pid 5638] close(4) = 0 [pid 5638] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5638] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5637] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... open resumed>) = 4 [pid 5637] <... futex resumed>) = 0 [pid 5638] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... futex resumed>) = 0 [pid 5637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] openat(-1, "/proc/self/exe", O_RDONLY [pid 5637] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... openat resumed>) = 5 [pid 5637] <... futex resumed>) = 0 [pid 5638] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... futex resumed>) = 0 [pid 5637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 5638] sendfile(4, 5, NULL, 140737974943952 [ 108.006894][ T5638] REISERFS (device loop4): Using r5 hash to sort names [ 108.013876][ T5638] REISERFS (device loop4): using 3.5.x disk format [ 108.020799][ T5638] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5637] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5637] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5637] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5637] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5640 attached , parent_tid=[5640], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5640 [pid 5640] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5640] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5640] <... futex resumed>) = 0 [pid 5637] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] open("./bus", O_RDONLY [pid 5637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5637] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5637] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5637] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5641 attached [pid 5641] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5641] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] <... clone resumed>, parent_tid=[5641], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5641 [pid 5637] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = 0 [pid 5637] <... futex resumed>) = 1 [pid 5641] truncate("./bus", 6 [pid 5637] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5637] exit_group(0) = ? [pid 5638] <... sendfile resumed>) = ? [pid 5641] <... truncate resumed>) = ? [pid 5640] <... open resumed>) = ? [pid 5638] +++ exited with 0 +++ [pid 5641] +++ exited with 0 +++ [pid 5640] +++ exited with 0 +++ [pid 5637] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5073] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./75/binderfs") = 0 [pid 5073] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./75/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./75") = 0 [pid 5073] mkdir("./76", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5642 ./strace-static-x86_64: Process 5642 attached [pid 5642] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5642] chdir("./76") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5642] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5642] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5642] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5643 attached , parent_tid=[5643], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5643 [pid 5643] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5643] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [pid 5643] memfd_create("syzkaller", 0 [pid 5642] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5643] <... memfd_create resumed>) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5643] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5643] close(3) = 0 [pid 5643] mkdir("./file0", 0777) = 0 [ 108.505035][ T5643] loop4: detected capacity change from 0 to 8192 [ 108.515585][ T5643] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.528617][ T5643] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 108.537982][ T5643] REISERFS (device loop4): using ordered data mode [ 108.544514][ T5643] reiserfs: using flush barriers [ 108.550771][ T5643] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.567226][ T5643] REISERFS (device loop4): checking transaction log (loop4) [pid 5643] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5643] chdir("./file0") = 0 [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5643] close(4) = 0 [pid 5643] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5642] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5642] <... futex resumed>) = 0 [pid 5642] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... open resumed>) = 4 [pid 5643] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] <... futex resumed>) = 0 [pid 5643] <... futex resumed>) = 1 [pid 5642] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] openat(-1, "/proc/self/exe", O_RDONLY [pid 5642] <... futex resumed>) = 0 [pid 5642] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... openat resumed>) = 5 [pid 5643] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5642] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] sendfile(4, 5, NULL, 140737974943952 [pid 5642] <... futex resumed>) = 0 [ 108.611105][ T5643] REISERFS (device loop4): Using r5 hash to sort names [ 108.618026][ T5643] REISERFS (device loop4): using 3.5.x disk format [ 108.624667][ T5643] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5642] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5642] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5642] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5642] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5642] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5645], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5645 [pid 5642] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5645 attached [pid 5645] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5645] open("./bus", O_RDONLY [pid 5642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5642] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5642] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5642] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5646 attached [pid 5646] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5646] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] <... clone resumed>, parent_tid=[5646], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5646 [pid 5642] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] <... futex resumed>) = 0 [pid 5642] <... futex resumed>) = 1 [pid 5646] truncate("./bus", 6 [pid 5642] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5642] exit_group(0) = ? [pid 5643] <... sendfile resumed>) = ? [pid 5643] +++ exited with 0 +++ [pid 5645] <... open resumed>) = ? [pid 5645] +++ exited with 0 +++ [pid 5646] <... truncate resumed>) = ? [pid 5646] +++ exited with 0 +++ [pid 5642] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./76/binderfs") = 0 [pid 5073] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [ 109.038688][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 109.038704][ T27] audit: type=1804 audit(1671282332.443:320): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/76/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 109.068567][ T27] audit: type=1800 audit(1671282332.443:321): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./76/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./76") = 0 [pid 5073] mkdir("./77", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5647 ./strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5647] chdir("./77") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5647] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5648], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5648 [pid 5647] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5648 attached [pid 5648] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5648] memfd_create("syzkaller", 0) = 3 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5648] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5648] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5648] close(3) = 0 [pid 5648] mkdir("./file0", 0777) = 0 [ 109.187353][ T5648] loop4: detected capacity change from 0 to 8192 [ 109.198041][ T5648] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 109.211298][ T5648] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 109.220814][ T5648] REISERFS (device loop4): using ordered data mode [ 109.227507][ T5648] reiserfs: using flush barriers [ 109.233373][ T5648] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.250134][ T5648] REISERFS (device loop4): checking transaction log (loop4) [pid 5648] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5648] chdir("./file0") = 0 [pid 5648] ioctl(4, LOOP_CLR_FD) = 0 [pid 5648] close(4) = 0 [pid 5648] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5648] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = 1 [ 109.291926][ T5648] REISERFS (device loop4): Using r5 hash to sort names [ 109.299163][ T5648] REISERFS (device loop4): using 3.5.x disk format [ 109.306641][ T5648] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5648] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5647] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5648] openat(-1, "/proc/self/exe", O_RDONLY [pid 5647] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... openat resumed>) = 5 [pid 5647] <... futex resumed>) = 0 [pid 5648] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] sendfile(4, 5, NULL, 140737974943952 [pid 5647] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.338232][ T27] audit: type=1800 audit(1671282332.743:322): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5647] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5647] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5647] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5650 attached , parent_tid=[5650], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5650 [pid 5647] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5650] open("./bus", O_RDONLY [pid 5647] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5647] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5647] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5651], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5651 [pid 5647] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5651 attached [pid 5651] set_robust_list(0x7fe8f42af9e0, 24 [pid 5647] <... futex resumed>) = 0 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5651] truncate("./bus", 6 [pid 5647] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5647] exit_group(0) = ? [pid 5650] <... open resumed>) = ? [pid 5648] <... sendfile resumed>) = ? [pid 5650] +++ exited with 0 +++ [pid 5651] <... truncate resumed>) = ? [pid 5651] +++ exited with 0 +++ [pid 5648] +++ exited with 0 +++ [pid 5647] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./77/binderfs") = 0 [pid 5073] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 109.698150][ T27] audit: type=1804 audit(1671282333.103:323): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/77/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 109.722100][ T27] audit: type=1800 audit(1671282333.103:324): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./77/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./77") = 0 [pid 5073] mkdir("./78", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5652 ./strace-static-x86_64: Process 5652 attached [pid 5652] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5652] chdir("./78") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5652] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5652] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5653], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5653 [pid 5652] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5653 attached [pid 5653] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5653] memfd_create("syzkaller", 0) = 3 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5653] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5653] close(3) = 0 [pid 5653] mkdir("./file0", 0777) = 0 [ 109.844184][ T5653] loop4: detected capacity change from 0 to 8192 [ 109.854492][ T5653] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 109.867641][ T5653] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 109.877299][ T5653] REISERFS (device loop4): using ordered data mode [ 109.883855][ T5653] reiserfs: using flush barriers [ 109.889964][ T5653] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.906343][ T5653] REISERFS (device loop4): checking transaction log (loop4) [pid 5653] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5653] chdir("./file0") = 0 [pid 5653] ioctl(4, LOOP_CLR_FD) = 0 [pid 5653] close(4) = 0 [pid 5653] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5652] <... futex resumed>) = 0 [pid 5652] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5652] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5653] <... futex resumed>) = 0 [ 109.944240][ T5653] REISERFS (device loop4): Using r5 hash to sort names [ 109.951345][ T5653] REISERFS (device loop4): using 3.5.x disk format [ 109.958316][ T5653] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5653] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5653] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5652] <... futex resumed>) = 0 [pid 5652] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = 0 [pid 5652] <... futex resumed>) = 1 [pid 5653] openat(-1, "/proc/self/exe", O_RDONLY [pid 5652] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5653] <... openat resumed>) = 5 [pid 5653] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5652] <... futex resumed>) = 0 [pid 5653] sendfile(4, 5, NULL, 140737974943952 [pid 5652] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.978169][ T27] audit: type=1800 audit(1671282333.383:325): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5652] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5652] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5652] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5652] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5655 attached , parent_tid=[5655], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5655 [pid 5652] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] set_robust_list(0x7fe8f42d09e0, 24 [pid 5652] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5655] <... set_robust_list resumed>) = 0 [pid 5655] open("./bus", O_RDONLY [pid 5652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5652] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5652] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5652] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5652] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5656], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5656 [pid 5652] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5652] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5656] truncate("./bus", 6 [pid 5652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5652] exit_group(0) = ? [pid 5653] <... sendfile resumed>) = ? [pid 5656] <... truncate resumed>) = ? [pid 5655] <... open resumed>) = ? [pid 5656] +++ exited with 0 +++ [pid 5655] +++ exited with 0 +++ [pid 5653] +++ exited with 0 +++ [pid 5652] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5652, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./78/binderfs") = 0 [pid 5073] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./78/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [ 110.338422][ T27] audit: type=1804 audit(1671282333.743:326): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/78/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 110.362309][ T27] audit: type=1800 audit(1671282333.743:327): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./78") = 0 [pid 5073] mkdir("./79", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5657 ./strace-static-x86_64: Process 5657 attached [pid 5657] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5657] chdir("./79") = 0 [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5657] setpgid(0, 0) = 0 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5657] write(3, "1000", 4) = 4 [pid 5657] close(3) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5657] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5657] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5657] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5658], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5658 [pid 5657] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5658 attached [pid 5658] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5658] memfd_create("syzkaller", 0) = 3 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5658] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5658] close(3) = 0 [pid 5658] mkdir("./file0", 0777) = 0 [ 110.473292][ T5658] loop4: detected capacity change from 0 to 8192 [ 110.483340][ T5658] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.496411][ T5658] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 110.505993][ T5658] REISERFS (device loop4): using ordered data mode [ 110.512523][ T5658] reiserfs: using flush barriers [ 110.518787][ T5658] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.535322][ T5658] REISERFS (device loop4): checking transaction log (loop4) [pid 5658] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5658] chdir("./file0") = 0 [pid 5658] ioctl(4, LOOP_CLR_FD) = 0 [pid 5658] close(4) = 0 [pid 5658] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] <... futex resumed>) = 0 [pid 5657] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 110.578413][ T5658] REISERFS (device loop4): Using r5 hash to sort names [ 110.585542][ T5658] REISERFS (device loop4): using 3.5.x disk format [ 110.592247][ T5658] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5658] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5658] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] <... futex resumed>) = 0 [pid 5657] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5658] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5658] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] <... futex resumed>) = 0 [pid 5657] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 110.625476][ T27] audit: type=1800 audit(1671282334.023:328): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5658] sendfile(4, 5, NULL, 140737974943952 [pid 5657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5657] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5657] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5657] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5660 attached [pid 5660] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5660] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5657] <... clone resumed>, parent_tid=[5660], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5660 [pid 5660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5657] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] open("./bus", O_RDONLY [pid 5657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5657] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5657] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5657] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5657] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5661 attached , parent_tid=[5661], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5661 [pid 5657] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5661] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5661] truncate("./bus", 6 [pid 5657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5657] exit_group(0) = ? [pid 5658] <... sendfile resumed>) = ? [pid 5660] <... open resumed>) = ? [pid 5660] +++ exited with 0 +++ [pid 5661] <... truncate resumed>) = ? [pid 5661] +++ exited with 0 +++ [pid 5658] +++ exited with 0 +++ [pid 5657] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5657, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./79/binderfs") = 0 [pid 5073] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 111.028229][ T27] audit: type=1804 audit(1671282334.433:329): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/79/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./79/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./79") = 0 [pid 5073] mkdir("./80", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5662 ./strace-static-x86_64: Process 5662 attached [pid 5662] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5662] chdir("./80") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5662] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5662] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5663], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5663 [pid 5662] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5663 attached [pid 5663] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5663] memfd_create("syzkaller", 0) = 3 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5663] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5663] close(3) = 0 [pid 5663] mkdir("./file0", 0777) = 0 [ 111.154035][ T5663] loop4: detected capacity change from 0 to 8192 [ 111.163928][ T5663] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 111.177035][ T5663] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 111.186423][ T5663] REISERFS (device loop4): using ordered data mode [ 111.192950][ T5663] reiserfs: using flush barriers [ 111.198891][ T5663] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.215323][ T5663] REISERFS (device loop4): checking transaction log (loop4) [pid 5663] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5663] chdir("./file0") = 0 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [pid 5663] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5663] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] <... futex resumed>) = 0 [pid 5662] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5662] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 0 [pid 5663] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5663] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5662] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 1 [pid 5663] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5663] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5662] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 1 [ 111.253057][ T5663] REISERFS (device loop4): Using r5 hash to sort names [ 111.260144][ T5663] REISERFS (device loop4): using 3.5.x disk format [ 111.267547][ T5663] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5663] sendfile(4, 5, NULL, 140737974943952 [pid 5662] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5662] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5662] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5662] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5665 attached , parent_tid=[5665], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5665 [pid 5665] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5662] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] open("./bus", O_RDONLY [pid 5662] <... futex resumed>) = 0 [pid 5662] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5662] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5662] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5662] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5666 attached [pid 5666] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5666] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] <... clone resumed>, parent_tid=[5666], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5666 [pid 5662] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] <... futex resumed>) = 0 [pid 5662] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] truncate("./bus", 6 [pid 5662] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5662] exit_group(0) = ? [pid 5665] <... open resumed>) = ? [pid 5663] <... sendfile resumed>) = ? [pid 5666] <... truncate resumed>) = ? [pid 5665] +++ exited with 0 +++ [pid 5666] +++ exited with 0 +++ [pid 5663] +++ exited with 0 +++ [pid 5662] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5662, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./80/binderfs") = 0 [pid 5073] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./80/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./80") = 0 [pid 5073] mkdir("./81", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5667 ./strace-static-x86_64: Process 5667 attached [pid 5667] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5667] chdir("./81") = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5667] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5667] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5668], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5668 [pid 5667] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5668 attached [pid 5668] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5668] memfd_create("syzkaller", 0) = 3 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5668] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5668] close(3) = 0 [pid 5668] mkdir("./file0", 0777) = 0 [ 111.776743][ T5668] loop4: detected capacity change from 0 to 8192 [ 111.786721][ T5668] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 111.800125][ T5668] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 111.809748][ T5668] REISERFS (device loop4): using ordered data mode [ 111.816372][ T5668] reiserfs: using flush barriers [ 111.822398][ T5668] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.838923][ T5668] REISERFS (device loop4): checking transaction log (loop4) [pid 5668] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5668] chdir("./file0") = 0 [pid 5668] ioctl(4, LOOP_CLR_FD) = 0 [pid 5668] close(4) = 0 [pid 5668] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = 0 [pid 5667] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... futex resumed>) = 1 [pid 5668] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5668] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] <... futex resumed>) = 0 [pid 5668] openat(-1, "/proc/self/exe", O_RDONLY [pid 5667] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... openat resumed>) = 5 [pid 5667] <... futex resumed>) = 0 [pid 5667] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5667] <... futex resumed>) = 0 [pid 5667] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... futex resumed>) = 0 [ 111.880344][ T5668] REISERFS (device loop4): Using r5 hash to sort names [ 111.887514][ T5668] REISERFS (device loop4): using 3.5.x disk format [ 111.894181][ T5668] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5668] sendfile(4, 5, NULL, 140737974943952 [pid 5667] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5667] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5667] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5667] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5670], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5670 [pid 5667] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5670 attached [pid 5670] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5670] open("./bus", O_RDONLY [pid 5667] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5667] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5667] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5667] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5671 attached , parent_tid=[5671], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5671 [pid 5671] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5671] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5667] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5671] <... futex resumed>) = 0 [pid 5671] truncate("./bus", 6 [pid 5667] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5667] exit_group(0) = ? [pid 5670] <... open resumed>) = ? [pid 5668] <... sendfile resumed>) = ? [pid 5671] <... truncate resumed>) = ? [pid 5670] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ [pid 5668] +++ exited with 0 +++ [pid 5667] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5667, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./81/binderfs") = 0 [pid 5073] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./81/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./81") = 0 [pid 5073] mkdir("./82", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5672 attached , child_tidptr=0x5555558b65d0) = 5672 [pid 5672] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5672] chdir("./82") = 0 [pid 5672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5672] setpgid(0, 0) = 0 [pid 5672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5672] write(3, "1000", 4) = 4 [pid 5672] close(3) = 0 [pid 5672] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5672] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5672] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5672] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5673], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5673 [pid 5672] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5673 attached [pid 5673] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5673] memfd_create("syzkaller", 0) = 3 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5673] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5673] close(3) = 0 [pid 5673] mkdir("./file0", 0777) = 0 [ 112.427768][ T5673] loop4: detected capacity change from 0 to 8192 [ 112.437832][ T5673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.451967][ T5673] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 112.461247][ T5673] REISERFS (device loop4): using ordered data mode [ 112.467839][ T5673] reiserfs: using flush barriers [ 112.473619][ T5673] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.490129][ T5673] REISERFS (device loop4): checking transaction log (loop4) [pid 5673] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5673] chdir("./file0") = 0 [pid 5673] ioctl(4, LOOP_CLR_FD) = 0 [pid 5673] close(4) = 0 [pid 5673] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = 0 [pid 5672] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [pid 5673] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5673] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = 0 [pid 5672] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [pid 5673] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5673] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = 0 [pid 5672] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [ 112.528283][ T5673] REISERFS (device loop4): Using r5 hash to sort names [ 112.535335][ T5673] REISERFS (device loop4): using 3.5.x disk format [ 112.542344][ T5673] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5673] sendfile(4, 5, NULL, 140737974943952 [pid 5672] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5672] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5672] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5672] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5675], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5675 [pid 5672] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5675 attached [pid 5675] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5675] open("./bus", O_RDONLY [pid 5672] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5672] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5672] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5672] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5676], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5676 [pid 5672] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5676 attached [pid 5676] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5676] truncate("./bus", 6 [pid 5672] <... futex resumed>) = 0 [pid 5672] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5672] exit_group(0) = ? [pid 5675] <... open resumed>) = ? [pid 5673] <... sendfile resumed>) = ? [pid 5675] +++ exited with 0 +++ [pid 5676] <... truncate resumed>) = ? [pid 5676] +++ exited with 0 +++ [pid 5673] +++ exited with 0 +++ [pid 5672] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5672, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./82/binderfs") = 0 [pid 5073] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./82/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./82") = 0 [pid 5073] mkdir("./83", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5677 ./strace-static-x86_64: Process 5677 attached [pid 5677] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5677] chdir("./83") = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5677] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5677] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5678], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5678 [pid 5677] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5678 attached [pid 5678] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5678] memfd_create("syzkaller", 0) = 3 [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5678] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5678] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5678] close(3) = 0 [pid 5678] mkdir("./file0", 0777) = 0 [ 113.080837][ T5678] loop4: detected capacity change from 0 to 8192 [ 113.091078][ T5678] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.104648][ T5678] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 113.114083][ T5678] REISERFS (device loop4): using ordered data mode [ 113.120967][ T5678] reiserfs: using flush barriers [ 113.126837][ T5678] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.143853][ T5678] REISERFS (device loop4): checking transaction log (loop4) [pid 5678] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5678] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5678] chdir("./file0") = 0 [pid 5678] ioctl(4, LOOP_CLR_FD) = 0 [pid 5678] close(4) = 0 [pid 5678] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5678] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] <... futex resumed>) = 0 [pid 5677] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = 0 [pid 5677] <... futex resumed>) = 1 [pid 5678] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5677] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5678] <... open resumed>) = 4 [pid 5678] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5678] openat(-1, "/proc/self/exe", O_RDONLY [pid 5677] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... openat resumed>) = 5 [pid 5678] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... futex resumed>) = 0 [pid 5678] <... futex resumed>) = 0 [pid 5677] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5678] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = 0 [pid 5677] <... futex resumed>) = 1 [pid 5678] sendfile(4, 5, NULL, 140737974943952 [ 113.181526][ T5678] REISERFS (device loop4): Using r5 hash to sort names [ 113.188582][ T5678] REISERFS (device loop4): using 3.5.x disk format [ 113.195321][ T5678] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5677] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5677] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5677] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5677] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5680 attached , parent_tid=[5680], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5680 [pid 5680] set_robust_list(0x7fe8f42d09e0, 24 [pid 5677] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5680] <... set_robust_list resumed>) = 0 [pid 5677] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5680] open("./bus", O_RDONLY [pid 5677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5677] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5677] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5677] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5681], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5681 [pid 5677] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5681 attached [pid 5681] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5681] truncate("./bus", 6 [pid 5677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5677] exit_group(0) = ? [pid 5678] <... sendfile resumed>) = ? [pid 5681] <... truncate resumed>) = ? [pid 5680] <... open resumed>) = ? [pid 5678] +++ exited with 0 +++ [pid 5681] +++ exited with 0 +++ [pid 5680] +++ exited with 0 +++ [pid 5677] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./83/binderfs") = 0 [pid 5073] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./83/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./83") = 0 [pid 5073] mkdir("./84", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5682 ./strace-static-x86_64: Process 5682 attached [pid 5682] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5682] chdir("./84") = 0 [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5682] setpgid(0, 0) = 0 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5682] write(3, "1000", 4) = 4 [pid 5682] close(3) = 0 [pid 5682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5682] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5682] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5682] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5683 attached [pid 5683] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5682] <... clone resumed>, parent_tid=[5683], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5683 [pid 5683] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5683] memfd_create("syzkaller", 0 [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5683] <... memfd_create resumed>) = 3 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5683] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5683] close(3) = 0 [pid 5683] mkdir("./file0", 0777) = 0 [ 113.674972][ T5683] loop4: detected capacity change from 0 to 8192 [ 113.686186][ T5683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.699251][ T5683] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 113.708581][ T5683] REISERFS (device loop4): using ordered data mode [ 113.715116][ T5683] reiserfs: using flush barriers [ 113.720967][ T5683] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.737450][ T5683] REISERFS (device loop4): checking transaction log (loop4) [pid 5683] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5683] chdir("./file0") = 0 [pid 5683] ioctl(4, LOOP_CLR_FD) = 0 [pid 5683] close(4) = 0 [pid 5683] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5683] <... futex resumed>) = 1 [pid 5683] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5683] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5683] <... futex resumed>) = 1 [pid 5683] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5683] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5682] <... futex resumed>) = 0 [pid 5682] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.774363][ T5683] REISERFS (device loop4): Using r5 hash to sort names [ 113.781333][ T5683] REISERFS (device loop4): using 3.5.x disk format [ 113.788222][ T5683] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5683] sendfile(4, 5, NULL, 140737974943952 [pid 5682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5682] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5682] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5682] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5685 attached , parent_tid=[5685], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5685 [pid 5685] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5685] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5685] <... futex resumed>) = 0 [pid 5682] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] open("./bus", O_RDONLY [pid 5682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5682] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5682] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5682] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5686], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5686 [pid 5682] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5686 attached [pid 5686] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5686] truncate("./bus", 6 [pid 5682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5682] exit_group(0) = ? [pid 5683] <... sendfile resumed>) = ? [pid 5685] <... open resumed>) = ? [pid 5683] +++ exited with 0 +++ [pid 5686] <... truncate resumed>) = ? [pid 5686] +++ exited with 0 +++ [pid 5685] +++ exited with 0 +++ [pid 5682] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5682, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./84/binderfs") = 0 [ 114.148430][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 114.148446][ T27] audit: type=1804 audit(1671282337.553:344): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/84/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./84/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./84") = 0 [pid 5073] mkdir("./85", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 114.179105][ T27] audit: type=1800 audit(1671282337.553:345): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5688 ./strace-static-x86_64: Process 5688 attached [pid 5688] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5688] chdir("./85") = 0 [pid 5688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5688] setpgid(0, 0) = 0 [pid 5688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5688] write(3, "1000", 4) = 4 [pid 5688] close(3) = 0 [pid 5688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5688] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5688] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5688] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5689], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5689 [pid 5688] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5689 attached [pid 5689] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5689] memfd_create("syzkaller", 0) = 3 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5689] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5689] close(3) = 0 [pid 5689] mkdir("./file0", 0777) = 0 [ 114.298837][ T5689] loop4: detected capacity change from 0 to 8192 [ 114.309020][ T5689] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.322109][ T5689] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 114.331882][ T5689] REISERFS (device loop4): using ordered data mode [ 114.338922][ T5689] reiserfs: using flush barriers [ 114.344579][ T5689] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.361197][ T5689] REISERFS (device loop4): checking transaction log (loop4) [pid 5689] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5689] chdir("./file0") = 0 [pid 5689] ioctl(4, LOOP_CLR_FD) = 0 [pid 5689] close(4) = 0 [pid 5689] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... futex resumed>) = 0 [pid 5688] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5689] <... futex resumed>) = 1 [pid 5689] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5689] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5688] <... futex resumed>) = 0 [pid 5688] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5689] <... futex resumed>) = 1 [pid 5689] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5689] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] <... futex resumed>) = 0 [pid 5689] sendfile(4, 5, NULL, 140737974943952 [pid 5688] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 114.404379][ T5689] REISERFS (device loop4): Using r5 hash to sort names [ 114.411325][ T5689] REISERFS (device loop4): using 3.5.x disk format [ 114.418239][ T5689] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5688] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5688] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5688] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5688] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5691 attached [pid 5691] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5691] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5688] <... clone resumed>, parent_tid=[5691], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5691 [pid 5688] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5691] <... futex resumed>) = 0 [pid 5688] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 114.441403][ T27] audit: type=1800 audit(1671282337.843:346): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5691] open("./bus", O_RDONLY [pid 5688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5688] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5688] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5688] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5692 attached , parent_tid=[5692], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5692 [pid 5688] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] set_robust_list(0x7fe8f42af9e0, 24 [pid 5688] <... futex resumed>) = 0 [pid 5692] <... set_robust_list resumed>) = 0 [pid 5688] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] truncate("./bus", 6 [pid 5688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5688] exit_group(0) = ? [pid 5692] <... truncate resumed>) = ? [pid 5691] <... open resumed>) = ? [pid 5689] <... sendfile resumed>) = ? [pid 5692] +++ exited with 0 +++ [pid 5691] +++ exited with 0 +++ [pid 5689] +++ exited with 0 +++ [pid 5688] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5688, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./85/binderfs") = 0 [pid 5073] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 114.778294][ T27] audit: type=1804 audit(1671282338.183:347): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/85/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 114.801535][ T27] audit: type=1800 audit(1671282338.183:348): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./85/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./85") = 0 [pid 5073] mkdir("./86", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5693 ./strace-static-x86_64: Process 5693 attached [pid 5693] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5693] chdir("./86") = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3) = 0 [pid 5693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5693] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5693] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5694 attached , parent_tid=[5694], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5694 [pid 5694] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5693] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] memfd_create("syzkaller", 0) = 3 [pid 5693] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5694] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5694] close(3) = 0 [pid 5694] mkdir("./file0", 0777) = 0 [ 114.933680][ T5694] loop4: detected capacity change from 0 to 8192 [ 114.943892][ T5694] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.956875][ T5694] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 114.966119][ T5694] REISERFS (device loop4): using ordered data mode [ 114.972826][ T5694] reiserfs: using flush barriers [ 114.978568][ T5694] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.995120][ T5694] REISERFS (device loop4): checking transaction log (loop4) [pid 5694] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file0") = 0 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5694] close(4) = 0 [pid 5694] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5694] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5693] <... futex resumed>) = 0 [pid 5694] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 115.037397][ T5694] REISERFS (device loop4): Using r5 hash to sort names [ 115.044292][ T5694] REISERFS (device loop4): using 3.5.x disk format [ 115.051089][ T5694] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5693] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... open resumed>) = 4 [pid 5694] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5693] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = 0 [pid 5693] <... futex resumed>) = 1 [pid 5694] openat(-1, "/proc/self/exe", O_RDONLY [pid 5693] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... openat resumed>) = 5 [pid 5694] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5694] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... futex resumed>) = 0 [ 115.071020][ T27] audit: type=1800 audit(1671282338.473:349): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5694] sendfile(4, 5, NULL, 140737974943952 [pid 5693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5693] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5696 attached [pid 5696] set_robust_list(0x7fe8f42d09e0, 24 [pid 5693] <... clone resumed>, parent_tid=[5696], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5696 [pid 5693] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... set_robust_list resumed>) = 0 [pid 5693] <... futex resumed>) = 0 [pid 5696] open("./bus", O_RDONLY [pid 5693] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5693] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5697], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5697 [pid 5693] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5697 attached [pid 5697] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5697] truncate("./bus", 6 [pid 5693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5693] exit_group(0) = ? [pid 5697] <... truncate resumed>) = ? [pid 5696] <... open resumed>) = ? [pid 5694] <... sendfile resumed>) = ? [pid 5697] +++ exited with 0 +++ [pid 5696] +++ exited with 0 +++ [pid 5694] +++ exited with 0 +++ [pid 5693] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5693, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./86/binderfs") = 0 [pid 5073] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 115.468371][ T27] audit: type=1804 audit(1671282338.873:350): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/86/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 115.492514][ T27] audit: type=1800 audit(1671282338.873:351): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./86/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./86") = 0 [pid 5073] mkdir("./87", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5698 ./strace-static-x86_64: Process 5698 attached [pid 5698] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5698] chdir("./87") = 0 [pid 5698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5698] setpgid(0, 0) = 0 [pid 5698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5698] write(3, "1000", 4) = 4 [pid 5698] close(3) = 0 [pid 5698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5698] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5698] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5698] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5699 attached , parent_tid=[5699], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5699 [pid 5699] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5698] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... set_robust_list resumed>) = 0 [pid 5699] memfd_create("syzkaller", 0) = 3 [pid 5698] <... futex resumed>) = 0 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5698] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5699] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5699] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5699] close(3) = 0 [pid 5699] mkdir("./file0", 0777) = 0 [ 115.628283][ T5699] loop4: detected capacity change from 0 to 8192 [ 115.638906][ T5699] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 115.652128][ T5699] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 115.661516][ T5699] REISERFS (device loop4): using ordered data mode [ 115.668205][ T5699] reiserfs: using flush barriers [ 115.673908][ T5699] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.690440][ T5699] REISERFS (device loop4): checking transaction log (loop4) [pid 5699] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5699] chdir("./file0") = 0 [pid 5699] ioctl(4, LOOP_CLR_FD) = 0 [pid 5699] close(4) = 0 [pid 5699] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5698] <... futex resumed>) = 0 [pid 5699] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5698] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5699] <... open resumed>) = 4 [pid 5699] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5699] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5698] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5698] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = 0 [pid 5698] <... futex resumed>) = 1 [pid 5699] openat(-1, "/proc/self/exe", O_RDONLY [pid 5698] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5699] <... openat resumed>) = 5 [pid 5699] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5698] <... futex resumed>) = 0 [pid 5699] sendfile(4, 5, NULL, 140737974943952 [pid 5698] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.727575][ T5699] REISERFS (device loop4): Using r5 hash to sort names [ 115.734481][ T5699] REISERFS (device loop4): using 3.5.x disk format [ 115.741302][ T5699] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 115.755277][ T27] audit: type=1800 audit(1671282339.153:352): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5698] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5698] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5698] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5698] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5701], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5701 [pid 5698] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5701 attached [pid 5701] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5701] open("./bus", O_RDONLY [pid 5698] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5698] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5698] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5698] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5702], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5702 [pid 5698] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5702 attached [pid 5702] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5702] truncate("./bus", 6 [pid 5698] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5698] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5698] exit_group(0) = ? [pid 5702] <... truncate resumed>) = ? [pid 5701] <... open resumed>) = ? [pid 5699] <... sendfile resumed>) = ? [pid 5702] +++ exited with 0 +++ [pid 5701] +++ exited with 0 +++ [pid 5699] +++ exited with 0 +++ [pid 5698] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5698, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./87/binderfs") = 0 [ 116.118292][ T27] audit: type=1804 audit(1671282339.523:353): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/87/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./87/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./87") = 0 [pid 5073] mkdir("./88", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5703 ./strace-static-x86_64: Process 5703 attached [pid 5703] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5703] chdir("./88") = 0 [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5703] setpgid(0, 0) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5703] write(3, "1000", 4) = 4 [pid 5703] close(3) = 0 [pid 5703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5703] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5703] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5703] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5704], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5704 [pid 5703] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5704 attached [pid 5704] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5704] memfd_create("syzkaller", 0) = 3 [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5704] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5704] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5704] close(3) = 0 [pid 5704] mkdir("./file0", 0777) = 0 [ 116.257525][ T5704] loop4: detected capacity change from 0 to 8192 [ 116.267480][ T5704] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.281517][ T5704] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 116.291025][ T5704] REISERFS (device loop4): using ordered data mode [ 116.297600][ T5704] reiserfs: using flush barriers [ 116.303258][ T5704] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.320161][ T5704] REISERFS (device loop4): checking transaction log (loop4) [pid 5704] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5704] chdir("./file0") = 0 [pid 5704] ioctl(4, LOOP_CLR_FD) = 0 [pid 5704] close(4) = 0 [pid 5704] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5704] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] <... futex resumed>) = 0 [pid 5703] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5704] <... futex resumed>) = 0 [pid 5704] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5704] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] <... futex resumed>) = 0 [pid 5703] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] <... futex resumed>) = 1 [pid 5703] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5704] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5704] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] <... futex resumed>) = 0 [pid 5704] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] <... futex resumed>) = 0 [pid 5704] sendfile(4, 5, NULL, 140737974943952 [ 116.358704][ T5704] REISERFS (device loop4): Using r5 hash to sort names [ 116.366002][ T5704] REISERFS (device loop4): using 3.5.x disk format [ 116.372806][ T5704] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5703] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5703] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5703] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5703] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5703] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5706], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5706 [pid 5703] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5706 attached [pid 5706] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5706] open("./bus", O_RDONLY [pid 5703] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5703] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5703] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5703] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5707 attached , parent_tid=[5707], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5707 [pid 5707] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5707] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... futex resumed>) = 0 [pid 5707] truncate("./bus", 6 [pid 5703] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5703] exit_group(0) = ? [pid 5706] <... open resumed>) = ? [pid 5704] <... sendfile resumed>) = ? [pid 5707] <... truncate resumed>) = ? [pid 5706] +++ exited with 0 +++ [pid 5707] +++ exited with 0 +++ [pid 5704] +++ exited with 0 +++ [pid 5703] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5703, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./88/binderfs") = 0 [pid 5073] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./88/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./88") = 0 [pid 5073] mkdir("./89", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5708 ./strace-static-x86_64: Process 5708 attached [pid 5708] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5708] chdir("./89") = 0 [pid 5708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5708] setpgid(0, 0) = 0 [pid 5708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5708] write(3, "1000", 4) = 4 [pid 5708] close(3) = 0 [pid 5708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5708] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5708] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5708] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5709 attached [pid 5709] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5708] <... clone resumed>, parent_tid=[5709], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5709 [pid 5708] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5709] memfd_create("syzkaller", 0) = 3 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5709] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5709] close(3) = 0 [pid 5709] mkdir("./file0", 0777) = 0 [ 116.886128][ T5709] loop4: detected capacity change from 0 to 8192 [ 116.896026][ T5709] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.909093][ T5709] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 116.918387][ T5709] REISERFS (device loop4): using ordered data mode [ 116.924928][ T5709] reiserfs: using flush barriers [ 116.930977][ T5709] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.947619][ T5709] REISERFS (device loop4): checking transaction log (loop4) [pid 5709] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5709] chdir("./file0") = 0 [pid 5709] ioctl(4, LOOP_CLR_FD) = 0 [pid 5709] close(4) = 0 [pid 5709] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] <... futex resumed>) = 0 [pid 5709] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5708] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... open resumed>) = 4 [pid 5708] <... futex resumed>) = 0 [pid 5709] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5709] <... futex resumed>) = 0 [pid 5708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5709] openat(-1, "/proc/self/exe", O_RDONLY [pid 5708] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... openat resumed>) = 5 [pid 5708] <... futex resumed>) = 0 [pid 5709] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5709] <... futex resumed>) = 0 [pid 5708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5709] sendfile(4, 5, NULL, 140737974943952 [pid 5708] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 116.989434][ T5709] REISERFS (device loop4): Using r5 hash to sort names [ 116.996414][ T5709] REISERFS (device loop4): using 3.5.x disk format [ 117.003265][ T5709] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5708] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5708] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5708] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5708] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5711 attached , parent_tid=[5711], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5711 [pid 5711] set_robust_list(0x7fe8f42d09e0, 24 [pid 5708] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5711] <... set_robust_list resumed>) = 0 [pid 5708] <... futex resumed>) = 0 [pid 5711] open("./bus", O_RDONLY [pid 5708] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5708] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5708] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5708] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5712], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5712 [pid 5708] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5712 attached [pid 5708] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5712] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5712] truncate("./bus", 6 [pid 5708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5708] exit_group(0) = ? [pid 5709] <... sendfile resumed>) = ? [pid 5711] <... open resumed>) = ? [pid 5709] +++ exited with 0 +++ [pid 5712] <... truncate resumed>) = ? [pid 5711] +++ exited with 0 +++ [pid 5712] +++ exited with 0 +++ [pid 5708] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5708, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./89/binderfs") = 0 [pid 5073] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./89/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./89") = 0 [pid 5073] mkdir("./90", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5713 ./strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5713] chdir("./90") = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [pid 5713] close(3) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5713] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5713] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5713] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5714], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5714 [pid 5713] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5714 attached [pid 5714] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5714] memfd_create("syzkaller", 0) = 3 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5714] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5714] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5714] close(3) = 0 [pid 5714] mkdir("./file0", 0777) = 0 [ 117.503956][ T5714] loop4: detected capacity change from 0 to 8192 [ 117.515076][ T5714] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.528335][ T5714] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 117.537888][ T5714] REISERFS (device loop4): using ordered data mode [ 117.544443][ T5714] reiserfs: using flush barriers [ 117.550334][ T5714] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.566659][ T5714] REISERFS (device loop4): checking transaction log (loop4) [pid 5714] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5714] chdir("./file0") = 0 [pid 5714] ioctl(4, LOOP_CLR_FD) = 0 [pid 5714] close(4) = 0 [pid 5714] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5713] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5714] <... futex resumed>) = 1 [pid 5714] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5714] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5713] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5714] <... futex resumed>) = 1 [pid 5714] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5714] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5713] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5714] <... futex resumed>) = 1 [ 117.608773][ T5714] REISERFS (device loop4): Using r5 hash to sort names [ 117.615907][ T5714] REISERFS (device loop4): using 3.5.x disk format [ 117.623441][ T5714] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5714] sendfile(4, 5, NULL, 140737974943952 [pid 5713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5713] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5713] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5713] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5713] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5716], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5716 [pid 5713] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5716 attached [pid 5716] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5716] open("./bus", O_RDONLY [pid 5713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5713] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5713] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5713] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5717 attached , parent_tid=[5717], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5717 [pid 5713] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] set_robust_list(0x7fe8f42af9e0, 24 [pid 5713] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5717] <... set_robust_list resumed>) = 0 [pid 5717] truncate("./bus", 6 [pid 5713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5713] exit_group(0) = ? [pid 5716] <... open resumed>) = ? [pid 5714] <... sendfile resumed>) = ? [pid 5717] <... truncate resumed>) = ? [pid 5716] +++ exited with 0 +++ [pid 5717] +++ exited with 0 +++ [pid 5714] +++ exited with 0 +++ [pid 5713] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5713, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./90/binderfs") = 0 [pid 5073] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./90/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./90") = 0 [pid 5073] mkdir("./91", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5718 ./strace-static-x86_64: Process 5718 attached [pid 5718] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5718] chdir("./91") = 0 [pid 5718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5718] setpgid(0, 0) = 0 [pid 5718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5718] write(3, "1000", 4) = 4 [pid 5718] close(3) = 0 [pid 5718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5718] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5718] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5718] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5719 attached [pid 5719] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5719] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5718] <... clone resumed>, parent_tid=[5719], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5719 [pid 5718] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5718] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5719] memfd_create("syzkaller", 0) = 3 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5719] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5719] close(3) = 0 [pid 5719] mkdir("./file0", 0777) = 0 [ 118.147501][ T5719] loop4: detected capacity change from 0 to 8192 [ 118.157328][ T5719] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.170494][ T5719] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 118.180533][ T5719] REISERFS (device loop4): using ordered data mode [ 118.187106][ T5719] reiserfs: using flush barriers [ 118.192973][ T5719] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.209329][ T5719] REISERFS (device loop4): checking transaction log (loop4) [pid 5719] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5719] chdir("./file0") = 0 [pid 5719] ioctl(4, LOOP_CLR_FD) = 0 [pid 5719] close(4) = 0 [pid 5719] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5718] <... futex resumed>) = 0 [pid 5718] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5719] <... futex resumed>) = 0 [pid 5718] <... futex resumed>) = 1 [pid 5719] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5718] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5719] <... open resumed>) = 4 [pid 5719] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5718] <... futex resumed>) = 0 [pid 5719] openat(-1, "/proc/self/exe", O_RDONLY [pid 5718] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5719] <... openat resumed>) = 5 [pid 5718] <... futex resumed>) = 0 [pid 5719] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5719] <... futex resumed>) = 0 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5719] sendfile(4, 5, NULL, 140737974943952 [pid 5718] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.252126][ T5719] REISERFS (device loop4): Using r5 hash to sort names [ 118.259165][ T5719] REISERFS (device loop4): using 3.5.x disk format [ 118.266049][ T5719] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5718] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5718] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5718] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5718] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5721 attached , parent_tid=[5721], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5721 [pid 5718] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5718] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5721] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5721] open("./bus", O_RDONLY [pid 5718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5718] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5718] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5718] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5718] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5722], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5722 [pid 5718] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5722 attached ) = 0 [pid 5722] set_robust_list(0x7fe8f42af9e0, 24 [pid 5718] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5722] <... set_robust_list resumed>) = 0 [pid 5722] truncate("./bus", 6 [pid 5718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5718] exit_group(0) = ? [pid 5719] <... sendfile resumed>) = ? [pid 5722] <... truncate resumed>) = ? [pid 5721] <... open resumed>) = ? [pid 5719] +++ exited with 0 +++ [pid 5722] +++ exited with 0 +++ [pid 5721] +++ exited with 0 +++ [pid 5718] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5718, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./91/binderfs") = 0 [pid 5073] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./91/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./91") = 0 [pid 5073] mkdir("./92", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5723 ./strace-static-x86_64: Process 5723 attached [pid 5723] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5723] chdir("./92") = 0 [pid 5723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5723] setpgid(0, 0) = 0 [pid 5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5723] write(3, "1000", 4) = 4 [pid 5723] close(3) = 0 [pid 5723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5723] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5723] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5723] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5724], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5724 [pid 5723] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5723] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5724 attached [pid 5724] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5724] memfd_create("syzkaller", 0) = 3 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5724] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5724] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5724] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5724] close(3) = 0 [pid 5724] mkdir("./file0", 0777) = 0 [ 118.774894][ T5724] loop4: detected capacity change from 0 to 8192 [ 118.785107][ T5724] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.798210][ T5724] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 118.807402][ T5724] REISERFS (device loop4): using ordered data mode [ 118.813913][ T5724] reiserfs: using flush barriers [ 118.819723][ T5724] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.837651][ T5724] REISERFS (device loop4): checking transaction log (loop4) [pid 5724] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5724] chdir("./file0") = 0 [pid 5724] ioctl(4, LOOP_CLR_FD) = 0 [pid 5724] close(4) = 0 [pid 5724] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5723] <... futex resumed>) = 0 [pid 5724] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5723] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... open resumed>) = 4 [pid 5723] <... futex resumed>) = 0 [pid 5724] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5724] <... futex resumed>) = 0 [pid 5723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5724] openat(-1, "/proc/self/exe", O_RDONLY [pid 5723] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... openat resumed>) = 5 [pid 5723] <... futex resumed>) = 0 [pid 5724] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5724] <... futex resumed>) = 0 [pid 5723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5724] sendfile(4, 5, NULL, 140737974943952 [pid 5723] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.880560][ T5724] REISERFS (device loop4): Using r5 hash to sort names [ 118.887742][ T5724] REISERFS (device loop4): using 3.5.x disk format [ 118.894603][ T5724] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5723] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5723] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5723] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5723] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5726 attached [pid 5726] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5726] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] <... clone resumed>, parent_tid=[5726], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5726 [pid 5723] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] <... futex resumed>) = 0 [pid 5726] open("./bus", O_RDONLY [pid 5723] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5723] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5723] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5723] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5727], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5727 [pid 5723] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5727 attached ) = 0 [pid 5727] set_robust_list(0x7fe8f42af9e0, 24 [pid 5723] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5727] <... set_robust_list resumed>) = 0 [pid 5727] truncate("./bus", 6 [pid 5723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5723] exit_group(0) = ? [pid 5724] <... sendfile resumed>) = ? [pid 5726] <... open resumed>) = ? [pid 5726] +++ exited with 0 +++ [pid 5727] <... truncate resumed>) = ? [pid 5727] +++ exited with 0 +++ [pid 5724] +++ exited with 0 +++ [pid 5723] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5723, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./92/binderfs") = 0 [ 119.268640][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 119.268652][ T27] audit: type=1804 audit(1671282342.673:368): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/92/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 119.299210][ T27] audit: type=1800 audit(1671282342.673:369): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./92/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./92") = 0 [pid 5073] mkdir("./93", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5728 ./strace-static-x86_64: Process 5728 attached [pid 5728] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5728] chdir("./93") = 0 [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5728] setpgid(0, 0) = 0 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5728] write(3, "1000", 4) = 4 [pid 5728] close(3) = 0 [pid 5728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5728] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5728] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5728] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5729], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5729 [pid 5728] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5729 attached [pid 5729] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5729] memfd_create("syzkaller", 0) = 3 [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5729] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5729] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5729] close(3) = 0 [pid 5729] mkdir("./file0", 0777) = 0 [ 119.415058][ T5729] loop4: detected capacity change from 0 to 8192 [ 119.424808][ T5729] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.438235][ T5729] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 119.448102][ T5729] REISERFS (device loop4): using ordered data mode [ 119.454663][ T5729] reiserfs: using flush barriers [ 119.460621][ T5729] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.476930][ T5729] REISERFS (device loop4): checking transaction log (loop4) [pid 5729] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5729] chdir("./file0") = 0 [pid 5729] ioctl(4, LOOP_CLR_FD) = 0 [pid 5729] close(4) = 0 [pid 5729] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5729] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5728] <... futex resumed>) = 0 [pid 5729] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5728] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5729] <... open resumed>) = 4 [pid 5729] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [ 119.519809][ T5729] REISERFS (device loop4): Using r5 hash to sort names [ 119.526765][ T5729] REISERFS (device loop4): using 3.5.x disk format [ 119.533568][ T5729] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5729] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5728] <... futex resumed>) = 0 [pid 5729] openat(-1, "/proc/self/exe", O_RDONLY [pid 5728] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5729] <... openat resumed>) = 5 [pid 5729] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5728] <... futex resumed>) = 0 [pid 5729] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5728] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] sendfile(4, 5, NULL, 140737974943952 [pid 5728] <... futex resumed>) = 0 [ 119.552057][ T27] audit: type=1800 audit(1671282342.953:370): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5728] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5728] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5728] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5728] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5731 attached , parent_tid=[5731], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5731 [pid 5731] set_robust_list(0x7fe8f42d09e0, 24 [pid 5728] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] <... set_robust_list resumed>) = 0 [pid 5731] open("./bus", O_RDONLY [pid 5728] <... futex resumed>) = 0 [pid 5728] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5728] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5728] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5728] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5732], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5732 ./strace-static-x86_64: Process 5732 attached [pid 5728] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5732] truncate("./bus", 6 [pid 5728] <... futex resumed>) = 0 [pid 5728] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5728] exit_group(0) = ? [pid 5729] <... sendfile resumed>) = ? [pid 5732] <... truncate resumed>) = ? [pid 5731] <... open resumed>) = ? [pid 5729] +++ exited with 0 +++ [pid 5732] +++ exited with 0 +++ [pid 5731] +++ exited with 0 +++ [pid 5728] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5728, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./93/binderfs") = 0 [pid 5073] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 119.928582][ T27] audit: type=1804 audit(1671282343.333:371): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/93/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 119.952106][ T27] audit: type=1800 audit(1671282343.333:372): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./93/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./93") = 0 [pid 5073] mkdir("./94", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5733 attached [pid 5733] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5733 [pid 5733] <... set_robust_list resumed>) = 0 [pid 5733] chdir("./94") = 0 [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5733] setpgid(0, 0) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5733] write(3, "1000", 4) = 4 [pid 5733] close(3) = 0 [pid 5733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5733] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5733] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5733] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5734], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5734 ./strace-static-x86_64: Process 5734 attached [pid 5734] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5733] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] <... set_robust_list resumed>) = 0 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5734] memfd_create("syzkaller", 0) = 3 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5734] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5734] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5734] close(3) = 0 [pid 5734] mkdir("./file0", 0777) = 0 [ 120.084155][ T5734] loop4: detected capacity change from 0 to 8192 [ 120.093932][ T5734] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.107051][ T5734] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 120.116294][ T5734] REISERFS (device loop4): using ordered data mode [ 120.122815][ T5734] reiserfs: using flush barriers [ 120.128756][ T5734] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.145459][ T5734] REISERFS (device loop4): checking transaction log (loop4) [pid 5734] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5734] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5734] chdir("./file0") = 0 [pid 5734] ioctl(4, LOOP_CLR_FD) = 0 [pid 5734] close(4) = 0 [pid 5734] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 120.189292][ T5734] REISERFS (device loop4): Using r5 hash to sort names [ 120.196315][ T5734] REISERFS (device loop4): using 3.5.x disk format [ 120.203006][ T5734] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5734] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5734] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 1 [pid 5734] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5734] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5734] <... futex resumed>) = 1 [pid 5733] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] sendfile(4, 5, NULL, 140737974943952 [pid 5733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5733] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5733] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5733] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5736 attached [pid 5736] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 120.227547][ T27] audit: type=1800 audit(1671282343.633:373): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5736] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] <... clone resumed>, parent_tid=[5736], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5736 [pid 5733] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5736] open("./bus", O_RDONLY [pid 5733] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5733] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5733] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5733] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5737 attached , parent_tid=[5737], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5737 [pid 5737] set_robust_list(0x7fe8f42af9e0, 24 [pid 5733] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5737] <... set_robust_list resumed>) = 0 [pid 5733] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] truncate("./bus", 6 [pid 5733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5733] exit_group(0) = ? [pid 5734] <... sendfile resumed>) = ? [pid 5736] <... open resumed>) = ? [pid 5734] +++ exited with 0 +++ [pid 5737] <... truncate resumed>) = ? [pid 5737] +++ exited with 0 +++ [pid 5736] +++ exited with 0 +++ [pid 5733] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5733, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./94/binderfs") = 0 [pid 5073] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 120.608966][ T27] audit: type=1804 audit(1671282344.013:374): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/94/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 120.632595][ T27] audit: type=1800 audit(1671282344.013:375): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./94/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./94") = 0 [pid 5073] mkdir("./95", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5738 ./strace-static-x86_64: Process 5738 attached [pid 5738] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5738] chdir("./95") = 0 [pid 5738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5738] setpgid(0, 0) = 0 [pid 5738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5738] write(3, "1000", 4) = 4 [pid 5738] close(3) = 0 [pid 5738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5738] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5738] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5738] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5739 attached , parent_tid=[5739], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5739 [pid 5738] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5739] memfd_create("syzkaller", 0) = 3 [pid 5739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5739] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5739] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5739] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5739] close(3) = 0 [pid 5739] mkdir("./file0", 0777) = 0 [ 120.764274][ T5739] loop4: detected capacity change from 0 to 8192 [ 120.775664][ T5739] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.788747][ T5739] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 120.798108][ T5739] REISERFS (device loop4): using ordered data mode [ 120.805000][ T5739] reiserfs: using flush barriers [ 120.811247][ T5739] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.827604][ T5739] REISERFS (device loop4): checking transaction log (loop4) [pid 5739] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5739] chdir("./file0") = 0 [pid 5739] ioctl(4, LOOP_CLR_FD) = 0 [pid 5739] close(4) = 0 [pid 5739] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5739] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5738] <... futex resumed>) = 0 [pid 5738] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... futex resumed>) = 0 [pid 5738] <... futex resumed>) = 1 [pid 5739] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5738] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] <... open resumed>) = 4 [pid 5739] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5738] <... futex resumed>) = 0 [pid 5739] openat(-1, "/proc/self/exe", O_RDONLY [pid 5738] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... openat resumed>) = 5 [pid 5738] <... futex resumed>) = 0 [pid 5739] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] <... futex resumed>) = 0 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5739] sendfile(4, 5, NULL, 140737974943952 [pid 5738] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.864958][ T5739] REISERFS (device loop4): Using r5 hash to sort names [ 120.872286][ T5739] REISERFS (device loop4): using 3.5.x disk format [ 120.879124][ T5739] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5738] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5738] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5738] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5738] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5741 attached , parent_tid=[5741], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5741 [pid 5738] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.896997][ T27] audit: type=1800 audit(1671282344.303:376): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5738] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5741] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5741] open("./bus", O_RDONLY [pid 5738] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5738] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5738] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5738] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5742 attached , parent_tid=[5742], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5742 [pid 5742] set_robust_list(0x7fe8f42af9e0, 24 [pid 5738] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... set_robust_list resumed>) = 0 [pid 5738] <... futex resumed>) = 0 [pid 5742] truncate("./bus", 6 [pid 5738] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5738] exit_group(0) = ? [pid 5741] <... open resumed>) = ? [pid 5739] <... sendfile resumed>) = ? [pid 5741] +++ exited with 0 +++ [pid 5742] <... truncate resumed>) = ? [pid 5742] +++ exited with 0 +++ [pid 5739] +++ exited with 0 +++ [pid 5738] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5738, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./95/binderfs") = 0 [ 121.288169][ T27] audit: type=1804 audit(1671282344.693:377): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/95/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./95/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./95") = 0 [pid 5073] mkdir("./96", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5743 ./strace-static-x86_64: Process 5743 attached [pid 5743] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5743] chdir("./96") = 0 [pid 5743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5743] setpgid(0, 0) = 0 [pid 5743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5743] write(3, "1000", 4) = 4 [pid 5743] close(3) = 0 [pid 5743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5743] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5743] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5743] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5744], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5744 [pid 5743] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5743] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5744 attached [pid 5744] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5744] memfd_create("syzkaller", 0) = 3 [pid 5744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5744] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5744] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5744] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5744] close(3) = 0 [pid 5744] mkdir("./file0", 0777) = 0 [ 121.438442][ T5744] loop4: detected capacity change from 0 to 8192 [ 121.449230][ T5744] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 121.462685][ T5744] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 121.472428][ T5744] REISERFS (device loop4): using ordered data mode [ 121.479052][ T5744] reiserfs: using flush barriers [ 121.484904][ T5744] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.501558][ T5744] REISERFS (device loop4): checking transaction log (loop4) [pid 5744] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5744] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5744] chdir("./file0") = 0 [pid 5744] ioctl(4, LOOP_CLR_FD) = 0 [pid 5744] close(4) = 0 [pid 5744] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5743] <... futex resumed>) = 0 [pid 5744] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5743] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5743] <... futex resumed>) = 0 [pid 5744] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5743] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5744] <... open resumed>) = 4 [pid 5744] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5743] <... futex resumed>) = 0 [pid 5744] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5743] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5743] <... futex resumed>) = 0 [pid 5744] openat(-1, "/proc/self/exe", O_RDONLY [pid 5743] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5744] <... openat resumed>) = 5 [pid 5744] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5743] <... futex resumed>) = 0 [pid 5744] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5743] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5743] <... futex resumed>) = 0 [pid 5744] sendfile(4, 5, NULL, 140737974943952 [ 121.543639][ T5744] REISERFS (device loop4): Using r5 hash to sort names [ 121.550802][ T5744] REISERFS (device loop4): using 3.5.x disk format [ 121.557765][ T5744] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5743] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5743] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5743] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5743] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5746 attached [pid 5746] set_robust_list(0x7fe8f42d09e0, 24 [pid 5743] <... clone resumed>, parent_tid=[5746], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5746 [pid 5743] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5743] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5746] <... set_robust_list resumed>) = 0 [pid 5746] open("./bus", O_RDONLY [pid 5743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5743] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5743] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5743] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5743] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5747 attached [pid 5747] set_robust_list(0x7fe8f42af9e0, 24 [pid 5743] <... clone resumed>, parent_tid=[5747], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5747 [pid 5747] <... set_robust_list resumed>) = 0 [pid 5743] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5747] truncate("./bus", 6 [pid 5743] <... futex resumed>) = 0 [pid 5743] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5743] exit_group(0) = ? [pid 5744] <... sendfile resumed>) = ? [pid 5746] <... open resumed>) = ? [pid 5744] +++ exited with 0 +++ [pid 5747] <... truncate resumed>) = ? [pid 5746] +++ exited with 0 +++ [pid 5747] +++ exited with 0 +++ [pid 5743] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5743, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./96/binderfs") = 0 [pid 5073] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./96/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./96") = 0 [pid 5073] mkdir("./97", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5748 ./strace-static-x86_64: Process 5748 attached [pid 5748] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5748] chdir("./97") = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5748] setpgid(0, 0) = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5748] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5748] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5749 attached , parent_tid=[5749], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5749 [pid 5748] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5749] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5749] memfd_create("syzkaller", 0) = 3 [pid 5749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5749] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5749] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5749] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5749] close(3) = 0 [pid 5749] mkdir("./file0", 0777) = 0 [ 122.065224][ T5749] loop4: detected capacity change from 0 to 8192 [ 122.075121][ T5749] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.088172][ T5749] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 122.097607][ T5749] REISERFS (device loop4): using ordered data mode [ 122.104147][ T5749] reiserfs: using flush barriers [ 122.110216][ T5749] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.126662][ T5749] REISERFS (device loop4): checking transaction log (loop4) [pid 5749] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5749] chdir("./file0") = 0 [pid 5749] ioctl(4, LOOP_CLR_FD) = 0 [pid 5749] close(4) = 0 [pid 5749] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5749] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5748] <... futex resumed>) = 0 [pid 5748] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5748] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... futex resumed>) = 0 [pid 5749] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5749] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] <... futex resumed>) = 0 [pid 5748] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... futex resumed>) = 1 [pid 5749] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5749] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5749] sendfile(4, 5, NULL, 140737974943952 [pid 5748] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.163493][ T5749] REISERFS (device loop4): Using r5 hash to sort names [ 122.170566][ T5749] REISERFS (device loop4): using 3.5.x disk format [ 122.177546][ T5749] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5748] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5748] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5748] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5748] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5751 attached , parent_tid=[5751], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5751 [pid 5751] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5751] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5748] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5748] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] <... futex resumed>) = 0 [pid 5751] open("./bus", O_RDONLY [pid 5748] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5748] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5748] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5748] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5752], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5752 [pid 5748] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5752 attached [pid 5752] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5752] truncate("./bus", 6 [pid 5748] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5748] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5748] exit_group(0) = ? [pid 5749] <... sendfile resumed>) = ? [pid 5751] <... open resumed>) = ? [pid 5749] +++ exited with 0 +++ [pid 5751] +++ exited with 0 +++ [pid 5752] <... truncate resumed>) = ? [pid 5752] +++ exited with 0 +++ [pid 5748] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5748, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./97/binderfs") = 0 [pid 5073] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./97/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./97") = 0 [pid 5073] mkdir("./98", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5753 ./strace-static-x86_64: Process 5753 attached [pid 5753] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5753] chdir("./98") = 0 [pid 5753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5753] setpgid(0, 0) = 0 [pid 5753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5753] write(3, "1000", 4) = 4 [pid 5753] close(3) = 0 [pid 5753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5753] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5753] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5753] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5754 attached , parent_tid=[5754], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5754 [pid 5753] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5754] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5754] memfd_create("syzkaller", 0) = 3 [pid 5754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5754] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5754] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5754] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5754] close(3) = 0 [pid 5754] mkdir("./file0", 0777) = 0 [ 122.678344][ T5754] loop4: detected capacity change from 0 to 8192 [ 122.688181][ T5754] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.701178][ T5754] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 122.710492][ T5754] REISERFS (device loop4): using ordered data mode [ 122.717123][ T5754] reiserfs: using flush barriers [ 122.722872][ T5754] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.739368][ T5754] REISERFS (device loop4): checking transaction log (loop4) [pid 5754] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5754] chdir("./file0") = 0 [pid 5754] ioctl(4, LOOP_CLR_FD) = 0 [pid 5754] close(4) = 0 [pid 5754] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5754] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5753] <... futex resumed>) = 0 [pid 5753] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5753] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5754] <... futex resumed>) = 0 [pid 5754] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5754] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] <... futex resumed>) = 0 [pid 5753] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5754] <... futex resumed>) = 1 [pid 5754] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5754] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5753] <... futex resumed>) = 0 [pid 5754] sendfile(4, 5, NULL, 140737974943952 [pid 5753] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.776750][ T5754] REISERFS (device loop4): Using r5 hash to sort names [ 122.783748][ T5754] REISERFS (device loop4): using 3.5.x disk format [ 122.790590][ T5754] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5753] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5753] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5753] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5753] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5753] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5756], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5756 [pid 5753] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5756 attached [pid 5756] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5756] open("./bus", O_RDONLY [pid 5753] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5753] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5753] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5753] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5757 attached , parent_tid=[5757], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5757 [pid 5757] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5757] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5753] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5753] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5757] <... futex resumed>) = 0 [pid 5757] truncate("./bus", 6 [pid 5753] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5753] exit_group(0) = ? [pid 5754] <... sendfile resumed>) = ? [pid 5757] <... truncate resumed>) = ? [pid 5756] <... open resumed>) = ? [pid 5754] +++ exited with 0 +++ [pid 5757] +++ exited with 0 +++ [pid 5756] +++ exited with 0 +++ [pid 5753] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5753, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./98/binderfs") = 0 [pid 5073] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./98/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./98") = 0 [pid 5073] mkdir("./99", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5758 ./strace-static-x86_64: Process 5758 attached [pid 5758] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5758] chdir("./99") = 0 [pid 5758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5758] setpgid(0, 0) = 0 [pid 5758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5758] write(3, "1000", 4) = 4 [pid 5758] close(3) = 0 [pid 5758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5758] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5758] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5758] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5759 attached , parent_tid=[5759], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5759 [pid 5759] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5758] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] <... set_robust_list resumed>) = 0 [pid 5758] <... futex resumed>) = 0 [pid 5758] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5759] memfd_create("syzkaller", 0) = 3 [pid 5759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5759] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5759] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5759] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5759] close(3) = 0 [pid 5759] mkdir("./file0", 0777) = 0 [ 123.330115][ T5759] loop4: detected capacity change from 0 to 8192 [ 123.339815][ T5759] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.352875][ T5759] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 123.362490][ T5759] REISERFS (device loop4): using ordered data mode [ 123.369109][ T5759] reiserfs: using flush barriers [ 123.375001][ T5759] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.391710][ T5759] REISERFS (device loop4): checking transaction log (loop4) [pid 5759] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5759] chdir("./file0") = 0 [pid 5759] ioctl(4, LOOP_CLR_FD) = 0 [pid 5759] close(4) = 0 [pid 5759] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5759] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] <... futex resumed>) = 0 [pid 5758] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5759] <... futex resumed>) = 0 [pid 5759] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5759] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... futex resumed>) = 0 [pid 5758] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5758] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5759] <... futex resumed>) = 1 [pid 5759] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5759] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5759] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] <... futex resumed>) = 0 [pid 5758] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5759] <... futex resumed>) = 0 [ 123.429924][ T5759] REISERFS (device loop4): Using r5 hash to sort names [ 123.436982][ T5759] REISERFS (device loop4): using 3.5.x disk format [ 123.443727][ T5759] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5759] sendfile(4, 5, NULL, 140737974943952 [pid 5758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5758] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5758] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5758] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5761 attached , parent_tid=[5761], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5761 [pid 5758] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5761] set_robust_list(0x7fe8f42d09e0, 24 [pid 5758] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5761] <... set_robust_list resumed>) = 0 [pid 5761] open("./bus", O_RDONLY [pid 5758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5758] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5758] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5758] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5762 attached , parent_tid=[5762], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5762 [pid 5762] set_robust_list(0x7fe8f42af9e0, 24 [pid 5758] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5762] <... set_robust_list resumed>) = 0 [pid 5758] <... futex resumed>) = 0 [pid 5758] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5762] truncate("./bus", 6 [pid 5758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5758] exit_group(0) = ? [pid 5759] <... sendfile resumed>) = ? [pid 5759] +++ exited with 0 +++ [pid 5761] <... open resumed>) = ? [pid 5762] <... truncate resumed>) = ? [pid 5761] +++ exited with 0 +++ [pid 5762] +++ exited with 0 +++ [pid 5758] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5758, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./99/binderfs") = 0 [pid 5073] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./99/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./99") = 0 [pid 5073] mkdir("./100", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5763 ./strace-static-x86_64: Process 5763 attached [pid 5763] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5763] chdir("./100") = 0 [pid 5763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5763] setpgid(0, 0) = 0 [pid 5763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5763] write(3, "1000", 4) = 4 [pid 5763] close(3) = 0 [pid 5763] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5763] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5763] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5763] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5764], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5764 ./strace-static-x86_64: Process 5764 attached [pid 5764] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5763] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... set_robust_list resumed>) = 0 [pid 5763] <... futex resumed>) = 0 [pid 5764] memfd_create("syzkaller", 0) = 3 [pid 5764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5763] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5764] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5764] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5764] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5764] close(3) = 0 [pid 5764] mkdir("./file0", 0777) = 0 [ 123.964526][ T5764] loop4: detected capacity change from 0 to 8192 [ 123.974275][ T5764] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.987330][ T5764] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 123.996561][ T5764] REISERFS (device loop4): using ordered data mode [ 124.003066][ T5764] reiserfs: using flush barriers [ 124.009094][ T5764] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.025490][ T5764] REISERFS (device loop4): checking transaction log (loop4) [pid 5764] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5764] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5764] chdir("./file0") = 0 [pid 5764] ioctl(4, LOOP_CLR_FD) = 0 [pid 5764] close(4) = 0 [pid 5764] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5764] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] <... futex resumed>) = 0 [pid 5763] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5763] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5764] <... futex resumed>) = 0 [pid 5764] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5764] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5763] <... futex resumed>) = 0 [pid 5763] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5764] <... futex resumed>) = 1 [pid 5764] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5764] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5764] sendfile(4, 5, NULL, 140737974943952 [pid 5763] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.064361][ T5764] REISERFS (device loop4): Using r5 hash to sort names [ 124.071510][ T5764] REISERFS (device loop4): using 3.5.x disk format [ 124.078337][ T5764] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5763] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5763] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5763] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5763] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5763] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5766], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5766 [pid 5763] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5766 attached [pid 5766] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5766] open("./bus", O_RDONLY [pid 5763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5763] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5763] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5763] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5763] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5767 attached , parent_tid=[5767], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5767 [pid 5767] set_robust_list(0x7fe8f42af9e0, 24 [pid 5763] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] <... set_robust_list resumed>) = 0 [pid 5763] <... futex resumed>) = 0 [pid 5767] truncate("./bus", 6 [pid 5763] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5763] exit_group(0) = ? [pid 5764] <... sendfile resumed>) = ? [pid 5767] <... truncate resumed>) = ? [pid 5766] <... open resumed>) = ? [pid 5764] +++ exited with 0 +++ [pid 5767] +++ exited with 0 +++ [pid 5766] +++ exited with 0 +++ [pid 5763] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5763, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./100/binderfs") = 0 [ 124.468169][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 124.468184][ T27] audit: type=1804 audit(1671282347.873:392): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/100/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 124.498207][ T27] audit: type=1800 audit(1671282347.873:393): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./100/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./100") = 0 [pid 5073] mkdir("./101", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5768 ./strace-static-x86_64: Process 5768 attached [pid 5768] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5768] chdir("./101") = 0 [pid 5768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5768] setpgid(0, 0) = 0 [pid 5768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5768] write(3, "1000", 4) = 4 [pid 5768] close(3) = 0 [pid 5768] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5768] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5768] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5768] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5769], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5769 [pid 5768] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5769 attached [pid 5769] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5769] memfd_create("syzkaller", 0) = 3 [pid 5769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5769] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5769] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5769] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5769] close(3) = 0 [pid 5769] mkdir("./file0", 0777) = 0 [ 124.645461][ T5769] loop4: detected capacity change from 0 to 8192 [ 124.655021][ T5769] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.668449][ T5769] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 124.677885][ T5769] REISERFS (device loop4): using ordered data mode [ 124.684423][ T5769] reiserfs: using flush barriers [ 124.690544][ T5769] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.706926][ T5769] REISERFS (device loop4): checking transaction log (loop4) [pid 5769] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5769] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5769] chdir("./file0") = 0 [pid 5769] ioctl(4, LOOP_CLR_FD) = 0 [pid 5769] close(4) = 0 [pid 5769] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5769] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5768] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] <... open resumed>) = 4 [pid 5768] <... futex resumed>) = 0 [pid 5769] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5769] <... futex resumed>) = 0 [pid 5768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5769] openat(-1, "/proc/self/exe", O_RDONLY [pid 5768] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] <... openat resumed>) = 5 [pid 5768] <... futex resumed>) = 0 [pid 5769] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5769] <... futex resumed>) = 0 [pid 5768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5769] sendfile(4, 5, NULL, 140737974943952 [pid 5768] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.750683][ T5769] REISERFS (device loop4): Using r5 hash to sort names [ 124.758174][ T5769] REISERFS (device loop4): using 3.5.x disk format [ 124.764984][ T5769] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 124.777921][ T27] audit: type=1800 audit(1671282348.183:394): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5768] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5768] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5768] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5768] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5771 attached [pid 5771] set_robust_list(0x7fe8f42d09e0, 24 [pid 5768] <... clone resumed>, parent_tid=[5771], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5771 [pid 5771] <... set_robust_list resumed>) = 0 [pid 5768] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] open("./bus", O_RDONLY [pid 5768] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5768] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5768] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5768] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5772], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5772 [pid 5768] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5772 attached [pid 5772] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5772] truncate("./bus", 6 [pid 5768] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5768] exit_group(0) = ? [pid 5769] <... sendfile resumed>) = ? [pid 5771] <... open resumed>) = ? [pid 5769] +++ exited with 0 +++ [pid 5771] +++ exited with 0 +++ [pid 5772] <... truncate resumed>) = ? [pid 5772] +++ exited with 0 +++ [pid 5768] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5768, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./101/binderfs") = 0 [pid 5073] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [ 125.178537][ T27] audit: type=1804 audit(1671282348.583:395): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/101/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 125.201758][ T27] audit: type=1800 audit(1671282348.583:396): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./101/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./101") = 0 [pid 5073] mkdir("./102", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5773 attached [pid 5773] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5773] chdir("./102") = 0 [pid 5773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5773] setpgid(0, 0) = 0 [pid 5773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5773] write(3, "1000", 4) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5773 [pid 5773] close(3) = 0 [pid 5773] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5773] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5773] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5773] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5774], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5774 [pid 5773] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5774 attached [pid 5773] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5774] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5774] memfd_create("syzkaller", 0) = 3 [pid 5774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5774] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5774] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5774] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5774] close(3) = 0 [pid 5774] mkdir("./file0", 0777) = 0 [ 125.332972][ T5774] loop4: detected capacity change from 0 to 8192 [ 125.343154][ T5774] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.356397][ T5774] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 125.365654][ T5774] REISERFS (device loop4): using ordered data mode [ 125.372153][ T5774] reiserfs: using flush barriers [ 125.378132][ T5774] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.394495][ T5774] REISERFS (device loop4): checking transaction log (loop4) [pid 5774] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5774] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5774] chdir("./file0") = 0 [pid 5774] ioctl(4, LOOP_CLR_FD) = 0 [pid 5774] close(4) = 0 [pid 5774] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5774] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5773] <... futex resumed>) = 0 [pid 5773] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5773] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 0 [pid 5774] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5774] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5773] <... futex resumed>) = 0 [pid 5774] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5773] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5773] <... futex resumed>) = 0 [pid 5774] openat(-1, "/proc/self/exe", O_RDONLY [pid 5773] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... openat resumed>) = 5 [pid 5774] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5773] <... futex resumed>) = 0 [pid 5774] sendfile(4, 5, NULL, 140737974943952 [pid 5773] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 125.436854][ T5774] REISERFS (device loop4): Using r5 hash to sort names [ 125.443865][ T5774] REISERFS (device loop4): using 3.5.x disk format [ 125.450875][ T5774] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 125.470817][ T27] audit: type=1800 audit(1671282348.873:397): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5773] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5773] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5773] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5773] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5776], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5776 [pid 5773] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5776 attached [pid 5776] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5776] open("./bus", O_RDONLY [pid 5773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5773] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5773] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5773] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5773] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5777], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5777 [pid 5773] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5777 attached [pid 5777] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5777] truncate("./bus", 6 [pid 5773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5773] exit_group(0) = ? [pid 5777] <... truncate resumed>) = ? [pid 5776] <... open resumed>) = ? [pid 5774] <... sendfile resumed>) = ? [pid 5777] +++ exited with 0 +++ [pid 5776] +++ exited with 0 +++ [pid 5774] +++ exited with 0 +++ [pid 5773] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5773, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./102/binderfs") = 0 [pid 5073] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 125.827980][ T27] audit: type=1804 audit(1671282349.233:398): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/102/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 125.851180][ T27] audit: type=1800 audit(1671282349.233:399): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./102/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./102") = 0 [pid 5073] mkdir("./103", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5778 ./strace-static-x86_64: Process 5778 attached [pid 5778] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5778] chdir("./103") = 0 [pid 5778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5778] setpgid(0, 0) = 0 [pid 5778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5778] write(3, "1000", 4) = 4 [pid 5778] close(3) = 0 [pid 5778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5778] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5778] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5778] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5779 attached , parent_tid=[5779], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5779 [pid 5779] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5779] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5778] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5778] <... futex resumed>) = 0 [pid 5778] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5779] memfd_create("syzkaller", 0) = 3 [pid 5779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5779] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5779] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5779] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5779] close(3) = 0 [pid 5779] mkdir("./file0", 0777) = 0 [ 125.991539][ T5779] loop4: detected capacity change from 0 to 8192 [ 126.002230][ T5779] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.015760][ T5779] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 126.024962][ T5779] REISERFS (device loop4): using ordered data mode [ 126.031542][ T5779] reiserfs: using flush barriers [ 126.037615][ T5779] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.054163][ T5779] REISERFS (device loop4): checking transaction log (loop4) [pid 5779] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5779] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5779] chdir("./file0") = 0 [pid 5779] ioctl(4, LOOP_CLR_FD) = 0 [pid 5779] close(4) = 0 [pid 5779] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] <... futex resumed>) = 0 [pid 5779] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5778] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5778] <... futex resumed>) = 0 [pid 5779] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5778] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5779] <... open resumed>) = 4 [pid 5779] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] <... futex resumed>) = 0 [pid 5779] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5778] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] <... futex resumed>) = 0 [pid 5778] <... futex resumed>) = 1 [pid 5779] openat(-1, "/proc/self/exe", O_RDONLY [pid 5778] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5779] <... openat resumed>) = 5 [pid 5779] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] <... futex resumed>) = 0 [pid 5779] sendfile(4, 5, NULL, 140737974943952 [ 126.096374][ T5779] REISERFS (device loop4): Using r5 hash to sort names [ 126.103532][ T5779] REISERFS (device loop4): using 3.5.x disk format [ 126.110428][ T5779] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5778] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5778] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5778] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5778] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5781 attached , parent_tid=[5781], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5781 [pid 5781] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5781] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5778] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5781] <... futex resumed>) = 0 [ 126.135538][ T27] audit: type=1800 audit(1671282349.533:400): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5781] open("./bus", O_RDONLY [pid 5778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5778] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5778] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5778] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5778] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5782 attached [pid 5782] set_robust_list(0x7fe8f42af9e0, 24 [pid 5778] <... clone resumed>, parent_tid=[5782], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5782 [pid 5782] <... set_robust_list resumed>) = 0 [pid 5778] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5782] truncate("./bus", 6 [pid 5778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5778] exit_group(0) = ? [pid 5779] <... sendfile resumed>) = ? [pid 5782] <... truncate resumed>) = ? [pid 5781] <... open resumed>) = ? [pid 5779] +++ exited with 0 +++ [pid 5781] +++ exited with 0 +++ [pid 5782] +++ exited with 0 +++ [pid 5778] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5778, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./103/binderfs") = 0 [ 126.498437][ T27] audit: type=1804 audit(1671282349.903:401): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/103/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./103/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./103") = 0 [pid 5073] mkdir("./104", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5783 ./strace-static-x86_64: Process 5783 attached [pid 5783] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5783] chdir("./104") = 0 [pid 5783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5783] setpgid(0, 0) = 0 [pid 5783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5783] write(3, "1000", 4) = 4 [pid 5783] close(3) = 0 [pid 5783] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5783] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5783] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5783] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5784], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5784 [pid 5783] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5784 attached [pid 5784] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5784] memfd_create("syzkaller", 0) = 3 [pid 5784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5784] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5784] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5784] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5784] close(3) = 0 [pid 5784] mkdir("./file0", 0777) = 0 [ 126.649238][ T5784] loop4: detected capacity change from 0 to 8192 [ 126.659297][ T5784] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.672530][ T5784] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 126.681989][ T5784] REISERFS (device loop4): using ordered data mode [ 126.688550][ T5784] reiserfs: using flush barriers [ 126.694365][ T5784] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.710762][ T5784] REISERFS (device loop4): checking transaction log (loop4) [pid 5784] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5784] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5784] chdir("./file0") = 0 [pid 5784] ioctl(4, LOOP_CLR_FD) = 0 [pid 5784] close(4) = 0 [pid 5784] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5783] <... futex resumed>) = 0 [pid 5783] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... futex resumed>) = 1 [pid 5784] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5784] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5783] <... futex resumed>) = 0 [pid 5783] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... futex resumed>) = 1 [pid 5784] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5784] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5783] <... futex resumed>) = 0 [pid 5783] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... futex resumed>) = 1 [ 126.749390][ T5784] REISERFS (device loop4): Using r5 hash to sort names [ 126.756575][ T5784] REISERFS (device loop4): using 3.5.x disk format [ 126.763269][ T5784] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5784] sendfile(4, 5, NULL, 140737974943952 [pid 5783] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5783] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5783] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5783] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5783] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5786], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5786 ./strace-static-x86_64: Process 5786 attached [pid 5783] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5786] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5786] open("./bus", O_RDONLY [pid 5783] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5783] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5783] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5783] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5787], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5787 [pid 5783] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5783] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5787 attached [pid 5787] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5787] truncate("./bus", 6 [pid 5783] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5783] exit_group(0) = ? [pid 5784] <... sendfile resumed>) = ? [pid 5787] <... truncate resumed>) = ? [pid 5786] <... open resumed>) = ? [pid 5784] +++ exited with 0 +++ [pid 5787] +++ exited with 0 +++ [pid 5786] +++ exited with 0 +++ [pid 5783] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5783, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./104/binderfs") = 0 [pid 5073] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./104/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./104") = 0 [pid 5073] mkdir("./105", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5788 ./strace-static-x86_64: Process 5788 attached [pid 5788] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5788] chdir("./105") = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5788] setpgid(0, 0) = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5788] write(3, "1000", 4) = 4 [pid 5788] close(3) = 0 [pid 5788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5788] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5788] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5789 attached , parent_tid=[5789], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5789 [pid 5788] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5788] <... futex resumed>) = 0 [pid 5789] <... set_robust_list resumed>) = 0 [pid 5788] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5789] memfd_create("syzkaller", 0) = 3 [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5789] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5789] close(3) = 0 [pid 5789] mkdir("./file0", 0777) = 0 [ 127.258250][ T5789] loop4: detected capacity change from 0 to 8192 [ 127.268939][ T5789] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.281942][ T5789] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 127.291199][ T5789] REISERFS (device loop4): using ordered data mode [ 127.297946][ T5789] reiserfs: using flush barriers [ 127.304134][ T5789] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.320727][ T5789] REISERFS (device loop4): checking transaction log (loop4) [pid 5789] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5789] chdir("./file0") = 0 [pid 5789] ioctl(4, LOOP_CLR_FD) = 0 [pid 5789] close(4) = 0 [pid 5789] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = 0 [pid 5788] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] <... futex resumed>) = 0 [pid 5788] <... futex resumed>) = 1 [pid 5789] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5788] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... open resumed>) = 4 [pid 5789] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5789] openat(-1, "/proc/self/exe", O_RDONLY [pid 5788] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] <... openat resumed>) = 5 [pid 5788] <... futex resumed>) = 0 [pid 5789] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... futex resumed>) = 0 [pid 5788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] sendfile(4, 5, NULL, 140737974943952 [pid 5788] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 127.362103][ T5789] REISERFS (device loop4): Using r5 hash to sort names [ 127.369170][ T5789] REISERFS (device loop4): using 3.5.x disk format [ 127.376070][ T5789] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5788] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5788] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5788] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5791 attached , parent_tid=[5791], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5791 [pid 5788] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5791] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5788] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5791] open("./bus", O_RDONLY [pid 5788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5788] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5788] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5792], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5792 [pid 5788] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5792 attached [pid 5792] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5792] truncate("./bus", 6 [pid 5788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5788] exit_group(0) = ? [pid 5789] <... sendfile resumed>) = ? [pid 5791] <... open resumed>) = ? [pid 5792] <... truncate resumed>) = ? [pid 5791] +++ exited with 0 +++ [pid 5789] +++ exited with 0 +++ [pid 5792] +++ exited with 0 +++ [pid 5788] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5788, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./105/binderfs") = 0 [pid 5073] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./105/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./105") = 0 [pid 5073] mkdir("./106", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5793 ./strace-static-x86_64: Process 5793 attached [pid 5793] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5793] chdir("./106") = 0 [pid 5793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5793] setpgid(0, 0) = 0 [pid 5793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1000", 4) = 4 [pid 5793] close(3) = 0 [pid 5793] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5793] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5793] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5793] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5794], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5794 [pid 5793] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5794 attached [pid 5794] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5794] memfd_create("syzkaller", 0) = 3 [pid 5794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5794] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5794] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5794] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5794] close(3) = 0 [pid 5794] mkdir("./file0", 0777) = 0 [ 127.867784][ T5794] loop4: detected capacity change from 0 to 8192 [ 127.878879][ T5794] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.892025][ T5794] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 127.901356][ T5794] REISERFS (device loop4): using ordered data mode [ 127.908301][ T5794] reiserfs: using flush barriers [ 127.914549][ T5794] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.931391][ T5794] REISERFS (device loop4): checking transaction log (loop4) [pid 5794] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5794] chdir("./file0") = 0 [pid 5794] ioctl(4, LOOP_CLR_FD) = 0 [pid 5794] close(4) = 0 [pid 5794] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5793] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5794] <... futex resumed>) = 0 [pid 5794] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5794] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] <... futex resumed>) = 1 [pid 5794] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5794] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5794] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 127.975845][ T5794] REISERFS (device loop4): Using r5 hash to sort names [ 127.982826][ T5794] REISERFS (device loop4): using 3.5.x disk format [ 127.989840][ T5794] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5794] sendfile(4, 5, NULL, 140737974943952 [pid 5793] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5793] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5793] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5793] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5796], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5796 [pid 5793] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5796 attached [pid 5796] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5796] open("./bus", O_RDONLY [pid 5793] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5793] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5793] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5793] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5797 attached , parent_tid=[5797], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5797 [pid 5797] set_robust_list(0x7fe8f42af9e0, 24 [pid 5793] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... set_robust_list resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5797] truncate("./bus", 6 [pid 5793] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5793] exit_group(0) = ? [pid 5794] <... sendfile resumed>) = ? [pid 5796] <... open resumed>) = ? [pid 5794] +++ exited with 0 +++ [pid 5797] <... truncate resumed>) = ? [pid 5796] +++ exited with 0 +++ [pid 5797] +++ exited with 0 +++ [pid 5793] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5793, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./106/binderfs") = 0 [pid 5073] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./106/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./106") = 0 [pid 5073] mkdir("./107", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5798 ./strace-static-x86_64: Process 5798 attached [pid 5798] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5798] chdir("./107") = 0 [pid 5798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5798] setpgid(0, 0) = 0 [pid 5798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5798] write(3, "1000", 4) = 4 [pid 5798] close(3) = 0 [pid 5798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5798] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5798] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5798] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5799 attached , parent_tid=[5799], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5799 [pid 5799] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5799] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5798] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5798] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5799] memfd_create("syzkaller", 0) = 3 [pid 5799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5799] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5799] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5799] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5799] close(3) = 0 [pid 5799] mkdir("./file0", 0777) = 0 [ 128.545239][ T5799] loop4: detected capacity change from 0 to 8192 [ 128.555673][ T5799] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.568730][ T5799] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 128.578091][ T5799] REISERFS (device loop4): using ordered data mode [ 128.584628][ T5799] reiserfs: using flush barriers [ 128.590819][ T5799] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.607167][ T5799] REISERFS (device loop4): checking transaction log (loop4) [pid 5799] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5799] chdir("./file0") = 0 [pid 5799] ioctl(4, LOOP_CLR_FD) = 0 [pid 5799] close(4) = 0 [pid 5799] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5798] <... futex resumed>) = 0 [pid 5798] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5798] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5799] <... futex resumed>) = 0 [pid 5799] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5799] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] <... futex resumed>) = 0 [pid 5798] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5799] <... futex resumed>) = 1 [pid 5799] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5799] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5798] <... futex resumed>) = 0 [pid 5799] sendfile(4, 5, NULL, 140737974943952 [pid 5798] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.644465][ T5799] REISERFS (device loop4): Using r5 hash to sort names [ 128.651651][ T5799] REISERFS (device loop4): using 3.5.x disk format [ 128.658525][ T5799] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5798] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5798] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5798] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5798] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5798] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5801], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5801 [pid 5798] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5801 attached [pid 5801] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5801] open("./bus", O_RDONLY [pid 5798] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5798] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5798] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5798] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5802 attached , parent_tid=[5802], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5802 [pid 5802] set_robust_list(0x7fe8f42af9e0, 24 [pid 5798] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5798] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... set_robust_list resumed>) = 0 [pid 5802] truncate("./bus", 6 [pid 5798] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5798] exit_group(0) = ? [pid 5801] <... open resumed>) = ? [pid 5799] <... sendfile resumed>) = ? [pid 5802] <... truncate resumed>) = ? [pid 5801] +++ exited with 0 +++ [pid 5799] +++ exited with 0 +++ [pid 5802] +++ exited with 0 +++ [pid 5798] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5798, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./107/binderfs") = 0 [pid 5073] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./107/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./107") = 0 [pid 5073] mkdir("./108", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5803 ./strace-static-x86_64: Process 5803 attached [pid 5803] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5803] chdir("./108") = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5803] setpgid(0, 0) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5803] write(3, "1000", 4) = 4 [pid 5803] close(3) = 0 [pid 5803] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5803] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5803] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5804 attached , parent_tid=[5804], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5804 [pid 5803] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5804] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5804] memfd_create("syzkaller", 0) = 3 [pid 5804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5804] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5804] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5804] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5804] close(3) = 0 [pid 5804] mkdir("./file0", 0777) = 0 [ 129.201799][ T5804] loop4: detected capacity change from 0 to 8192 [ 129.212068][ T5804] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.225351][ T5804] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 129.234646][ T5804] REISERFS (device loop4): using ordered data mode [ 129.241225][ T5804] reiserfs: using flush barriers [ 129.247446][ T5804] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.263882][ T5804] REISERFS (device loop4): checking transaction log (loop4) [pid 5804] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5804] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5804] chdir("./file0") = 0 [pid 5804] ioctl(4, LOOP_CLR_FD) = 0 [pid 5804] close(4) = 0 [pid 5804] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = 0 [pid 5803] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] <... futex resumed>) = 1 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5804] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = 0 [pid 5803] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] <... futex resumed>) = 1 [pid 5804] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5804] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = 0 [pid 5803] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] <... futex resumed>) = 1 [ 129.301392][ T5804] REISERFS (device loop4): Using r5 hash to sort names [ 129.308683][ T5804] REISERFS (device loop4): using 3.5.x disk format [ 129.315841][ T5804] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5804] sendfile(4, 5, NULL, 140737974943952 [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5803] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5803] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5806], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5806 [pid 5803] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5806 attached [pid 5806] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5806] open("./bus", O_RDONLY [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5803] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5803] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5807 attached [pid 5807] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5807] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] <... clone resumed>, parent_tid=[5807], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5807 [pid 5803] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5803] <... futex resumed>) = 1 [pid 5807] truncate("./bus", 6 [pid 5803] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5803] exit_group(0) = ? [pid 5804] <... sendfile resumed>) = ? [pid 5807] <... truncate resumed>) = ? [pid 5806] <... open resumed>) = ? [pid 5807] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ [pid 5804] +++ exited with 0 +++ [pid 5803] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./108/binderfs") = 0 [ 129.698511][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 129.698526][ T27] audit: type=1804 audit(1671282353.103:416): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/108/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 129.729124][ T27] audit: type=1800 audit(1671282353.103:417): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./108/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./108") = 0 [pid 5073] mkdir("./109", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5808 ./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5808] chdir("./109") = 0 [pid 5808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5808] setpgid(0, 0) = 0 [pid 5808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5808] write(3, "1000", 4) = 4 [pid 5808] close(3) = 0 [pid 5808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5808] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5808] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5808] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5809], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5809 [pid 5808] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5809 attached ) = 0 [pid 5808] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5809] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5809] memfd_create("syzkaller", 0) = 3 [pid 5809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5809] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5809] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5809] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5809] close(3) = 0 [pid 5809] mkdir("./file0", 0777) = 0 [ 129.856608][ T5809] loop4: detected capacity change from 0 to 8192 [ 129.867032][ T5809] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.880056][ T5809] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 129.889289][ T5809] REISERFS (device loop4): using ordered data mode [ 129.896079][ T5809] reiserfs: using flush barriers [ 129.902031][ T5809] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.918335][ T5809] REISERFS (device loop4): checking transaction log (loop4) [pid 5809] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5809] chdir("./file0") = 0 [pid 5809] ioctl(4, LOOP_CLR_FD) = 0 [pid 5809] close(4) = 0 [pid 5809] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] <... futex resumed>) = 0 [pid 5809] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5808] <... futex resumed>) = 0 [pid 5809] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5808] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5809] <... open resumed>) = 4 [pid 5809] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] <... futex resumed>) = 0 [pid 5809] openat(-1, "/proc/self/exe", O_RDONLY [pid 5808] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] <... openat resumed>) = 5 [pid 5808] <... futex resumed>) = 0 [pid 5809] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5809] <... futex resumed>) = 0 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5809] sendfile(4, 5, NULL, 140737974943952 [pid 5808] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 129.960160][ T5809] REISERFS (device loop4): Using r5 hash to sort names [ 129.967200][ T5809] REISERFS (device loop4): using 3.5.x disk format [ 129.973888][ T5809] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5808] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5808] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5808] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 129.991272][ T27] audit: type=1800 audit(1671282353.393:418): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5808] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5811], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5811 ./strace-static-x86_64: Process 5811 attached [pid 5808] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5811] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5811] open("./bus", O_RDONLY [pid 5808] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5808] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5808] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5808] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5812 attached , parent_tid=[5812], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5812 [pid 5812] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5812] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] <... futex resumed>) = 0 [pid 5812] truncate("./bus", 6 [pid 5808] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] exit_group(0) = ? [pid 5809] <... sendfile resumed>) = ? [pid 5811] <... open resumed>) = ? [pid 5809] +++ exited with 0 +++ [pid 5812] <... truncate resumed>) = ? [pid 5812] +++ exited with 0 +++ [pid 5811] +++ exited with 0 +++ [pid 5808] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5808, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./109/binderfs") = 0 [pid 5073] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 130.358208][ T27] audit: type=1804 audit(1671282353.763:419): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/109/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 130.382312][ T27] audit: type=1800 audit(1671282353.763:420): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./109/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./109") = 0 [pid 5073] mkdir("./110", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5813 ./strace-static-x86_64: Process 5813 attached [pid 5813] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5813] chdir("./110") = 0 [pid 5813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5813] setpgid(0, 0) = 0 [pid 5813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5813] write(3, "1000", 4) = 4 [pid 5813] close(3) = 0 [pid 5813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5813] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5813] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5813] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5814], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5814 ./strace-static-x86_64: Process 5814 attached [pid 5813] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5814] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5814] memfd_create("syzkaller", 0) = 3 [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5814] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5814] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5814] close(3) = 0 [pid 5814] mkdir("./file0", 0777) = 0 [ 130.511350][ T5814] loop4: detected capacity change from 0 to 8192 [ 130.521680][ T5814] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.534677][ T5814] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 130.543910][ T5814] REISERFS (device loop4): using ordered data mode [ 130.550477][ T5814] reiserfs: using flush barriers [ 130.556429][ T5814] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.572882][ T5814] REISERFS (device loop4): checking transaction log (loop4) [pid 5814] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5814] chdir("./file0") = 0 [pid 5814] ioctl(4, LOOP_CLR_FD) = 0 [pid 5814] close(4) = 0 [pid 5814] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = 0 [pid 5813] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = 1 [pid 5814] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5814] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = 0 [pid 5813] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = 1 [pid 5814] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5814] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = 0 [pid 5813] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = 1 [ 130.610890][ T5814] REISERFS (device loop4): Using r5 hash to sort names [ 130.617895][ T5814] REISERFS (device loop4): using 3.5.x disk format [ 130.624586][ T5814] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5814] sendfile(4, 5, NULL, 140737974943952 [pid 5813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5813] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5813] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5813] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5816], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5816 [pid 5813] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5816 attached [pid 5813] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 130.642204][ T27] audit: type=1800 audit(1671282354.043:421): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5816] open("./bus", O_RDONLY [pid 5813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5813] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5813] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5813] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5817], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5817 [pid 5813] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5817 attached [pid 5817] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5817] truncate("./bus", 6 [pid 5813] <... futex resumed>) = 0 [pid 5813] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5813] exit_group(0) = ? [pid 5816] <... open resumed>) = ? [pid 5814] <... sendfile resumed>) = ? [pid 5816] +++ exited with 0 +++ [pid 5814] +++ exited with 0 +++ [pid 5817] <... truncate resumed>) = ? [pid 5817] +++ exited with 0 +++ [pid 5813] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5813, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./110/binderfs") = 0 [pid 5073] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./110/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [ 131.007998][ T27] audit: type=1804 audit(1671282354.413:422): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/110/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 131.032807][ T27] audit: type=1800 audit(1671282354.413:423): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./110") = 0 [pid 5073] mkdir("./111", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5818 ./strace-static-x86_64: Process 5818 attached [pid 5818] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5818] chdir("./111") = 0 [pid 5818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5818] setpgid(0, 0) = 0 [pid 5818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "1000", 4) = 4 [pid 5818] close(3) = 0 [pid 5818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5818] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5818] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5818] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5819 attached [pid 5819] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5818] <... clone resumed>, parent_tid=[5819], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5819 [pid 5818] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... set_robust_list resumed>) = 0 [pid 5818] <... futex resumed>) = 0 [pid 5818] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5819] memfd_create("syzkaller", 0) = 3 [pid 5819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5819] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5819] close(3) = 0 [pid 5819] mkdir("./file0", 0777) = 0 [ 131.154023][ T5819] loop4: detected capacity change from 0 to 8192 [ 131.164746][ T5819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.178476][ T5819] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 131.188156][ T5819] REISERFS (device loop4): using ordered data mode [ 131.194715][ T5819] reiserfs: using flush barriers [ 131.200901][ T5819] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.217700][ T5819] REISERFS (device loop4): checking transaction log (loop4) [pid 5819] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5819] chdir("./file0") = 0 [pid 5819] ioctl(4, LOOP_CLR_FD) = 0 [pid 5819] close(4) = 0 [pid 5819] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = 0 [pid 5818] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5819] <... futex resumed>) = 1 [pid 5819] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5819] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = 0 [pid 5818] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5819] <... futex resumed>) = 1 [pid 5819] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5819] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = 0 [pid 5818] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5819] <... futex resumed>) = 1 [ 131.254452][ T5819] REISERFS (device loop4): Using r5 hash to sort names [ 131.261617][ T5819] REISERFS (device loop4): using 3.5.x disk format [ 131.268616][ T5819] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5819] sendfile(4, 5, NULL, 140737974943952 [pid 5818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5818] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5818] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5818] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5818] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5821], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5821 [pid 5818] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5821 attached ) = 0 [pid 5818] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5821] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 131.285931][ T27] audit: type=1800 audit(1671282354.683:424): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5821] open("./bus", O_RDONLY [pid 5818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5818] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5818] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5818] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5818] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5822], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5822 [pid 5818] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5822 attached [pid 5822] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5822] truncate("./bus", 6 [pid 5818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5818] exit_group(0) = ? [pid 5821] <... open resumed>) = ? [pid 5819] <... sendfile resumed>) = ? [pid 5821] +++ exited with 0 +++ [pid 5822] <... truncate resumed>) = ? [pid 5822] +++ exited with 0 +++ [pid 5819] +++ exited with 0 +++ [pid 5818] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5818, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./111/binderfs") = 0 [ 131.678407][ T27] audit: type=1804 audit(1671282355.083:425): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/111/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./111/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./111") = 0 [pid 5073] mkdir("./112", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5823 ./strace-static-x86_64: Process 5823 attached [pid 5823] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5823] chdir("./112") = 0 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] setpgid(0, 0) = 0 [pid 5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1000", 4) = 4 [pid 5823] close(3) = 0 [pid 5823] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5823] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5823] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5824], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5824 [pid 5823] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5824 attached [pid 5824] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5824] memfd_create("syzkaller", 0) = 3 [pid 5824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5824] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5824] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5824] close(3) = 0 [pid 5824] mkdir("./file0", 0777) = 0 [ 131.806626][ T5824] loop4: detected capacity change from 0 to 8192 [ 131.816787][ T5824] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.830109][ T5824] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 131.839381][ T5824] REISERFS (device loop4): using ordered data mode [ 131.846047][ T5824] reiserfs: using flush barriers [ 131.852137][ T5824] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.868672][ T5824] REISERFS (device loop4): checking transaction log (loop4) [pid 5824] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5824] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5824] chdir("./file0") = 0 [pid 5824] ioctl(4, LOOP_CLR_FD) = 0 [pid 5824] close(4) = 0 [pid 5824] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] <... futex resumed>) = 0 [pid 5823] <... futex resumed>) = 1 [pid 5824] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5823] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] <... open resumed>) = 4 [pid 5824] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] <... futex resumed>) = 0 [pid 5823] <... futex resumed>) = 1 [pid 5824] openat(-1, "/proc/self/exe", O_RDONLY [pid 5823] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] <... openat resumed>) = 5 [pid 5824] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5823] <... futex resumed>) = 0 [pid 5824] sendfile(4, 5, NULL, 140737974943952 [pid 5823] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 131.910588][ T5824] REISERFS (device loop4): Using r5 hash to sort names [ 131.917831][ T5824] REISERFS (device loop4): using 3.5.x disk format [ 131.924565][ T5824] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5823] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5823] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5823] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5823] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5826], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5826 [pid 5823] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5826] open("./bus", O_RDONLY [pid 5823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5823] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5823] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5823] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5823] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5827], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5827 [pid 5823] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] truncate("./bus", 6 [pid 5823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5823] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5823] exit_group(0) = ? [pid 5826] <... open resumed>) = ? [pid 5824] <... sendfile resumed>) = ? [pid 5827] <... truncate resumed>) = ? [pid 5826] +++ exited with 0 +++ [pid 5824] +++ exited with 0 +++ [pid 5827] +++ exited with 0 +++ [pid 5823] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./112/binderfs") = 0 [pid 5073] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./112/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./112") = 0 [pid 5073] mkdir("./113", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5828 ./strace-static-x86_64: Process 5828 attached [pid 5828] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5828] chdir("./113") = 0 [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5828] setpgid(0, 0) = 0 [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5828] write(3, "1000", 4) = 4 [pid 5828] close(3) = 0 [pid 5828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5828] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5828] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5828] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5829], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5829 [pid 5828] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5829 attached [pid 5829] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5829] memfd_create("syzkaller", 0) = 3 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5829] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5829] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5829] close(3) = 0 [pid 5829] mkdir("./file0", 0777) = 0 [ 132.503345][ T5829] loop4: detected capacity change from 0 to 8192 [ 132.513764][ T5829] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.527088][ T5829] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 132.536433][ T5829] REISERFS (device loop4): using ordered data mode [ 132.543102][ T5829] reiserfs: using flush barriers [ 132.549405][ T5829] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.565861][ T5829] REISERFS (device loop4): checking transaction log (loop4) [pid 5829] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5829] chdir("./file0") = 0 [pid 5829] ioctl(4, LOOP_CLR_FD) = 0 [pid 5829] close(4) = 0 [pid 5829] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... futex resumed>) = 0 [pid 5828] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] <... futex resumed>) = 1 [pid 5829] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5829] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... futex resumed>) = 0 [pid 5828] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] <... futex resumed>) = 1 [pid 5829] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5829] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... futex resumed>) = 0 [pid 5828] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] <... futex resumed>) = 1 [ 132.608865][ T5829] REISERFS (device loop4): Using r5 hash to sort names [ 132.616013][ T5829] REISERFS (device loop4): using 3.5.x disk format [ 132.623071][ T5829] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5829] sendfile(4, 5, NULL, 140737974943952 [pid 5828] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5828] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5828] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5828] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5831 attached , parent_tid=[5831], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5831 [pid 5831] set_robust_list(0x7fe8f42d09e0, 24 [pid 5828] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... set_robust_list resumed>) = 0 [pid 5828] <... futex resumed>) = 0 [pid 5831] open("./bus", O_RDONLY [pid 5828] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5828] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5828] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5828] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5832], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5832 [pid 5828] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5832 attached [pid 5832] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5832] truncate("./bus", 6 [pid 5828] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5828] exit_group(0) = ? [pid 5831] <... open resumed>) = ? [pid 5829] <... sendfile resumed>) = ? [pid 5832] <... truncate resumed>) = ? [pid 5831] +++ exited with 0 +++ [pid 5832] +++ exited with 0 +++ [pid 5829] +++ exited with 0 +++ [pid 5828] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./113/binderfs") = 0 [pid 5073] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./113/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./113") = 0 [pid 5073] mkdir("./114", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5833 ./strace-static-x86_64: Process 5833 attached [pid 5833] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5833] chdir("./114") = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] setpgid(0, 0) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1000", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5833] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5833] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5834], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5834 [pid 5833] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5834 attached [pid 5834] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5834] memfd_create("syzkaller", 0) = 3 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5834] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5834] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5834] close(3) = 0 [pid 5834] mkdir("./file0", 0777) = 0 [ 133.104284][ T5834] loop4: detected capacity change from 0 to 8192 [ 133.114304][ T5834] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.127441][ T5834] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 133.137117][ T5834] REISERFS (device loop4): using ordered data mode [ 133.143754][ T5834] reiserfs: using flush barriers [ 133.149927][ T5834] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.166371][ T5834] REISERFS (device loop4): checking transaction log (loop4) [pid 5834] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5834] chdir("./file0") = 0 [pid 5834] ioctl(4, LOOP_CLR_FD) = 0 [pid 5834] close(4) = 0 [pid 5834] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5834] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] <... futex resumed>) = 0 [pid 5833] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... futex resumed>) = 0 [pid 5834] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5834] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... futex resumed>) = 0 [pid 5833] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... futex resumed>) = 1 [pid 5834] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5834] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5834] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] <... futex resumed>) = 0 [pid 5833] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... futex resumed>) = 0 [ 133.203789][ T5834] REISERFS (device loop4): Using r5 hash to sort names [ 133.210973][ T5834] REISERFS (device loop4): using 3.5.x disk format [ 133.218407][ T5834] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5834] sendfile(4, 5, NULL, 140737974943952 [pid 5833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5833] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5833] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5833] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5833] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5836], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5836 [pid 5833] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5836 attached [pid 5836] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5836] open("./bus", O_RDONLY [pid 5833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5833] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5833] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5833] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5833] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5837 attached , parent_tid=[5837], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5837 [pid 5833] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5837] set_robust_list(0x7fe8f42af9e0, 24 [pid 5833] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5837] <... set_robust_list resumed>) = 0 [pid 5837] truncate("./bus", 6 [pid 5833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5833] exit_group(0) = ? [pid 5834] <... sendfile resumed>) = ? [pid 5836] <... open resumed>) = ? [pid 5837] <... truncate resumed>) = ? [pid 5836] +++ exited with 0 +++ [pid 5834] +++ exited with 0 +++ [pid 5837] +++ exited with 0 +++ [pid 5833] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./114/binderfs") = 0 [pid 5073] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./114/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./114") = 0 [pid 5073] mkdir("./115", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5838 ./strace-static-x86_64: Process 5838 attached [pid 5838] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5838] chdir("./115") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5838] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5838] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5838] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5839 attached , parent_tid=[5839], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5839 [pid 5839] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5838] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] <... set_robust_list resumed>) = 0 [pid 5838] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5839] memfd_create("syzkaller", 0) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5839] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5839] close(3) = 0 [pid 5839] mkdir("./file0", 0777) = 0 [ 133.774965][ T5839] loop4: detected capacity change from 0 to 8192 [ 133.785191][ T5839] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.798969][ T5839] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 133.808288][ T5839] REISERFS (device loop4): using ordered data mode [ 133.815062][ T5839] reiserfs: using flush barriers [ 133.821140][ T5839] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.837511][ T5839] REISERFS (device loop4): checking transaction log (loop4) [pid 5839] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] chdir("./file0") = 0 [pid 5839] ioctl(4, LOOP_CLR_FD) = 0 [pid 5839] close(4) = 0 [pid 5839] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... futex resumed>) = 0 [pid 5839] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5839] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5839] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5839] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5839] sendfile(4, 5, NULL, 140737974943952 [pid 5838] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 133.874539][ T5839] REISERFS (device loop4): Using r5 hash to sort names [ 133.881519][ T5839] REISERFS (device loop4): using 3.5.x disk format [ 133.888405][ T5839] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5838] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5838] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5838] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5838] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5841], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5841 [pid 5838] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5841 attached [pid 5841] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5841] open("./bus", O_RDONLY [pid 5838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5838] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5838] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5838] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5842], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5842 [pid 5838] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5842 attached [pid 5842] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5842] truncate("./bus", 6 [pid 5838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5838] exit_group(0) = ? [pid 5839] <... sendfile resumed>) = ? [pid 5841] <... open resumed>) = ? [pid 5839] +++ exited with 0 +++ [pid 5842] <... truncate resumed>) = ? [pid 5841] +++ exited with 0 +++ [pid 5842] +++ exited with 0 +++ [pid 5838] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./115/binderfs") = 0 [pid 5073] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./115/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./115") = 0 [pid 5073] mkdir("./116", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5843 ./strace-static-x86_64: Process 5843 attached [pid 5843] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5843] chdir("./116") = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5843] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5843] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5844], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5844 ./strace-static-x86_64: Process 5844 attached [pid 5843] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5843] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5844] <... set_robust_list resumed>) = 0 [pid 5844] memfd_create("syzkaller", 0) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5844] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5844] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5844] close(3) = 0 [pid 5844] mkdir("./file0", 0777) = 0 [ 134.384657][ T5844] loop4: detected capacity change from 0 to 8192 [ 134.394586][ T5844] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.407782][ T5844] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 134.417417][ T5844] REISERFS (device loop4): using ordered data mode [ 134.423928][ T5844] reiserfs: using flush barriers [ 134.429905][ T5844] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.446526][ T5844] REISERFS (device loop4): checking transaction log (loop4) [pid 5844] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5844] chdir("./file0") = 0 [pid 5844] ioctl(4, LOOP_CLR_FD) = 0 [pid 5844] close(4) = 0 [pid 5844] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5844] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5843] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] <... open resumed>) = 4 [pid 5843] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5844] openat(-1, "/proc/self/exe", O_RDONLY [pid 5843] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... openat resumed>) = 5 [pid 5843] <... futex resumed>) = 0 [pid 5844] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] <... futex resumed>) = 0 [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] sendfile(4, 5, NULL, 140737974943952 [pid 5843] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 134.487813][ T5844] REISERFS (device loop4): Using r5 hash to sort names [ 134.494891][ T5844] REISERFS (device loop4): using 3.5.x disk format [ 134.501944][ T5844] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5843] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5843] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5843] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5846] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... clone resumed>, parent_tid=[5846], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5846 [pid 5843] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... futex resumed>) = 0 [pid 5846] open("./bus", O_RDONLY [pid 5843] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5843] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5843] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5847], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5847 [pid 5843] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5847] truncate("./bus", 6 [pid 5843] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5843] exit_group(0) = ? [pid 5847] <... truncate resumed>) = ? [pid 5846] <... open resumed>) = ? [pid 5844] <... sendfile resumed>) = ? [pid 5847] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ [pid 5844] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./116/binderfs") = 0 [ 134.868203][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 134.868219][ T27] audit: type=1804 audit(1671282358.273:440): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/116/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 134.898819][ T27] audit: type=1800 audit(1671282358.273:441): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./116/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./116") = 0 [pid 5073] mkdir("./117", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5848 ./strace-static-x86_64: Process 5848 attached [pid 5848] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5848] chdir("./117") = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5848] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5848] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5849 attached , parent_tid=[5849], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5849 [pid 5848] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5849] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5849] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] close(3) = 0 [pid 5849] mkdir("./file0", 0777) = 0 [ 135.017822][ T5849] loop4: detected capacity change from 0 to 8192 [ 135.029246][ T5849] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.042455][ T5849] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 135.051864][ T5849] REISERFS (device loop4): using ordered data mode [ 135.058796][ T5849] reiserfs: using flush barriers [ 135.064773][ T5849] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.081388][ T5849] REISERFS (device loop4): checking transaction log (loop4) [pid 5849] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file0") = 0 [pid 5849] ioctl(4, LOOP_CLR_FD) = 0 [pid 5849] close(4) = 0 [pid 5849] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] <... futex resumed>) = 0 [pid 5848] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5849] <... futex resumed>) = 0 [pid 5849] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5849] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] <... futex resumed>) = 0 [pid 5848] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] <... futex resumed>) = 0 [pid 5848] <... futex resumed>) = 1 [pid 5849] openat(-1, "/proc/self/exe", O_RDONLY [pid 5848] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5849] <... openat resumed>) = 5 [pid 5849] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] <... futex resumed>) = 0 [pid 5849] sendfile(4, 5, NULL, 140737974943952 [pid 5848] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.124346][ T5849] REISERFS (device loop4): Using r5 hash to sort names [ 135.131628][ T5849] REISERFS (device loop4): using 3.5.x disk format [ 135.138516][ T5849] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 135.156138][ T27] audit: type=1800 audit(1671282358.563:442): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5848] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5848] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5848] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5848] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5851] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] <... clone resumed>, parent_tid=[5851], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5851 [pid 5848] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5851] <... futex resumed>) = 0 [pid 5851] open("./bus", O_RDONLY [pid 5848] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5848] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5848] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5848] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5852 attached [pid 5852] set_robust_list(0x7fe8f42af9e0, 24 [pid 5848] <... clone resumed>, parent_tid=[5852], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5852 [pid 5848] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5852] truncate("./bus", 6 [pid 5848] <... futex resumed>) = 0 [pid 5848] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5848] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5848] exit_group(0) = ? [pid 5851] <... open resumed>) = ? [pid 5849] <... sendfile resumed>) = ? [pid 5851] +++ exited with 0 +++ [pid 5852] <... truncate resumed>) = ? [pid 5852] +++ exited with 0 +++ [pid 5849] +++ exited with 0 +++ [pid 5848] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./117/binderfs") = 0 [ 135.528346][ T27] audit: type=1804 audit(1671282358.933:443): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/117/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 135.552027][ T27] audit: type=1800 audit(1671282358.933:444): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./117/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./117") = 0 [pid 5073] mkdir("./118", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5853 ./strace-static-x86_64: Process 5853 attached [pid 5853] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5853] chdir("./118") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5853] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5853] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5854 attached , parent_tid=[5854], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5854 [pid 5854] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5853] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5854] <... set_robust_list resumed>) = 0 [pid 5854] memfd_create("syzkaller", 0) = 3 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5854] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5854] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5854] close(3) = 0 [pid 5854] mkdir("./file0", 0777) = 0 [ 135.697610][ T5854] loop4: detected capacity change from 0 to 8192 [ 135.708395][ T5854] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.721980][ T5854] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 135.731361][ T5854] REISERFS (device loop4): using ordered data mode [ 135.738007][ T5854] reiserfs: using flush barriers [ 135.743691][ T5854] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.760187][ T5854] REISERFS (device loop4): checking transaction log (loop4) [pid 5854] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] chdir("./file0") = 0 [pid 5854] ioctl(4, LOOP_CLR_FD) = 0 [pid 5854] close(4) = 0 [pid 5854] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5854] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] <... futex resumed>) = 0 [pid 5853] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] <... futex resumed>) = 0 [pid 5854] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [ 135.801701][ T5854] REISERFS (device loop4): Using r5 hash to sort names [ 135.808775][ T5854] REISERFS (device loop4): using 3.5.x disk format [ 135.815638][ T5854] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5854] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5854] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] <... futex resumed>) = 0 [pid 5853] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] <... futex resumed>) = 0 [pid 5853] <... futex resumed>) = 1 [pid 5854] openat(-1, "/proc/self/exe", O_RDONLY [pid 5853] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] <... openat resumed>) = 5 [pid 5854] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5854] sendfile(4, 5, NULL, 140737974943952 [pid 5853] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.848982][ T27] audit: type=1800 audit(1671282359.253:445): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5853] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5853] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5853] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5853] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5856 attached , parent_tid=[5856], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5856 [pid 5856] set_robust_list(0x7fe8f42d09e0, 24 [pid 5853] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... set_robust_list resumed>) = 0 [pid 5856] open("./bus", O_RDONLY [pid 5853] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5853] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5853] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5857], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5857 [pid 5853] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5857 attached [pid 5857] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5857] truncate("./bus", 6 [pid 5853] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5853] exit_group(0) = ? [pid 5854] <... sendfile resumed>) = ? [pid 5857] <... truncate resumed>) = ? [pid 5856] <... open resumed>) = ? [pid 5854] +++ exited with 0 +++ [pid 5857] +++ exited with 0 +++ [pid 5856] +++ exited with 0 +++ [pid 5853] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./118/binderfs") = 0 [pid 5073] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 136.178480][ T27] audit: type=1804 audit(1671282359.583:446): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/118/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 136.202814][ T27] audit: type=1800 audit(1671282359.583:447): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./118/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./118") = 0 [pid 5073] mkdir("./119", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5858 ./strace-static-x86_64: Process 5858 attached [pid 5858] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5858] chdir("./119") = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5858] setpgid(0, 0) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5858] write(3, "1000", 4) = 4 [pid 5858] close(3) = 0 [pid 5858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5858] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5858] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5858] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5859], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5859 [pid 5858] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5859 attached [pid 5859] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5859] memfd_create("syzkaller", 0) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5859] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5859] close(3) = 0 [pid 5859] mkdir("./file0", 0777) = 0 [ 136.325830][ T5859] loop4: detected capacity change from 0 to 8192 [ 136.336737][ T5859] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.349774][ T5859] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 136.359483][ T5859] REISERFS (device loop4): using ordered data mode [ 136.366046][ T5859] reiserfs: using flush barriers [ 136.371650][ T5859] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.388195][ T5859] REISERFS (device loop4): checking transaction log (loop4) [pid 5859] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5859] chdir("./file0") = 0 [pid 5859] ioctl(4, LOOP_CLR_FD) = 0 [pid 5859] close(4) = 0 [pid 5859] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = 0 [pid 5858] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = 1 [pid 5859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5859] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = 0 [pid 5858] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = 1 [pid 5859] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5859] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = 0 [pid 5858] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = 1 [ 136.431116][ T5859] REISERFS (device loop4): Using r5 hash to sort names [ 136.438666][ T5859] REISERFS (device loop4): using 3.5.x disk format [ 136.445373][ T5859] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5859] sendfile(4, 5, NULL, 140737974943952 [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5858] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5858] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5861], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5861 [pid 5858] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5861 attached [pid 5861] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 136.464190][ T27] audit: type=1800 audit(1671282359.863:448): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5861] open("./bus", O_RDONLY [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5858] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5858] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5862], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5862 [pid 5858] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5862] truncate("./bus", 6 [pid 5858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5858] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5858] exit_group(0) = ? [pid 5861] <... open resumed>) = ? [pid 5859] <... sendfile resumed>) = ? [pid 5861] +++ exited with 0 +++ [pid 5862] <... truncate resumed>) = ? [pid 5862] +++ exited with 0 +++ [pid 5859] +++ exited with 0 +++ [pid 5858] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./119/binderfs") = 0 [ 136.817967][ T27] audit: type=1804 audit(1671282360.223:449): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/119/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./119/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./119") = 0 [pid 5073] mkdir("./120", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5863 ./strace-static-x86_64: Process 5863 attached [pid 5863] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5863] chdir("./120") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5863] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5863] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5863] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5864 attached , parent_tid=[5864], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5864 [pid 5863] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5864] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5864] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5864] close(3) = 0 [pid 5864] mkdir("./file0", 0777) = 0 [ 136.960570][ T5864] loop4: detected capacity change from 0 to 8192 [ 136.972462][ T5864] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.985590][ T5864] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 136.994760][ T5864] REISERFS (device loop4): using ordered data mode [ 137.001473][ T5864] reiserfs: using flush barriers [ 137.007711][ T5864] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.024126][ T5864] REISERFS (device loop4): checking transaction log (loop4) [pid 5864] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] chdir("./file0") = 0 [pid 5864] ioctl(4, LOOP_CLR_FD) = 0 [pid 5864] close(4) = 0 [pid 5864] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5863] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... futex resumed>) = 1 [pid 5864] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5864] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5863] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... futex resumed>) = 1 [pid 5864] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5864] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5863] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... futex resumed>) = 1 [ 137.061300][ T5864] REISERFS (device loop4): Using r5 hash to sort names [ 137.068647][ T5864] REISERFS (device loop4): using 3.5.x disk format [ 137.075813][ T5864] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5864] sendfile(4, 5, NULL, 140737974943952 [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5863] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5863] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5866 attached , parent_tid=[5866], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5866 [pid 5866] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5866] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = 0 [pid 5863] <... futex resumed>) = 1 [pid 5866] open("./bus", O_RDONLY [pid 5863] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5863] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5863] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5863] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5867], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5867 ./strace-static-x86_64: Process 5867 attached [pid 5863] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5867] truncate("./bus", 6 [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] exit_group(0) = ? [pid 5864] <... sendfile resumed>) = ? [pid 5866] <... open resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ [pid 5867] <... truncate resumed>) = ? [pid 5867] +++ exited with 0 +++ [pid 5863] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./120/binderfs") = 0 [pid 5073] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./120/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./120") = 0 [pid 5073] mkdir("./121", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5868 ./strace-static-x86_64: Process 5868 attached [pid 5868] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5868] chdir("./121") = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5868] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5868] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5868] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5869], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5869 ./strace-static-x86_64: Process 5869 attached [pid 5868] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5869] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5869] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5869] close(3) = 0 [pid 5869] mkdir("./file0", 0777) = 0 [ 137.567720][ T5869] loop4: detected capacity change from 0 to 8192 [ 137.578250][ T5869] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.591308][ T5869] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 137.600595][ T5869] REISERFS (device loop4): using ordered data mode [ 137.607178][ T5869] reiserfs: using flush barriers [ 137.612894][ T5869] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.629438][ T5869] REISERFS (device loop4): checking transaction log (loop4) [pid 5869] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file0") = 0 [pid 5869] ioctl(4, LOOP_CLR_FD) = 0 [pid 5869] close(4) = 0 [pid 5869] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] <... futex resumed>) = 0 [pid 5868] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5868] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... futex resumed>) = 0 [pid 5869] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5869] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] <... futex resumed>) = 0 [pid 5868] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... futex resumed>) = 1 [pid 5869] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5869] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5868] <... futex resumed>) = 0 [pid 5869] sendfile(4, 5, NULL, 140737974943952 [pid 5868] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.666202][ T5869] REISERFS (device loop4): Using r5 hash to sort names [ 137.673138][ T5869] REISERFS (device loop4): using 3.5.x disk format [ 137.680076][ T5869] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5868] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5868] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5868] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5868] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5871], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5871 [pid 5868] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5871 attached [pid 5871] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5871] open("./bus", O_RDONLY [pid 5868] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5868] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5868] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5868] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5872 attached , parent_tid=[5872], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5872 [pid 5868] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5872] truncate("./bus", 6 [pid 5868] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5868] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5868] exit_group(0) = ? [pid 5869] <... sendfile resumed>) = ? [pid 5871] <... open resumed>) = ? [pid 5871] +++ exited with 0 +++ [pid 5869] +++ exited with 0 +++ [pid 5872] <... truncate resumed>) = ? [pid 5872] +++ exited with 0 +++ [pid 5868] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./121/binderfs") = 0 [pid 5073] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./121/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./121") = 0 [pid 5073] mkdir("./122", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5873 ./strace-static-x86_64: Process 5873 attached [pid 5873] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5873] chdir("./122") = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5873] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5873] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5873] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5874], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5874 [pid 5873] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5874] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5874] close(3) = 0 [pid 5874] mkdir("./file0", 0777) = 0 [ 138.190749][ T5874] loop4: detected capacity change from 0 to 8192 [ 138.201590][ T5874] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.214770][ T5874] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 138.224133][ T5874] REISERFS (device loop4): using ordered data mode [ 138.230700][ T5874] reiserfs: using flush barriers [ 138.236657][ T5874] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.253487][ T5874] REISERFS (device loop4): checking transaction log (loop4) [pid 5874] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5874] chdir("./file0") = 0 [pid 5874] ioctl(4, LOOP_CLR_FD) = 0 [pid 5874] close(4) = 0 [pid 5874] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... futex resumed>) = 0 [pid 5874] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5873] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... open resumed>) = 4 [pid 5874] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] openat(-1, "/proc/self/exe", O_RDONLY [pid 5873] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... openat resumed>) = 5 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... futex resumed>) = 0 [pid 5873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5874] sendfile(4, 5, NULL, 140737974943952 [pid 5873] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 138.296095][ T5874] REISERFS (device loop4): Using r5 hash to sort names [ 138.303128][ T5874] REISERFS (device loop4): using 3.5.x disk format [ 138.310038][ T5874] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5873] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5873] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5873] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5873] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5876], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5876 [pid 5873] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5876 attached [pid 5876] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5876] open("./bus", O_RDONLY [pid 5873] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5873] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5873] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5873] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5877], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5877 ./strace-static-x86_64: Process 5877 attached [pid 5873] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] set_robust_list(0x7fe8f42af9e0, 24 [pid 5873] <... futex resumed>) = 0 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5873] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] truncate("./bus", 6 [pid 5873] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5873] exit_group(0) = ? [pid 5874] <... sendfile resumed>) = ? [pid 5874] +++ exited with 0 +++ [pid 5876] <... open resumed>) = ? [pid 5877] <... truncate resumed>) = ? [pid 5876] +++ exited with 0 +++ [pid 5877] +++ exited with 0 +++ [pid 5873] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./122/binderfs") = 0 [pid 5073] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./122/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./122") = 0 [pid 5073] mkdir("./123", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5878 ./strace-static-x86_64: Process 5878 attached [pid 5878] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5878] chdir("./123") = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5878] setpgid(0, 0) = 0 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5878] write(3, "1000", 4) = 4 [pid 5878] close(3) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5878] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5878] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5878] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5879], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5879 [pid 5878] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5879 attached [pid 5879] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5879] memfd_create("syzkaller", 0) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5879] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5879] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5879] close(3) = 0 [pid 5879] mkdir("./file0", 0777) = 0 [ 138.783491][ T5879] loop4: detected capacity change from 0 to 8192 [ 138.793662][ T5879] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.807081][ T5879] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 138.816828][ T5879] REISERFS (device loop4): using ordered data mode [ 138.823357][ T5879] reiserfs: using flush barriers [ 138.829590][ T5879] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.846317][ T5879] REISERFS (device loop4): checking transaction log (loop4) [pid 5879] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5879] chdir("./file0") = 0 [pid 5879] ioctl(4, LOOP_CLR_FD) = 0 [pid 5879] close(4) = 0 [pid 5879] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] <... futex resumed>) = 0 [pid 5878] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5879] <... futex resumed>) = 1 [pid 5879] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5879] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] <... futex resumed>) = 0 [pid 5878] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5879] <... futex resumed>) = 1 [pid 5879] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5879] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] <... futex resumed>) = 0 [pid 5878] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5879] <... futex resumed>) = 1 [ 138.888281][ T5879] REISERFS (device loop4): Using r5 hash to sort names [ 138.896309][ T5879] REISERFS (device loop4): using 3.5.x disk format [ 138.903239][ T5879] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5879] sendfile(4, 5, NULL, 140737974943952 [pid 5878] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5878] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5878] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5878] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5881], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5881 [pid 5878] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5881 attached [pid 5881] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5881] open("./bus", O_RDONLY [pid 5878] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5878] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5878] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5878] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5882 attached [pid 5882] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5882] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5878] <... clone resumed>, parent_tid=[5882], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5882 [pid 5878] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5878] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] truncate("./bus", 6 [pid 5878] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5878] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5878] exit_group(0) = ? [pid 5879] <... sendfile resumed>) = ? [pid 5881] <... open resumed>) = ? [pid 5879] +++ exited with 0 +++ [pid 5882] <... truncate resumed>) = ? [pid 5881] +++ exited with 0 +++ [pid 5882] +++ exited with 0 +++ [pid 5878] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./123/binderfs") = 0 [pid 5073] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./123/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./123") = 0 [pid 5073] mkdir("./124", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5883 ./strace-static-x86_64: Process 5883 attached [pid 5883] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5883] chdir("./124") = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5883] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5883] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5884], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5884 [pid 5883] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5884] memfd_create("syzkaller", 0) = 3 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5884] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5884] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5884] close(3) = 0 [pid 5884] mkdir("./file0", 0777) = 0 [ 139.388785][ T5884] loop4: detected capacity change from 0 to 8192 [ 139.399369][ T5884] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.412602][ T5884] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 139.422063][ T5884] REISERFS (device loop4): using ordered data mode [ 139.428663][ T5884] reiserfs: using flush barriers [ 139.434361][ T5884] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.450905][ T5884] REISERFS (device loop4): checking transaction log (loop4) [pid 5884] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5884] chdir("./file0") = 0 [pid 5884] ioctl(4, LOOP_CLR_FD) = 0 [pid 5884] close(4) = 0 [pid 5884] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5884] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5883] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] <... open resumed>) = 4 [pid 5884] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5884] openat(-1, "/proc/self/exe", O_RDONLY [pid 5883] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... openat resumed>) = 5 [pid 5883] <... futex resumed>) = 0 [pid 5884] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] <... futex resumed>) = 0 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] sendfile(4, 5, NULL, 140737974943952 [pid 5883] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.492241][ T5884] REISERFS (device loop4): Using r5 hash to sort names [ 139.499201][ T5884] REISERFS (device loop4): using 3.5.x disk format [ 139.506064][ T5884] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5883] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5883] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5883] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5883] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5886 attached , parent_tid=[5886], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5886 [pid 5886] set_robust_list(0x7fe8f42d09e0, 24 [pid 5883] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... set_robust_list resumed>) = 0 [pid 5883] <... futex resumed>) = 0 [pid 5886] open("./bus", O_RDONLY [pid 5883] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5883] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5883] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5883] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5887], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5887 [pid 5883] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5887 attached [pid 5887] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5887] truncate("./bus", 6 [pid 5883] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5883] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5883] exit_group(0) = ? [pid 5884] <... sendfile resumed>) = ? [pid 5886] <... open resumed>) = ? [pid 5886] +++ exited with 0 +++ [pid 5887] <... truncate resumed>) = ? [pid 5887] +++ exited with 0 +++ [pid 5884] +++ exited with 0 +++ [pid 5883] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./124/binderfs") = 0 [ 139.878547][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 139.878563][ T27] audit: type=1804 audit(1671282363.283:464): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/124/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 139.907861][ T27] audit: type=1800 audit(1671282363.283:465): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./124/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./124") = 0 [pid 5073] mkdir("./125", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5888] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 5888 [pid 5888] <... set_robust_list resumed>) = 0 [pid 5888] chdir("./125") = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5888] setpgid(0, 0) = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5888] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5888] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5888] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5889], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5889 [pid 5888] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5889 attached [pid 5889] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5889] memfd_create("syzkaller", 0) = 3 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5889] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5889] close(3) = 0 [pid 5889] mkdir("./file0", 0777) = 0 [ 140.046074][ T5889] loop4: detected capacity change from 0 to 8192 [ 140.056178][ T5889] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.069199][ T5889] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 140.079101][ T5889] REISERFS (device loop4): using ordered data mode [ 140.086172][ T5889] reiserfs: using flush barriers [ 140.091935][ T5889] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.108636][ T5889] REISERFS (device loop4): checking transaction log (loop4) [pid 5889] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5889] chdir("./file0") = 0 [pid 5889] ioctl(4, LOOP_CLR_FD) = 0 [pid 5889] close(4) = 0 [pid 5889] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5889] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... futex resumed>) = 0 [pid 5888] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5889] <... futex resumed>) = 0 [pid 5889] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5889] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = 0 [pid 5888] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5889] <... futex resumed>) = 1 [pid 5889] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5889] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5889] sendfile(4, 5, NULL, 140737974943952 [pid 5888] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 140.145297][ T5889] REISERFS (device loop4): Using r5 hash to sort names [ 140.152286][ T5889] REISERFS (device loop4): using 3.5.x disk format [ 140.159641][ T5889] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5888] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5888] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 140.177193][ T27] audit: type=1800 audit(1671282363.583:466): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5888] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5888] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5891], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5891 [pid 5888] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5891 attached [pid 5891] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5891] open("./bus", O_RDONLY [pid 5888] <... futex resumed>) = 0 [pid 5888] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5888] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5888] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5888] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5892 attached [pid 5892] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5892] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... clone resumed>, parent_tid=[5892], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5892 [pid 5888] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5892] truncate("./bus", 6 [pid 5888] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5888] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5888] exit_group(0) = ? [pid 5889] <... sendfile resumed>) = ? [pid 5892] <... truncate resumed>) = ? [pid 5891] <... open resumed>) = ? [pid 5889] +++ exited with 0 +++ [pid 5892] +++ exited with 0 +++ [pid 5891] +++ exited with 0 +++ [pid 5888] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./125/binderfs") = 0 [pid 5073] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 140.548212][ T27] audit: type=1804 audit(1671282363.953:467): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/125/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 140.571443][ T27] audit: type=1800 audit(1671282363.953:468): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./125/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./125") = 0 [pid 5073] mkdir("./126", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5893 ./strace-static-x86_64: Process 5893 attached [pid 5893] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5893] chdir("./126") = 0 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5893] setpgid(0, 0) = 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5893] write(3, "1000", 4) = 4 [pid 5893] close(3) = 0 [pid 5893] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5893] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5893] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5893] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5894 attached , parent_tid=[5894], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5894 [pid 5893] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5894] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5894] memfd_create("syzkaller", 0) = 3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5894] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5894] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5894] close(3) = 0 [pid 5894] mkdir("./file0", 0777) = 0 [ 140.702157][ T5894] loop4: detected capacity change from 0 to 8192 [ 140.712822][ T5894] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.725864][ T5894] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 140.735039][ T5894] REISERFS (device loop4): using ordered data mode [ 140.741598][ T5894] reiserfs: using flush barriers [ 140.747742][ T5894] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.764479][ T5894] REISERFS (device loop4): checking transaction log (loop4) [pid 5894] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5894] chdir("./file0") = 0 [pid 5894] ioctl(4, LOOP_CLR_FD) = 0 [pid 5894] close(4) = 0 [pid 5894] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = 0 [pid 5893] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5894] <... futex resumed>) = 1 [pid 5894] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5894] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5894] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] <... futex resumed>) = 0 [pid 5893] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5893] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5894] <... futex resumed>) = 0 [pid 5894] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5894] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5894] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 140.802033][ T5894] REISERFS (device loop4): Using r5 hash to sort names [ 140.809054][ T5894] REISERFS (device loop4): using 3.5.x disk format [ 140.816080][ T5894] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 140.830375][ T27] audit: type=1800 audit(1671282364.233:469): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5894] sendfile(4, 5, NULL, 140737974943952 [pid 5893] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5893] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5893] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5893] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5896 attached , parent_tid=[5896], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5896 [pid 5896] set_robust_list(0x7fe8f42d09e0, 24 [pid 5893] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... set_robust_list resumed>) = 0 [pid 5896] open("./bus", O_RDONLY [pid 5893] <... futex resumed>) = 0 [pid 5893] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5893] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5893] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5893] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5893] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5897], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5897 [pid 5893] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5897 attached [pid 5897] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5897] truncate("./bus", 6 [pid 5893] <... futex resumed>) = 0 [pid 5893] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5893] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5893] exit_group(0) = ? [pid 5894] <... sendfile resumed>) = ? [pid 5896] <... open resumed>) = ? [pid 5896] +++ exited with 0 +++ [pid 5897] <... truncate resumed>) = ? [pid 5897] +++ exited with 0 +++ [pid 5894] +++ exited with 0 +++ [pid 5893] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./126/binderfs") = 0 [pid 5073] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./126/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./126") = 0 [pid 5073] mkdir("./127", 0777) = 0 [ 141.228690][ T27] audit: type=1804 audit(1671282364.633:470): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/126/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 141.252006][ T27] audit: type=1800 audit(1671282364.633:471): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5898 ./strace-static-x86_64: Process 5898 attached [pid 5898] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5898] chdir("./127") = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5898] write(3, "1000", 4) = 4 [pid 5898] close(3) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5898] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5898] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5898] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5899], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5899 [pid 5898] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5899 attached [pid 5899] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5899] memfd_create("syzkaller", 0) = 3 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5899] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5899] close(3) = 0 [pid 5899] mkdir("./file0", 0777) = 0 [ 141.367343][ T5899] loop4: detected capacity change from 0 to 8192 [ 141.377300][ T5899] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.390647][ T5899] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 141.400099][ T5899] REISERFS (device loop4): using ordered data mode [ 141.407125][ T5899] reiserfs: using flush barriers [ 141.412806][ T5899] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.429524][ T5899] REISERFS (device loop4): checking transaction log (loop4) [pid 5899] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] chdir("./file0") = 0 [pid 5899] ioctl(4, LOOP_CLR_FD) = 0 [pid 5899] close(4) = 0 [pid 5899] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5898] <... futex resumed>) = 0 [pid 5899] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5898] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5899] <... open resumed>) = 4 [pid 5898] <... futex resumed>) = 0 [pid 5899] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5899] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5898] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5898] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5898] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5899] <... futex resumed>) = 0 [pid 5899] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5899] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5898] <... futex resumed>) = 0 [pid 5899] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5898] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5899] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5898] <... futex resumed>) = 0 [pid 5899] sendfile(4, 5, NULL, 140737974943952 [ 141.473275][ T5899] REISERFS (device loop4): Using r5 hash to sort names [ 141.480262][ T5899] REISERFS (device loop4): using 3.5.x disk format [ 141.487412][ T5899] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 141.500072][ T27] audit: type=1800 audit(1671282364.903:472): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5898] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5898] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5898] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5898] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5901], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5901 ./strace-static-x86_64: Process 5901 attached [pid 5898] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5901] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5901] open("./bus", O_RDONLY [pid 5898] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5898] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5898] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5898] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5902 attached [pid 5902] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5902] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5898] <... clone resumed>, parent_tid=[5902], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5902 [pid 5898] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5902] truncate("./bus", 6 [pid 5898] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5898] exit_group(0) = ? [pid 5899] <... sendfile resumed>) = ? [pid 5902] <... truncate resumed>) = ? [pid 5901] <... open resumed>) = ? [pid 5899] +++ exited with 0 +++ [pid 5902] +++ exited with 0 +++ [pid 5901] +++ exited with 0 +++ [pid 5898] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./127/binderfs") = 0 [ 141.878307][ T27] audit: type=1804 audit(1671282365.283:473): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/127/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./127/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./127") = 0 [pid 5073] mkdir("./128", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5903 ./strace-static-x86_64: Process 5903 attached [pid 5903] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5903] chdir("./128") = 0 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5903] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5903] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5903] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5904 attached , parent_tid=[5904], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5904 [pid 5904] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5904] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5904] <... futex resumed>) = 0 [pid 5904] memfd_create("syzkaller", 0) = 3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5904] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5904] close(3) = 0 [pid 5904] mkdir("./file0", 0777) = 0 [ 142.025885][ T5904] loop4: detected capacity change from 0 to 8192 [ 142.046618][ T5904] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.059689][ T5904] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 142.069080][ T5904] REISERFS (device loop4): using ordered data mode [ 142.076001][ T5904] reiserfs: using flush barriers [ 142.081734][ T5904] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.098218][ T5904] REISERFS (device loop4): checking transaction log (loop4) [pid 5904] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./file0") = 0 [pid 5904] ioctl(4, LOOP_CLR_FD) = 0 [pid 5904] close(4) = 0 [pid 5904] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5904] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] <... futex resumed>) = 0 [pid 5903] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... futex resumed>) = 0 [pid 5904] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5904] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5903] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5904] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] <... futex resumed>) = 0 [pid 5903] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... futex resumed>) = 1 [ 142.136082][ T5904] REISERFS (device loop4): Using r5 hash to sort names [ 142.143313][ T5904] REISERFS (device loop4): using 3.5.x disk format [ 142.150193][ T5904] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5904] sendfile(4, 5, NULL, 140737974943952 [pid 5903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5903] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5903] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5903] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5906], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5906 [pid 5903] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5906] open("./bus", O_RDONLY [pid 5903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5903] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5903] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5903] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5903] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5907], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5907 [pid 5903] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5907 attached [pid 5907] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5907] truncate("./bus", 6 [pid 5903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5903] exit_group(0) = ? [pid 5906] <... open resumed>) = ? [pid 5904] <... sendfile resumed>) = ? [pid 5907] <... truncate resumed>) = ? [pid 5907] +++ exited with 0 +++ [pid 5906] +++ exited with 0 +++ [pid 5904] +++ exited with 0 +++ [pid 5903] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./128/binderfs") = 0 [pid 5073] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./128/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./128") = 0 [pid 5073] mkdir("./129", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5908 ./strace-static-x86_64: Process 5908 attached [pid 5908] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5908] chdir("./129") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5908] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5908] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5909], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5909 [pid 5908] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5909 attached [pid 5909] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5909] memfd_create("syzkaller", 0) = 3 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5909] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5909] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5909] close(3) = 0 [pid 5909] mkdir("./file0", 0777) = 0 [ 142.678502][ T5909] loop4: detected capacity change from 0 to 8192 [ 142.689662][ T5909] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.703187][ T5909] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 142.712430][ T5909] REISERFS (device loop4): using ordered data mode [ 142.719471][ T5909] reiserfs: using flush barriers [ 142.725199][ T5909] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.741818][ T5909] REISERFS (device loop4): checking transaction log (loop4) [pid 5909] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5909] chdir("./file0") = 0 [pid 5909] ioctl(4, LOOP_CLR_FD) = 0 [pid 5909] close(4) = 0 [pid 5909] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] <... futex resumed>) = 0 [pid 5908] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... futex resumed>) = 1 [pid 5909] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5909] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] <... futex resumed>) = 0 [pid 5908] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... futex resumed>) = 1 [pid 5909] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5909] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] <... futex resumed>) = 0 [pid 5908] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... futex resumed>) = 1 [ 142.780147][ T5909] REISERFS (device loop4): Using r5 hash to sort names [ 142.787325][ T5909] REISERFS (device loop4): using 3.5.x disk format [ 142.794072][ T5909] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5909] sendfile(4, 5, NULL, 140737974943952 [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5908] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5908] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5908] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5908] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5911], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5911 [pid 5908] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5911] open("./bus", O_RDONLY [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5908] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5908] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5908] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5908] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5912], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5912 [pid 5908] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5912 attached [pid 5912] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5912] truncate("./bus", 6 [pid 5908] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5908] exit_group(0) = ? [pid 5909] <... sendfile resumed>) = ? [pid 5911] <... open resumed>) = ? [pid 5909] +++ exited with 0 +++ [pid 5912] <... truncate resumed>) = ? [pid 5911] +++ exited with 0 +++ [pid 5912] +++ exited with 0 +++ [pid 5908] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./129/binderfs") = 0 [pid 5073] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./129/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./129") = 0 [pid 5073] mkdir("./130", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5913 ./strace-static-x86_64: Process 5913 attached [pid 5913] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5913] chdir("./130") = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5913] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5913] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5913] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5914 attached , parent_tid=[5914], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5914 [pid 5914] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5913] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... set_robust_list resumed>) = 0 [pid 5914] memfd_create("syzkaller", 0 [pid 5913] <... futex resumed>) = 0 [pid 5914] <... memfd_create resumed>) = 3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5913] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5914] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5914] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5914] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5914] close(3) = 0 [pid 5914] mkdir("./file0", 0777) = 0 [ 143.349480][ T5914] loop4: detected capacity change from 0 to 8192 [ 143.359926][ T5914] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 143.372996][ T5914] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 143.382576][ T5914] REISERFS (device loop4): using ordered data mode [ 143.389194][ T5914] reiserfs: using flush barriers [ 143.395107][ T5914] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.411620][ T5914] REISERFS (device loop4): checking transaction log (loop4) [pid 5914] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5914] chdir("./file0") = 0 [pid 5914] ioctl(4, LOOP_CLR_FD) = 0 [pid 5914] close(4) = 0 [pid 5914] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] <... futex resumed>) = 0 [pid 5913] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... futex resumed>) = 1 [pid 5914] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5914] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] <... futex resumed>) = 0 [pid 5913] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... futex resumed>) = 1 [pid 5914] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5914] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] <... futex resumed>) = 0 [pid 5913] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... futex resumed>) = 1 [ 143.455938][ T5914] REISERFS (device loop4): Using r5 hash to sort names [ 143.463096][ T5914] REISERFS (device loop4): using 3.5.x disk format [ 143.469998][ T5914] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5914] sendfile(4, 5, NULL, 140737974943952 [pid 5913] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5913] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5913] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5913] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5916 attached [pid 5916] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5916] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] <... clone resumed>, parent_tid=[5916], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5916 [pid 5913] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5916] <... futex resumed>) = 0 [pid 5913] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] open("./bus", O_RDONLY [pid 5913] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5913] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5913] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5913] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5917 attached , parent_tid=[5917], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5917 [pid 5917] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5917] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5913] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5917] <... futex resumed>) = 0 [pid 5917] truncate("./bus", 6 [pid 5913] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5913] exit_group(0) = ? [pid 5914] <... sendfile resumed>) = ? [pid 5916] <... open resumed>) = ? [pid 5914] +++ exited with 0 +++ [pid 5916] +++ exited with 0 +++ [pid 5917] <... truncate resumed>) = ? [pid 5917] +++ exited with 0 +++ [pid 5913] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./130/binderfs") = 0 [pid 5073] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./130/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./130") = 0 [pid 5073] mkdir("./131", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5918 ./strace-static-x86_64: Process 5918 attached [pid 5918] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5918] chdir("./131") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5918] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5918] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5918] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5919 attached , parent_tid=[5919], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5919 [pid 5919] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5918] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... set_robust_list resumed>) = 0 [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5919] memfd_create("syzkaller", 0) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5919] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5919] close(3) = 0 [pid 5919] mkdir("./file0", 0777) = 0 [ 144.023482][ T5919] loop4: detected capacity change from 0 to 8192 [ 144.033913][ T5919] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.047351][ T5919] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 144.056822][ T5919] REISERFS (device loop4): using ordered data mode [ 144.063341][ T5919] reiserfs: using flush barriers [ 144.069478][ T5919] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.085835][ T5919] REISERFS (device loop4): checking transaction log (loop4) [pid 5919] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5919] chdir("./file0") = 0 [pid 5919] ioctl(4, LOOP_CLR_FD) = 0 [pid 5919] close(4) = 0 [pid 5919] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] <... futex resumed>) = 0 [pid 5919] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5919] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5919] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 144.132323][ T5919] REISERFS (device loop4): Using r5 hash to sort names [ 144.139369][ T5919] REISERFS (device loop4): using 3.5.x disk format [ 144.146316][ T5919] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5919] sendfile(4, 5, NULL, 140737974943952 [pid 5918] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5918] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5918] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5918] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5918] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5921], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5921 [pid 5918] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5921 attached [pid 5921] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5921] open("./bus", O_RDONLY [pid 5918] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5918] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5918] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5918] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5922], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5922 [pid 5918] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5922 attached [pid 5922] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5922] truncate("./bus", 6 [pid 5918] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5918] exit_group(0) = ? [pid 5919] <... sendfile resumed>) = ? [pid 5922] <... truncate resumed>) = ? [pid 5921] <... open resumed>) = ? [pid 5919] +++ exited with 0 +++ [pid 5922] +++ exited with 0 +++ [pid 5921] +++ exited with 0 +++ [pid 5918] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./131/binderfs") = 0 [pid 5073] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./131/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./131") = 0 [pid 5073] mkdir("./132", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5923 ./strace-static-x86_64: Process 5923 attached [pid 5923] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5923] chdir("./132") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5923] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5923] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5923] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5924], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5924 [pid 5923] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5924] memfd_create("syzkaller", 0) = 3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5924] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5924] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5924] close(3) = 0 [pid 5924] mkdir("./file0", 0777) = 0 [ 144.683649][ T5924] loop4: detected capacity change from 0 to 8192 [ 144.693968][ T5924] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.707178][ T5924] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 144.716364][ T5924] REISERFS (device loop4): using ordered data mode [ 144.722855][ T5924] reiserfs: using flush barriers [ 144.728767][ T5924] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.745018][ T5924] REISERFS (device loop4): checking transaction log (loop4) [pid 5924] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5924] chdir("./file0") = 0 [pid 5924] ioctl(4, LOOP_CLR_FD) = 0 [pid 5924] close(4) = 0 [pid 5924] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = 0 [pid 5923] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = 1 [pid 5924] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5924] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = 0 [pid 5923] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = 1 [pid 5924] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5924] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = 0 [pid 5923] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = 1 [ 144.782749][ T5924] REISERFS (device loop4): Using r5 hash to sort names [ 144.789827][ T5924] REISERFS (device loop4): using 3.5.x disk format [ 144.796591][ T5924] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5924] sendfile(4, 5, NULL, 140737974943952 [pid 5923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5923] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5923] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5923] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5923] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5926 attached , parent_tid=[5926], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5926 [pid 5923] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5926] open("./bus", O_RDONLY [pid 5923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5923] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5923] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5923] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5923] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5927 attached , parent_tid=[5927], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5927 [pid 5927] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5927] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5923] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5927] truncate("./bus", 6 [pid 5923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5923] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5923] exit_group(0) = ? [pid 5924] <... sendfile resumed>) = ? [pid 5924] +++ exited with 0 +++ [pid 5926] <... open resumed>) = ? [pid 5927] <... truncate resumed>) = ? [pid 5926] +++ exited with 0 +++ [pid 5927] +++ exited with 0 +++ [pid 5923] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./132/binderfs") = 0 [pid 5073] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 145.168626][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 145.168642][ T27] audit: type=1804 audit(1671282368.573:488): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/132/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 145.197946][ T27] audit: type=1800 audit(1671282368.573:489): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./132/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./132") = 0 [pid 5073] mkdir("./133", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5928 ./strace-static-x86_64: Process 5928 attached [pid 5928] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5928] chdir("./133") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5928] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5928] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5928] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5929], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5929 [pid 5928] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5929 attached [pid 5929] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5929] memfd_create("syzkaller", 0) = 3 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5929] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5929] close(3) = 0 [pid 5929] mkdir("./file0", 0777) = 0 [ 145.321634][ T5929] loop4: detected capacity change from 0 to 8192 [ 145.331852][ T5929] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.345077][ T5929] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 145.355118][ T5929] REISERFS (device loop4): using ordered data mode [ 145.362322][ T5929] reiserfs: using flush barriers [ 145.368169][ T5929] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.384537][ T5929] REISERFS (device loop4): checking transaction log (loop4) [pid 5929] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5929] chdir("./file0") = 0 [pid 5929] ioctl(4, LOOP_CLR_FD) = 0 [pid 5929] close(4) = 0 [pid 5929] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5928] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5929] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5929] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 145.427559][ T5929] REISERFS (device loop4): Using r5 hash to sort names [ 145.434469][ T5929] REISERFS (device loop4): using 3.5.x disk format [ 145.441336][ T5929] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5929] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] <... futex resumed>) = 0 [pid 5928] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5928] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5929] <... futex resumed>) = 0 [pid 5929] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5929] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5928] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 145.464393][ T27] audit: type=1800 audit(1671282368.863:490): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5929] sendfile(4, 5, NULL, 140737974943952 [pid 5928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5928] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5928] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5928] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5931 attached , parent_tid=[5931], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5931 [pid 5931] set_robust_list(0x7fe8f42d09e0, 24 [pid 5928] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] <... set_robust_list resumed>) = 0 [pid 5931] open("./bus", O_RDONLY [pid 5928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5928] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5928] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5928] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5932 attached , parent_tid=[5932], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5932 [pid 5932] set_robust_list(0x7fe8f42af9e0, 24 [pid 5928] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5928] <... futex resumed>) = 0 [pid 5932] truncate("./bus", 6 [pid 5928] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5928] exit_group(0) = ? [pid 5929] <... sendfile resumed>) = ? [pid 5931] <... open resumed>) = ? [pid 5931] +++ exited with 0 +++ [pid 5932] <... truncate resumed>) = ? [pid 5932] +++ exited with 0 +++ [pid 5929] +++ exited with 0 +++ [pid 5928] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./133/binderfs") = 0 [pid 5073] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./133/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./133") = 0 [pid 5073] mkdir("./134", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 145.838796][ T27] audit: type=1804 audit(1671282369.243:491): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/133/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 145.861975][ T27] audit: type=1800 audit(1671282369.243:492): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5933 ./strace-static-x86_64: Process 5933 attached [pid 5933] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5933] chdir("./134") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5933] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5933] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5934], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5934 [pid 5933] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5934 attached [pid 5934] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5934] memfd_create("syzkaller", 0) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5934] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5934] close(3) = 0 [pid 5934] mkdir("./file0", 0777) = 0 [ 145.974615][ T5934] loop4: detected capacity change from 0 to 8192 [ 145.985749][ T5934] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.999342][ T5934] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 146.008643][ T5934] REISERFS (device loop4): using ordered data mode [ 146.015352][ T5934] reiserfs: using flush barriers [ 146.021497][ T5934] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.038142][ T5934] REISERFS (device loop4): checking transaction log (loop4) [pid 5934] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5934] chdir("./file0") = 0 [pid 5934] ioctl(4, LOOP_CLR_FD) = 0 [pid 5934] close(4) = 0 [pid 5934] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5934] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] <... futex resumed>) = 0 [pid 5933] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... futex resumed>) = 0 [pid 5933] <... futex resumed>) = 1 [pid 5934] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5933] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5934] <... open resumed>) = 4 [pid 5934] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5934] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... futex resumed>) = 0 [pid 5933] <... futex resumed>) = 1 [pid 5934] openat(-1, "/proc/self/exe", O_RDONLY [pid 5933] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5934] <... openat resumed>) = 5 [pid 5934] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5934] sendfile(4, 5, NULL, 140737974943952 [pid 5933] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 146.075641][ T5934] REISERFS (device loop4): Using r5 hash to sort names [ 146.082756][ T5934] REISERFS (device loop4): using 3.5.x disk format [ 146.089634][ T5934] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 146.108058][ T27] audit: type=1800 audit(1671282369.513:493): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5933] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5933] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5933] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5933] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5936 attached , parent_tid=[5936], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5936 [pid 5936] set_robust_list(0x7fe8f42d09e0, 24 [pid 5933] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... set_robust_list resumed>) = 0 [pid 5936] open("./bus", O_RDONLY [pid 5933] <... futex resumed>) = 0 [pid 5933] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5933] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5933] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5933] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5937], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5937 [pid 5933] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5937] truncate("./bus", 6 [pid 5933] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5933] exit_group(0) = ? [pid 5934] <... sendfile resumed>) = ? [pid 5936] <... open resumed>) = ? [pid 5934] +++ exited with 0 +++ [pid 5936] +++ exited with 0 +++ [pid 5937] <... truncate resumed>) = ? [pid 5937] +++ exited with 0 +++ [pid 5933] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./134/binderfs") = 0 [pid 5073] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 146.498942][ T27] audit: type=1804 audit(1671282369.903:494): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/134/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 146.523295][ T27] audit: type=1800 audit(1671282369.903:495): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./134/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./134") = 0 [pid 5073] mkdir("./135", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5938 ./strace-static-x86_64: Process 5938 attached [pid 5938] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5938] chdir("./135") = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5938] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5938] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5938] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5939 attached , parent_tid=[5939], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5939 [pid 5938] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5939] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5939] memfd_create("syzkaller", 0) = 3 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5939] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5939] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5939] close(3) = 0 [pid 5939] mkdir("./file0", 0777) = 0 [ 146.662318][ T5939] loop4: detected capacity change from 0 to 8192 [ 146.672217][ T5939] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.685388][ T5939] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 146.694677][ T5939] REISERFS (device loop4): using ordered data mode [ 146.701256][ T5939] reiserfs: using flush barriers [ 146.707183][ T5939] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.723834][ T5939] REISERFS (device loop4): checking transaction log (loop4) [pid 5939] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5939] chdir("./file0") = 0 [pid 5939] ioctl(4, LOOP_CLR_FD) = 0 [pid 5939] close(4) = 0 [pid 5939] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5938] <... futex resumed>) = 0 [pid 5938] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5938] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 0 [pid 5939] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5939] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... futex resumed>) = 0 [pid 5938] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 1 [pid 5939] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5939] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... futex resumed>) = 0 [pid 5938] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 1 [ 146.766618][ T5939] REISERFS (device loop4): Using r5 hash to sort names [ 146.773618][ T5939] REISERFS (device loop4): using 3.5.x disk format [ 146.780540][ T5939] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5939] sendfile(4, 5, NULL, 140737974943952 [pid 5938] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5938] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5938] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5938] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5941 attached [pid 5941] set_robust_list(0x7fe8f42d09e0, 24 [pid 5938] <... clone resumed>, parent_tid=[5941], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5941 [pid 5941] <... set_robust_list resumed>) = 0 [pid 5938] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] open("./bus", O_RDONLY [pid 5938] <... futex resumed>) = 0 [ 146.801481][ T27] audit: type=1800 audit(1671282370.203:496): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5938] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5938] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5938] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5938] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5942 attached , parent_tid=[5942], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5942 [pid 5938] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5938] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5942] truncate("./bus", 6 [pid 5938] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5938] exit_group(0) = ? [pid 5939] <... sendfile resumed>) = ? [pid 5942] <... truncate resumed>) = ? [pid 5941] <... open resumed>) = ? [pid 5939] +++ exited with 0 +++ [pid 5942] +++ exited with 0 +++ [pid 5941] +++ exited with 0 +++ [pid 5938] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./135/binderfs") = 0 [ 147.157886][ T27] audit: type=1804 audit(1671282370.563:497): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/135/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./135/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./135") = 0 [pid 5073] mkdir("./136", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5943 ./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5943] chdir("./136") = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] write(3, "1000", 4) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5943] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5943] <... clone resumed>, parent_tid=[5944], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5944 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5943] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5943] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5944] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5944] close(3) = 0 [pid 5944] mkdir("./file0", 0777) = 0 [ 147.297962][ T5944] loop4: detected capacity change from 0 to 8192 [ 147.307886][ T5944] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.320989][ T5944] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 147.330240][ T5944] REISERFS (device loop4): using ordered data mode [ 147.336811][ T5944] reiserfs: using flush barriers [ 147.342459][ T5944] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.358887][ T5944] REISERFS (device loop4): checking transaction log (loop4) [pid 5944] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5944] chdir("./file0") = 0 [pid 5944] ioctl(4, LOOP_CLR_FD) = 0 [pid 5944] close(4) = 0 [pid 5944] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = 0 [pid 5943] <... futex resumed>) = 1 [pid 5944] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5943] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... open resumed>) = 4 [pid 5944] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] openat(-1, "/proc/self/exe", O_RDONLY [pid 5943] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... openat resumed>) = 5 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5944] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = 0 [pid 5943] <... futex resumed>) = 1 [pid 5944] sendfile(4, 5, NULL, 140737974943952 [ 147.395933][ T5944] REISERFS (device loop4): Using r5 hash to sort names [ 147.402859][ T5944] REISERFS (device loop4): using 3.5.x disk format [ 147.410066][ T5944] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5943] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5943] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5943] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5943] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5946 attached , parent_tid=[5946], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5946 [pid 5943] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5946] set_robust_list(0x7fe8f42d09e0, 24 [pid 5943] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... set_robust_list resumed>) = 0 [pid 5946] open("./bus", O_RDONLY [pid 5943] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5943] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5943] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5943] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5947], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5947 [pid 5943] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5947 attached [pid 5947] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5947] truncate("./bus", 6 [pid 5943] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5943] exit_group(0) = ? [pid 5944] <... sendfile resumed>) = ? [pid 5946] <... open resumed>) = ? [pid 5944] +++ exited with 0 +++ [pid 5947] <... truncate resumed>) = ? [pid 5946] +++ exited with 0 +++ [pid 5947] +++ exited with 0 +++ [pid 5943] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./136/binderfs") = 0 [pid 5073] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./136/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./136") = 0 [pid 5073] mkdir("./137", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5948 ./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5948] chdir("./137") = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5948] write(3, "1000", 4) = 4 [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5948] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5948] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5948] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5949], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5949 [pid 5948] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5949 attached [pid 5949] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5949] memfd_create("syzkaller", 0) = 3 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5949] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5949] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5949] close(3) = 0 [pid 5949] mkdir("./file0", 0777) = 0 [ 147.889943][ T5949] loop4: detected capacity change from 0 to 8192 [ 147.900192][ T5949] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.913247][ T5949] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 147.922529][ T5949] REISERFS (device loop4): using ordered data mode [ 147.929095][ T5949] reiserfs: using flush barriers [ 147.934738][ T5949] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.951226][ T5949] REISERFS (device loop4): checking transaction log (loop4) [pid 5949] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5949] chdir("./file0") = 0 [pid 5949] ioctl(4, LOOP_CLR_FD) = 0 [pid 5949] close(4) = 0 [pid 5949] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5948] <... futex resumed>) = 0 [pid 5949] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5948] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] <... open resumed>) = 4 [pid 5948] <... futex resumed>) = 0 [pid 5949] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5949] <... futex resumed>) = 0 [pid 5948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] openat(-1, "/proc/self/exe", O_RDONLY [pid 5948] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] <... openat resumed>) = 5 [pid 5948] <... futex resumed>) = 0 [pid 5949] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5949] <... futex resumed>) = 0 [pid 5948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] sendfile(4, 5, NULL, 140737974943952 [pid 5948] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.989077][ T5949] REISERFS (device loop4): Using r5 hash to sort names [ 147.996025][ T5949] REISERFS (device loop4): using 3.5.x disk format [ 148.002790][ T5949] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5948] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5948] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5948] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5948] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5951 attached [pid 5951] set_robust_list(0x7fe8f42d09e0, 24 [pid 5948] <... clone resumed>, parent_tid=[5951], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5951 [pid 5951] <... set_robust_list resumed>) = 0 [pid 5948] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5951] open("./bus", O_RDONLY [pid 5948] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5948] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5948] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5948] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5952 attached , parent_tid=[5952], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5952 [pid 5952] set_robust_list(0x7fe8f42af9e0, 24 [pid 5948] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... set_robust_list resumed>) = 0 [pid 5952] truncate("./bus", 6 [pid 5948] <... futex resumed>) = 0 [pid 5948] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5948] exit_group(0) = ? [pid 5949] <... sendfile resumed>) = ? [pid 5951] <... open resumed>) = ? [pid 5951] +++ exited with 0 +++ [pid 5949] +++ exited with 0 +++ [pid 5952] <... truncate resumed>) = ? [pid 5952] +++ exited with 0 +++ [pid 5948] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./137/binderfs") = 0 [pid 5073] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./137/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./137") = 0 [pid 5073] mkdir("./138", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5953 ./strace-static-x86_64: Process 5953 attached [pid 5953] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5953] chdir("./138") = 0 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5953] setpgid(0, 0) = 0 [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5953] write(3, "1000", 4) = 4 [pid 5953] close(3) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5953] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5953] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5953] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5954], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5954 [pid 5953] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5954 attached [pid 5954] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5954] memfd_create("syzkaller", 0) = 3 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5954] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5954] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5954] close(3) = 0 [pid 5954] mkdir("./file0", 0777) = 0 [ 148.541267][ T5954] loop4: detected capacity change from 0 to 8192 [ 148.551631][ T5954] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.564695][ T5954] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 148.573929][ T5954] REISERFS (device loop4): using ordered data mode [ 148.580487][ T5954] reiserfs: using flush barriers [ 148.586363][ T5954] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.602636][ T5954] REISERFS (device loop4): checking transaction log (loop4) [pid 5954] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5954] chdir("./file0") = 0 [pid 5954] ioctl(4, LOOP_CLR_FD) = 0 [pid 5954] close(4) = 0 [pid 5954] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... futex resumed>) = 0 [pid 5953] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... futex resumed>) = 1 [pid 5954] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5954] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... futex resumed>) = 0 [pid 5953] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... futex resumed>) = 1 [pid 5954] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5954] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... futex resumed>) = 0 [pid 5953] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... futex resumed>) = 1 [ 148.641331][ T5954] REISERFS (device loop4): Using r5 hash to sort names [ 148.648549][ T5954] REISERFS (device loop4): using 3.5.x disk format [ 148.655781][ T5954] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5954] sendfile(4, 5, NULL, 140737974943952 [pid 5953] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5953] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5953] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5953] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5953] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5956 attached , parent_tid=[5956], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5956 [pid 5953] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] set_robust_list(0x7fe8f42d09e0, 24 [pid 5953] <... futex resumed>) = 0 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5953] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] open("./bus", O_RDONLY [pid 5953] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5953] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5953] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5953] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5957], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5957 [pid 5953] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5953] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5957 attached [pid 5957] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5957] truncate("./bus", 6 [pid 5953] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5953] exit_group(0) = ? [pid 5954] <... sendfile resumed>) = ? [pid 5956] <... open resumed>) = ? [pid 5954] +++ exited with 0 +++ [pid 5956] +++ exited with 0 +++ [pid 5957] <... truncate resumed>) = ? [pid 5957] +++ exited with 0 +++ [pid 5953] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./138/binderfs") = 0 [pid 5073] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./138/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./138") = 0 [pid 5073] mkdir("./139", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5958 ./strace-static-x86_64: Process 5958 attached [pid 5958] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5958] chdir("./139") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5958] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5958] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5959], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5959 [pid 5958] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5959 attached [pid 5959] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5959] memfd_create("syzkaller", 0) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5959] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5959] close(3) = 0 [pid 5959] mkdir("./file0", 0777) = 0 [ 149.162996][ T5959] loop4: detected capacity change from 0 to 8192 [ 149.173323][ T5959] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.186628][ T5959] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 149.195894][ T5959] REISERFS (device loop4): using ordered data mode [ 149.202511][ T5959] reiserfs: using flush barriers [ 149.208982][ T5959] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.225330][ T5959] REISERFS (device loop4): checking transaction log (loop4) [pid 5959] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5959] chdir("./file0") = 0 [pid 5959] ioctl(4, LOOP_CLR_FD) = 0 [pid 5959] close(4) = 0 [pid 5959] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... futex resumed>) = 1 [pid 5959] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5959] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... futex resumed>) = 1 [pid 5959] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5959] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... futex resumed>) = 1 [ 149.267459][ T5959] REISERFS (device loop4): Using r5 hash to sort names [ 149.274526][ T5959] REISERFS (device loop4): using 3.5.x disk format [ 149.281447][ T5959] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5959] sendfile(4, 5, NULL, 140737974943952 [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5958] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5958] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5961], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5961 [pid 5958] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5961 attached [pid 5961] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5961] open("./bus", O_RDONLY [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5958] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5958] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5962], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5962 [pid 5958] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5962] truncate("./bus", 6 [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5958] exit_group(0) = ? [pid 5959] <... sendfile resumed>) = ? [pid 5961] <... open resumed>) = ? [pid 5959] +++ exited with 0 +++ [pid 5962] <... truncate resumed>) = ? [pid 5962] +++ exited with 0 +++ [pid 5961] +++ exited with 0 +++ [pid 5958] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5073] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./139/binderfs") = 0 [pid 5073] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./139/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./139") = 0 [pid 5073] mkdir("./140", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5963 ./strace-static-x86_64: Process 5963 attached [pid 5963] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5963] chdir("./140") = 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5963] setpgid(0, 0) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5963] write(3, "1000", 4) = 4 [pid 5963] close(3) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5963] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5963] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5963] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5964], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5964 ./strace-static-x86_64: Process 5964 attached [pid 5963] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5964] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5963] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5964] <... set_robust_list resumed>) = 0 [pid 5964] memfd_create("syzkaller", 0) = 3 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5964] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5964] close(3) = 0 [pid 5964] mkdir("./file0", 0777) = 0 [ 149.777599][ T5964] loop4: detected capacity change from 0 to 8192 [ 149.787536][ T5964] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.800601][ T5964] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 149.809926][ T5964] REISERFS (device loop4): using ordered data mode [ 149.816531][ T5964] reiserfs: using flush barriers [ 149.822347][ T5964] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.839075][ T5964] REISERFS (device loop4): checking transaction log (loop4) [pid 5964] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5964] chdir("./file0") = 0 [pid 5964] ioctl(4, LOOP_CLR_FD) = 0 [pid 5964] close(4) = 0 [pid 5964] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5963] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... open resumed>) = 4 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] openat(-1, "/proc/self/exe", O_RDONLY [pid 5963] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... openat resumed>) = 5 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] sendfile(4, 5, NULL, 140737974943952 [pid 5963] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 149.876289][ T5964] REISERFS (device loop4): Using r5 hash to sort names [ 149.883210][ T5964] REISERFS (device loop4): using 3.5.x disk format [ 149.890097][ T5964] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5963] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5963] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5963] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5963] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5963] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5966], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5966 [pid 5963] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5966] open("./bus", O_RDONLY [pid 5963] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5963] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5963] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5963] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5967], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5967 [pid 5963] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5967] truncate("./bus", 6 [pid 5963] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5963] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5963] exit_group(0) = ? [pid 5964] <... sendfile resumed>) = ? [pid 5966] <... open resumed>) = ? [pid 5964] +++ exited with 0 +++ [pid 5967] <... truncate resumed>) = ? [pid 5967] +++ exited with 0 +++ [pid 5966] +++ exited with 0 +++ [pid 5963] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./140/binderfs") = 0 [ 150.308392][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 150.308410][ T27] audit: type=1804 audit(1671282373.713:512): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/140/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./140/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./140") = 0 [pid 5073] mkdir("./141", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 150.339277][ T27] audit: type=1800 audit(1671282373.713:513): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5968 ./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5968] chdir("./141") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5968] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5968] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5968] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5969], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5969 [pid 5968] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5969 attached [pid 5969] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5969] memfd_create("syzkaller", 0) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5969] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5969] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5969] close(3) = 0 [pid 5969] mkdir("./file0", 0777) = 0 [ 150.460157][ T5969] loop4: detected capacity change from 0 to 8192 [ 150.469777][ T5969] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.482869][ T5969] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 150.492091][ T5969] REISERFS (device loop4): using ordered data mode [ 150.498760][ T5969] reiserfs: using flush barriers [ 150.504706][ T5969] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.521252][ T5969] REISERFS (device loop4): checking transaction log (loop4) [pid 5969] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5969] chdir("./file0") = 0 [pid 5969] ioctl(4, LOOP_CLR_FD) = 0 [pid 5969] close(4) = 0 [pid 5969] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = 0 [pid 5968] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] <... futex resumed>) = 1 [pid 5969] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5969] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = 0 [pid 5968] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5969] <... futex resumed>) = 1 [pid 5969] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5969] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5968] <... futex resumed>) = 0 [pid 5969] sendfile(4, 5, NULL, 140737974943952 [pid 5968] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 150.572072][ T5969] REISERFS (device loop4): Using r5 hash to sort names [ 150.579077][ T5969] REISERFS (device loop4): using 3.5.x disk format [ 150.585897][ T5969] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5968] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5968] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5968] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5968] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5971 attached , parent_tid=[5971], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5971 [ 150.603350][ T27] audit: type=1800 audit(1671282374.003:514): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5971] set_robust_list(0x7fe8f42d09e0, 24 [pid 5968] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... set_robust_list resumed>) = 0 [pid 5968] <... futex resumed>) = 0 [pid 5971] open("./bus", O_RDONLY [pid 5968] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5968] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5968] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5968] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5972 attached , parent_tid=[5972], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5972 [pid 5972] set_robust_list(0x7fe8f42af9e0, 24 [pid 5968] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... set_robust_list resumed>) = 0 [pid 5968] <... futex resumed>) = 0 [pid 5972] truncate("./bus", 6 [pid 5968] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5968] exit_group(0) = ? [pid 5969] <... sendfile resumed>) = ? [pid 5971] <... open resumed>) = ? [pid 5969] +++ exited with 0 +++ [pid 5972] <... truncate resumed>) = ? [pid 5972] +++ exited with 0 +++ [pid 5971] +++ exited with 0 +++ [pid 5968] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./141/binderfs") = 0 [pid 5073] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 150.948639][ T27] audit: type=1804 audit(1671282374.353:515): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/141/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 150.972388][ T27] audit: type=1800 audit(1671282374.353:516): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./141/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./141") = 0 [pid 5073] mkdir("./142", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5973 ./strace-static-x86_64: Process 5973 attached [pid 5973] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5973] chdir("./142") = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5973] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5973] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5974], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5974 [pid 5973] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5974 attached [pid 5974] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5974] memfd_create("syzkaller", 0) = 3 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5974] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5974] close(3) = 0 [pid 5974] mkdir("./file0", 0777) = 0 [ 151.094797][ T5974] loop4: detected capacity change from 0 to 8192 [ 151.105618][ T5974] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.118624][ T5974] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 151.128164][ T5974] REISERFS (device loop4): using ordered data mode [ 151.134655][ T5974] reiserfs: using flush barriers [ 151.140646][ T5974] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.157365][ T5974] REISERFS (device loop4): checking transaction log (loop4) [pid 5974] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5974] chdir("./file0") = 0 [pid 5974] ioctl(4, LOOP_CLR_FD) = 0 [pid 5974] close(4) = 0 [pid 5974] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] <... futex resumed>) = 0 [pid 5973] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... futex resumed>) = 1 [pid 5974] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5974] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5974] openat(-1, "/proc/self/exe", O_RDONLY [pid 5973] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5974] <... openat resumed>) = 5 [pid 5973] <... futex resumed>) = 0 [pid 5974] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... futex resumed>) = 0 [pid 5973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] sendfile(4, 5, NULL, 140737974943952 [pid 5973] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 151.195233][ T5974] REISERFS (device loop4): Using r5 hash to sort names [ 151.202286][ T5974] REISERFS (device loop4): using 3.5.x disk format [ 151.209171][ T5974] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 151.223570][ T27] audit: type=1800 audit(1671282374.623:517): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5973] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5973] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5973] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5973] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5976], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5976 [pid 5973] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5976 attached [pid 5976] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5976] open("./bus", O_RDONLY [pid 5973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5973] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5973] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5977 attached , parent_tid=[5977], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5977 [pid 5973] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5977] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5977] truncate("./bus", 6 [pid 5973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5973] exit_group(0) = ? [pid 5974] <... sendfile resumed>) = ? [pid 5976] <... open resumed>) = ? [pid 5974] +++ exited with 0 +++ [pid 5976] +++ exited with 0 +++ [pid 5977] <... truncate resumed>) = ? [pid 5977] +++ exited with 0 +++ [pid 5973] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./142/binderfs") = 0 [pid 5073] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 151.588298][ T27] audit: type=1804 audit(1671282374.993:518): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/142/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 151.611542][ T27] audit: type=1800 audit(1671282374.993:519): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./142/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./142") = 0 [pid 5073] mkdir("./143", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5978 ./strace-static-x86_64: Process 5978 attached [pid 5978] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5978] chdir("./143") = 0 [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5978] setpgid(0, 0) = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5978] write(3, "1000", 4) = 4 [pid 5978] close(3) = 0 [pid 5978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5978] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5978] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5978] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5978] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5979 attached , parent_tid=[5979], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5979 [pid 5979] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5978] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5978] <... futex resumed>) = 0 [pid 5978] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5979] memfd_create("syzkaller", 0) = 3 [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5979] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5979] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5979] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5979] close(3) = 0 [pid 5979] mkdir("./file0", 0777) = 0 [ 151.756205][ T5979] loop4: detected capacity change from 0 to 8192 [ 151.767125][ T5979] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.780214][ T5979] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 151.789830][ T5979] REISERFS (device loop4): using ordered data mode [ 151.796713][ T5979] reiserfs: using flush barriers [ 151.803257][ T5979] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.819592][ T5979] REISERFS (device loop4): checking transaction log (loop4) [pid 5979] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5979] chdir("./file0") = 0 [pid 5979] ioctl(4, LOOP_CLR_FD) = 0 [pid 5979] close(4) = 0 [pid 5979] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] <... futex resumed>) = 0 [pid 5978] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5978] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5979] <... futex resumed>) = 1 [pid 5979] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5979] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] <... futex resumed>) = 0 [pid 5979] <... futex resumed>) = 1 [pid 5978] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5979] openat(-1, "/proc/self/exe", O_RDONLY [pid 5978] <... futex resumed>) = 0 [ 151.863390][ T5979] REISERFS (device loop4): Using r5 hash to sort names [ 151.870490][ T5979] REISERFS (device loop4): using 3.5.x disk format [ 151.877656][ T5979] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5979] <... openat resumed>) = 5 [pid 5978] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5979] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5978] <... futex resumed>) = 0 [pid 5979] sendfile(4, 5, NULL, 140737974943952 [pid 5978] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5978] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5978] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5978] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5978] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5978] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5981], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5981 ./strace-static-x86_64: Process 5981 attached [pid 5978] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5978] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5981] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 151.902470][ T27] audit: type=1800 audit(1671282375.303:520): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5981] open("./bus", O_RDONLY [pid 5978] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5978] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5978] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5978] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5978] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5982 attached [pid 5982] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5978] <... clone resumed>, parent_tid=[5982], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5982 [pid 5982] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5978] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5978] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5982] <... futex resumed>) = 0 [pid 5982] truncate("./bus", 6 [pid 5978] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5978] exit_group(0) = ? [pid 5981] <... open resumed>) = ? [pid 5979] <... sendfile resumed>) = ? [pid 5981] +++ exited with 0 +++ [pid 5982] <... truncate resumed>) = ? [pid 5982] +++ exited with 0 +++ [pid 5979] +++ exited with 0 +++ [pid 5978] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./143/binderfs") = 0 [ 152.258375][ T27] audit: type=1804 audit(1671282375.663:521): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/143/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./143/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./143") = 0 [pid 5073] mkdir("./144", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5983 attached , child_tidptr=0x5555558b65d0) = 5983 [pid 5983] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5983] chdir("./144") = 0 [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5983] setpgid(0, 0) = 0 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5983] write(3, "1000", 4) = 4 [pid 5983] close(3) = 0 [pid 5983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5983] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5983] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5983] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5984], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5984 [pid 5983] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5984 attached [pid 5984] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5984] memfd_create("syzkaller", 0) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5984] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5984] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5984] close(3) = 0 [pid 5984] mkdir("./file0", 0777) = 0 [ 152.398716][ T5984] loop4: detected capacity change from 0 to 8192 [ 152.408944][ T5984] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.422180][ T5984] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 152.431518][ T5984] REISERFS (device loop4): using ordered data mode [ 152.438089][ T5984] reiserfs: using flush barriers [ 152.443771][ T5984] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.460293][ T5984] REISERFS (device loop4): checking transaction log (loop4) [pid 5984] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5984] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5984] chdir("./file0") = 0 [pid 5984] ioctl(4, LOOP_CLR_FD) = 0 [pid 5984] close(4) = 0 [pid 5984] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5983] <... futex resumed>) = 0 [pid 5983] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5983] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 0 [pid 5984] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5984] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = 0 [pid 5983] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 1 [pid 5984] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5984] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5983] <... futex resumed>) = 0 [pid 5984] sendfile(4, 5, NULL, 140737974943952 [pid 5983] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 152.497789][ T5984] REISERFS (device loop4): Using r5 hash to sort names [ 152.504753][ T5984] REISERFS (device loop4): using 3.5.x disk format [ 152.511666][ T5984] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5983] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5983] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5983] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5983] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5986], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5986 [pid 5983] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5986 attached [pid 5986] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5986] open("./bus", O_RDONLY [pid 5983] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5983] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5983] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5983] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5987 attached , parent_tid=[5987], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5987 [pid 5987] set_robust_list(0x7fe8f42af9e0, 24 [pid 5983] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] <... set_robust_list resumed>) = 0 [pid 5983] <... futex resumed>) = 0 [pid 5987] truncate("./bus", 6 [pid 5983] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5983] exit_group(0) = ? [pid 5984] <... sendfile resumed>) = ? [pid 5986] <... open resumed>) = ? [pid 5984] +++ exited with 0 +++ [pid 5986] +++ exited with 0 +++ [pid 5987] <... truncate resumed>) = ? [pid 5987] +++ exited with 0 +++ [pid 5983] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./144/binderfs") = 0 [pid 5073] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./144/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./144") = 0 [pid 5073] mkdir("./145", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5988 ./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5988] chdir("./145") = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5988] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5988] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5988] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5989], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5989 [pid 5988] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5989 attached [pid 5989] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5989] memfd_create("syzkaller", 0) = 3 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5989] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5989] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5989] close(3) = 0 [pid 5989] mkdir("./file0", 0777) = 0 [ 152.992180][ T5989] loop4: detected capacity change from 0 to 8192 [ 153.003006][ T5989] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.016094][ T5989] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 153.025374][ T5989] REISERFS (device loop4): using ordered data mode [ 153.031940][ T5989] reiserfs: using flush barriers [ 153.038337][ T5989] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.055578][ T5989] REISERFS (device loop4): checking transaction log (loop4) [pid 5989] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5989] chdir("./file0") = 0 [pid 5989] ioctl(4, LOOP_CLR_FD) = 0 [pid 5989] close(4) = 0 [pid 5989] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5988] <... futex resumed>) = 0 [pid 5989] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5988] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... open resumed>) = 4 [pid 5988] <... futex resumed>) = 0 [pid 5989] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = 0 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] openat(-1, "/proc/self/exe", O_RDONLY [pid 5988] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... openat resumed>) = 5 [pid 5988] <... futex resumed>) = 0 [pid 5989] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = 0 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] sendfile(4, 5, NULL, 140737974943952 [pid 5988] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 153.097910][ T5989] REISERFS (device loop4): Using r5 hash to sort names [ 153.105041][ T5989] REISERFS (device loop4): using 3.5.x disk format [ 153.112470][ T5989] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5988] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5988] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5988] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5988] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5991 attached , parent_tid=[5991], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5991 [pid 5991] set_robust_list(0x7fe8f42d09e0, 24 [pid 5988] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... set_robust_list resumed>) = 0 [pid 5988] <... futex resumed>) = 0 [pid 5991] open("./bus", O_RDONLY [pid 5988] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5988] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5988] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5988] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5992], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5992 [pid 5988] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5988] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5992 attached [pid 5992] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5992] truncate("./bus", 6 [pid 5988] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5988] exit_group(0) = ? [pid 5989] <... sendfile resumed>) = ? [pid 5991] <... open resumed>) = ? [pid 5992] <... truncate resumed>) = ? [pid 5989] +++ exited with 0 +++ [pid 5992] +++ exited with 0 +++ [pid 5991] +++ exited with 0 +++ [pid 5988] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./145/binderfs") = 0 [pid 5073] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./145/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./145") = 0 [pid 5073] mkdir("./146", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5993 ./strace-static-x86_64: Process 5993 attached [pid 5993] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5993] chdir("./146") = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5993] setpgid(0, 0) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5993] write(3, "1000", 4) = 4 [pid 5993] close(3) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5993] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5993] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5993] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5994], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5994 ./strace-static-x86_64: Process 5994 attached [pid 5993] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5994] set_robust_list(0x7fe8fc2f19e0, 24 [pid 5993] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5994] <... set_robust_list resumed>) = 0 [pid 5994] memfd_create("syzkaller", 0) = 3 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5994] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5994] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5994] close(3) = 0 [pid 5994] mkdir("./file0", 0777) = 0 [ 153.612346][ T5994] loop4: detected capacity change from 0 to 8192 [ 153.622109][ T5994] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.635134][ T5994] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 153.644723][ T5994] REISERFS (device loop4): using ordered data mode [ 153.651364][ T5994] reiserfs: using flush barriers [ 153.657190][ T5994] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.673680][ T5994] REISERFS (device loop4): checking transaction log (loop4) [pid 5994] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5994] chdir("./file0") = 0 [pid 5994] ioctl(4, LOOP_CLR_FD) = 0 [pid 5994] close(4) = 0 [pid 5994] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5994] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] <... futex resumed>) = 0 [pid 5993] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5993] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5994] <... futex resumed>) = 0 [pid 5994] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5994] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... futex resumed>) = 0 [pid 5993] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5994] <... futex resumed>) = 1 [pid 5994] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 5994] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... futex resumed>) = 0 [pid 5993] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5994] <... futex resumed>) = 1 [ 153.714833][ T5994] REISERFS (device loop4): Using r5 hash to sort names [ 153.721956][ T5994] REISERFS (device loop4): using 3.5.x disk format [ 153.728992][ T5994] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5994] sendfile(4, 5, NULL, 140737974943952 [pid 5993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5993] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5993] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5993] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5996 attached , parent_tid=[5996], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 5996 [pid 5996] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 5996] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5993] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 0 [pid 5996] open("./bus", O_RDONLY [pid 5993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5993] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5993] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5993] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5993] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5997], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 5997 [pid 5993] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5997 attached [pid 5997] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 5997] truncate("./bus", 6 [pid 5993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5993] exit_group(0) = ? [pid 5996] <... open resumed>) = ? [pid 5994] <... sendfile resumed>) = ? [pid 5997] <... truncate resumed>) = ? [pid 5996] +++ exited with 0 +++ [pid 5994] +++ exited with 0 +++ [pid 5997] +++ exited with 0 +++ [pid 5993] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./146/binderfs") = 0 [pid 5073] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./146/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./146") = 0 [pid 5073] mkdir("./147", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 5998 ./strace-static-x86_64: Process 5998 attached [pid 5998] set_robust_list(0x5555558b65e0, 24) = 0 [pid 5998] chdir("./147") = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5998] setpgid(0, 0) = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5998] write(3, "1000", 4) = 4 [pid 5998] close(3) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5998] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 5998] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5998] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5999 attached , parent_tid=[5999], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 5999 [pid 5998] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5999] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 5999] memfd_create("syzkaller", 0) = 3 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5999] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5999] close(3) = 0 [pid 5999] mkdir("./file0", 0777) = 0 [ 154.238751][ T5999] loop4: detected capacity change from 0 to 8192 [ 154.249062][ T5999] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.262351][ T5999] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 154.272021][ T5999] REISERFS (device loop4): using ordered data mode [ 154.278915][ T5999] reiserfs: using flush barriers [ 154.284731][ T5999] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.301777][ T5999] REISERFS (device loop4): checking transaction log (loop4) [pid 5999] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5999] chdir("./file0") = 0 [pid 5999] ioctl(4, LOOP_CLR_FD) = 0 [pid 5999] close(4) = 0 [pid 5999] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5998] <... futex resumed>) = 0 [pid 5999] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5998] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] <... open resumed>) = 4 [pid 5999] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5998] <... futex resumed>) = 0 [pid 5999] openat(-1, "/proc/self/exe", O_RDONLY [pid 5998] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... openat resumed>) = 5 [pid 5998] <... futex resumed>) = 0 [pid 5999] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] <... futex resumed>) = 0 [pid 5998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5999] sendfile(4, 5, NULL, 140737974943952 [pid 5998] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 154.343980][ T5999] REISERFS (device loop4): Using r5 hash to sort names [ 154.350964][ T5999] REISERFS (device loop4): using 3.5.x disk format [ 154.357770][ T5999] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5998] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5998] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5998] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 5998] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5998] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6001], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6001 [pid 5998] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6001 attached [pid 6001] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6001] open("./bus", O_RDONLY [pid 5998] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5998] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 5998] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5998] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6002], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6002 ./strace-static-x86_64: Process 6002 attached [pid 6002] set_robust_list(0x7fe8f42af9e0, 24 [pid 5998] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... set_robust_list resumed>) = 0 [pid 5998] <... futex resumed>) = 0 [pid 6002] truncate("./bus", 6 [pid 5998] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5998] exit_group(0) = ? [pid 5999] <... sendfile resumed>) = ? [pid 6001] <... open resumed>) = ? [pid 5999] +++ exited with 0 +++ [pid 6002] <... truncate resumed>) = ? [pid 6001] +++ exited with 0 +++ [pid 6002] +++ exited with 0 +++ [pid 5998] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./147/binderfs") = 0 [pid 5073] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./147/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./147") = 0 [pid 5073] mkdir("./148", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6003 ./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6003] chdir("./148") = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6003] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6003] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6003] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6004], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6004 ./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6003] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6004] <... set_robust_list resumed>) = 0 [pid 6004] memfd_create("syzkaller", 0) = 3 [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6004] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6004] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6004] close(3) = 0 [pid 6004] mkdir("./file0", 0777) = 0 [ 154.837148][ T6004] loop4: detected capacity change from 0 to 8192 [ 154.847387][ T6004] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.860453][ T6004] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 154.869826][ T6004] REISERFS (device loop4): using ordered data mode [ 154.876397][ T6004] reiserfs: using flush barriers [ 154.882593][ T6004] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.899455][ T6004] REISERFS (device loop4): checking transaction log (loop4) [pid 6004] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6004] chdir("./file0") = 0 [pid 6004] ioctl(4, LOOP_CLR_FD) = 0 [pid 6004] close(4) = 0 [pid 6004] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... futex resumed>) = 0 [pid 6003] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6004] <... futex resumed>) = 1 [pid 6004] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6004] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... futex resumed>) = 0 [pid 6003] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6004] <... futex resumed>) = 1 [pid 6004] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6004] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... futex resumed>) = 0 [pid 6003] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6004] <... futex resumed>) = 1 [ 154.936513][ T6004] REISERFS (device loop4): Using r5 hash to sort names [ 154.943435][ T6004] REISERFS (device loop4): using 3.5.x disk format [ 154.950314][ T6004] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6004] sendfile(4, 5, NULL, 140737974943952 [pid 6003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6003] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6003] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6006], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6006 [pid 6003] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6006 attached [pid 6006] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6006] open("./bus", O_RDONLY [pid 6003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6003] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6003] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6007], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6007 [pid 6003] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6007 attached [pid 6007] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6007] truncate("./bus", 6 [pid 6003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6003] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6003] exit_group(0) = ? [pid 6004] <... sendfile resumed>) = ? [pid 6006] <... open resumed>) = ? [pid 6004] +++ exited with 0 +++ [pid 6006] +++ exited with 0 +++ [pid 6007] <... truncate resumed>) = ? [pid 6007] +++ exited with 0 +++ [pid 6003] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./148/binderfs") = 0 [ 155.318372][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 155.318386][ T27] audit: type=1804 audit(1671282378.723:536): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/148/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 155.348134][ T27] audit: type=1800 audit(1671282378.723:537): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./148/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./148") = 0 [pid 5073] mkdir("./149", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6008 ./strace-static-x86_64: Process 6008 attached [pid 6008] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6008] chdir("./149") = 0 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6008] setpgid(0, 0) = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6008] write(3, "1000", 4) = 4 [pid 6008] close(3) = 0 [pid 6008] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6008] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6008] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6008] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6009 attached , parent_tid=[6009], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6009 [pid 6008] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6008] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6009] <... set_robust_list resumed>) = 0 [pid 6009] memfd_create("syzkaller", 0) = 3 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6009] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6009] close(3) = 0 [pid 6009] mkdir("./file0", 0777) = 0 [ 155.479059][ T6009] loop4: detected capacity change from 0 to 8192 [ 155.489486][ T6009] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.502554][ T6009] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 155.511852][ T6009] REISERFS (device loop4): using ordered data mode [ 155.518463][ T6009] reiserfs: using flush barriers [ 155.524393][ T6009] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.540875][ T6009] REISERFS (device loop4): checking transaction log (loop4) [pid 6009] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6009] chdir("./file0") = 0 [pid 6009] ioctl(4, LOOP_CLR_FD) = 0 [pid 6009] close(4) = 0 [pid 6009] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = 0 [pid 6008] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6009] <... futex resumed>) = 1 [pid 6009] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6009] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = 0 [pid 6008] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6009] <... futex resumed>) = 1 [pid 6009] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6009] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = 0 [pid 6008] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6009] <... futex resumed>) = 1 [ 155.582962][ T6009] REISERFS (device loop4): Using r5 hash to sort names [ 155.590157][ T6009] REISERFS (device loop4): using 3.5.x disk format [ 155.597176][ T6009] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6009] sendfile(4, 5, NULL, 140737974943952 [pid 6008] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6008] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6008] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6008] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6011], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6011 [pid 6008] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6011 attached [pid 6011] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 155.614655][ T27] audit: type=1800 audit(1671282379.013:538): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6011] open("./bus", O_RDONLY [pid 6008] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6008] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6008] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6008] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6008] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6012], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6012 [pid 6008] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6008] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6012 attached [pid 6012] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6012] truncate("./bus", 6 [pid 6008] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6008] exit_group(0) = ? [pid 6009] <... sendfile resumed>) = ? [pid 6011] <... open resumed>) = ? [pid 6009] +++ exited with 0 +++ [pid 6012] <... truncate resumed>) = ? [pid 6011] +++ exited with 0 +++ [pid 6012] +++ exited with 0 +++ [pid 6008] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./149/binderfs") = 0 [ 155.968929][ T27] audit: type=1804 audit(1671282379.373:539): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/149/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 155.992691][ T27] audit: type=1800 audit(1671282379.373:540): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./149/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./149") = 0 [pid 5073] mkdir("./150", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6013 ./strace-static-x86_64: Process 6013 attached [pid 6013] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6013] chdir("./150") = 0 [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] setpgid(0, 0) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6013] write(3, "1000", 4) = 4 [pid 6013] close(3) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6013] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6013] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6013] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6014], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6014 [pid 6013] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6014 attached [pid 6014] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6014] memfd_create("syzkaller", 0) = 3 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6014] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6014] close(3) = 0 [pid 6014] mkdir("./file0", 0777) = 0 [ 156.134576][ T6014] loop4: detected capacity change from 0 to 8192 [ 156.144673][ T6014] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 156.157805][ T6014] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 156.167160][ T6014] REISERFS (device loop4): using ordered data mode [ 156.173688][ T6014] reiserfs: using flush barriers [ 156.179751][ T6014] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.196140][ T6014] REISERFS (device loop4): checking transaction log (loop4) [pid 6014] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6014] chdir("./file0") = 0 [pid 6014] ioctl(4, LOOP_CLR_FD) = 0 [pid 6014] close(4) = 0 [pid 6014] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] <... futex resumed>) = 0 [pid 6014] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6013] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6013] <... futex resumed>) = 0 [pid 6014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 156.233579][ T6014] REISERFS (device loop4): Using r5 hash to sort names [ 156.240525][ T6014] REISERFS (device loop4): using 3.5.x disk format [ 156.247307][ T6014] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6013] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... open resumed>) = 4 [pid 6014] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] <... futex resumed>) = 0 [pid 6014] openat(-1, "/proc/self/exe", O_RDONLY [pid 6013] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... openat resumed>) = 5 [pid 6013] <... futex resumed>) = 0 [pid 6014] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... futex resumed>) = 0 [pid 6013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6014] sendfile(4, 5, NULL, 140737974943952 [pid 6013] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 156.264500][ T27] audit: type=1800 audit(1671282379.663:541): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6013] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6013] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6013] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6013] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6016 attached , parent_tid=[6016], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6016 [pid 6016] set_robust_list(0x7fe8f42d09e0, 24 [pid 6013] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... set_robust_list resumed>) = 0 [pid 6013] <... futex resumed>) = 0 [pid 6016] open("./bus", O_RDONLY [pid 6013] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6013] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6013] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6013] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6017], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6017 [pid 6013] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6013] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6017 attached [pid 6017] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6017] truncate("./bus", 6 [pid 6013] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6013] exit_group(0) = ? [pid 6014] <... sendfile resumed>) = ? [pid 6016] <... open resumed>) = ? [pid 6014] +++ exited with 0 +++ [pid 6017] <... truncate resumed>) = ? [pid 6017] +++ exited with 0 +++ [pid 6016] +++ exited with 0 +++ [pid 6013] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./150/binderfs") = 0 [pid 5073] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 156.698595][ T27] audit: type=1804 audit(1671282380.103:542): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/150/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 156.722813][ T27] audit: type=1800 audit(1671282380.103:543): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./150/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./150") = 0 [pid 5073] mkdir("./151", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6018 ./strace-static-x86_64: Process 6018 attached [pid 6018] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6018] chdir("./151") = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] setpgid(0, 0) = 0 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6018] write(3, "1000", 4) = 4 [pid 6018] close(3) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6018] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6018] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6018] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6019], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6019 [pid 6018] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6019 attached [pid 6019] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6019] memfd_create("syzkaller", 0) = 3 [pid 6019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6019] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6019] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6019] close(3) = 0 [pid 6019] mkdir("./file0", 0777) = 0 [ 156.846231][ T6019] loop4: detected capacity change from 0 to 8192 [ 156.856640][ T6019] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 156.869646][ T6019] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 156.879071][ T6019] REISERFS (device loop4): using ordered data mode [ 156.885640][ T6019] reiserfs: using flush barriers [ 156.891345][ T6019] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.908112][ T6019] REISERFS (device loop4): checking transaction log (loop4) [pid 6019] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6019] chdir("./file0") = 0 [pid 6019] ioctl(4, LOOP_CLR_FD) = 0 [pid 6019] close(4) = 0 [pid 6019] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 0 [pid 6018] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6019] <... futex resumed>) = 1 [pid 6019] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6019] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 0 [pid 6018] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6019] <... futex resumed>) = 1 [pid 6019] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6019] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = 0 [pid 6018] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6019] <... futex resumed>) = 1 [ 156.950143][ T6019] REISERFS (device loop4): Using r5 hash to sort names [ 156.957505][ T6019] REISERFS (device loop4): using 3.5.x disk format [ 156.964205][ T6019] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6019] sendfile(4, 5, NULL, 140737974943952 [pid 6018] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6018] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6018] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6018] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6021], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6021 [pid 6018] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6021 attached [pid 6021] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 156.981357][ T27] audit: type=1800 audit(1671282380.383:544): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6021] open("./bus", O_RDONLY [pid 6018] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6018] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6018] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6018] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6022], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6022 [pid 6018] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6018] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6022] truncate("./bus", 6 [pid 6018] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6018] exit_group(0) = ? [pid 6019] <... sendfile resumed>) = ? [pid 6022] <... truncate resumed>) = ? [pid 6021] <... open resumed>) = ? [pid 6019] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 6021] +++ exited with 0 +++ [pid 6018] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./151/binderfs") = 0 [ 157.347966][ T27] audit: type=1804 audit(1671282380.753:545): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/151/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./151/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./151") = 0 [pid 5073] mkdir("./152", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6023 ./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6023] chdir("./152") = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6023] setpgid(0, 0) = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6023] write(3, "1000", 4) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6023] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6023] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6024 attached , parent_tid=[6024], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6024 [pid 6024] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6024] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6023] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6024] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6024] close(3) = 0 [pid 6024] mkdir("./file0", 0777) = 0 [ 157.494803][ T6024] loop4: detected capacity change from 0 to 8192 [ 157.504872][ T6024] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.518316][ T6024] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 157.527930][ T6024] REISERFS (device loop4): using ordered data mode [ 157.534482][ T6024] reiserfs: using flush barriers [ 157.540602][ T6024] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.557028][ T6024] REISERFS (device loop4): checking transaction log (loop4) [pid 6024] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file0") = 0 [pid 6024] ioctl(4, LOOP_CLR_FD) = 0 [pid 6024] close(4) = 0 [pid 6024] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = 1 [pid 6024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6023] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... open resumed>) = 4 [pid 6024] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6024] openat(-1, "/proc/self/exe", O_RDONLY [pid 6023] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... openat resumed>) = 5 [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] sendfile(4, 5, NULL, 140737974943952 [pid 6023] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 157.598847][ T6024] REISERFS (device loop4): Using r5 hash to sort names [ 157.605871][ T6024] REISERFS (device loop4): using 3.5.x disk format [ 157.612589][ T6024] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6023] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6023] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6023] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6026], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6026 [pid 6023] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6026 attached [pid 6026] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6026] open("./bus", O_RDONLY [pid 6023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6023] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6023] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6027 attached , parent_tid=[6027], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6027 [pid 6027] set_robust_list(0x7fe8f42af9e0, 24 [pid 6023] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6027] <... set_robust_list resumed>) = 0 [pid 6023] <... futex resumed>) = 0 [pid 6027] truncate("./bus", 6 [pid 6023] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6023] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6023] exit_group(0) = ? [pid 6024] <... sendfile resumed>) = ? [pid 6026] <... open resumed>) = ? [pid 6024] +++ exited with 0 +++ [pid 6027] <... truncate resumed>) = ? [pid 6026] +++ exited with 0 +++ [pid 6027] +++ exited with 0 +++ [pid 6023] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./152/binderfs") = 0 [pid 5073] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./152/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./152") = 0 [pid 5073] mkdir("./153", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6028 ./strace-static-x86_64: Process 6028 attached [pid 6028] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6028] chdir("./153") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4) = 4 [pid 6028] close(3) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6028] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6028] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6028] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6029], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6029 [pid 6028] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6029] memfd_create("syzkaller", 0) = 3 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6029] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6029] close(3) = 0 [pid 6029] mkdir("./file0", 0777) = 0 [ 158.142290][ T6029] loop4: detected capacity change from 0 to 8192 [ 158.152526][ T6029] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.165594][ T6029] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 158.174889][ T6029] REISERFS (device loop4): using ordered data mode [ 158.181531][ T6029] reiserfs: using flush barriers [ 158.187637][ T6029] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.204137][ T6029] REISERFS (device loop4): checking transaction log (loop4) [pid 6029] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6029] chdir("./file0") = 0 [pid 6029] ioctl(4, LOOP_CLR_FD) = 0 [pid 6029] close(4) = 0 [pid 6029] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 1 [pid 6029] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6029] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 1 [pid 6029] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6029] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 1 [ 158.248079][ T6029] REISERFS (device loop4): Using r5 hash to sort names [ 158.255185][ T6029] REISERFS (device loop4): using 3.5.x disk format [ 158.262416][ T6029] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6029] sendfile(4, 5, NULL, 140737974943952 [pid 6028] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6028] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6028] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6028] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6031 attached [pid 6031] set_robust_list(0x7fe8f42d09e0, 24 [pid 6028] <... clone resumed>, parent_tid=[6031], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6031 [pid 6028] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6031] <... set_robust_list resumed>) = 0 [pid 6031] open("./bus", O_RDONLY [pid 6028] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6028] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6028] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6028] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6032], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6032 ./strace-static-x86_64: Process 6032 attached [pid 6028] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6032] truncate("./bus", 6 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6028] exit_group(0) = ? [pid 6029] <... sendfile resumed>) = ? [pid 6032] <... truncate resumed>) = ? [pid 6031] <... open resumed>) = ? [pid 6029] +++ exited with 0 +++ [pid 6032] +++ exited with 0 +++ [pid 6031] +++ exited with 0 +++ [pid 6028] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./153/binderfs") = 0 [pid 5073] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./153/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./153") = 0 [pid 5073] mkdir("./154", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6033 ./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6033] chdir("./154") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6033] setpgid(0, 0) = 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6033] write(3, "1000", 4) = 4 [pid 6033] close(3) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6033] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6033] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6033] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6034 attached , parent_tid=[6034], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6034 [pid 6033] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6034] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6034] memfd_create("syzkaller", 0) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6034] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6034] close(3) = 0 [pid 6034] mkdir("./file0", 0777) = 0 [ 158.796077][ T6034] loop4: detected capacity change from 0 to 8192 [ 158.805259][ T6034] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.818622][ T6034] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 158.828025][ T6034] REISERFS (device loop4): using ordered data mode [ 158.834626][ T6034] reiserfs: using flush barriers [ 158.840464][ T6034] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.856880][ T6034] REISERFS (device loop4): checking transaction log (loop4) [pid 6034] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6034] chdir("./file0") = 0 [pid 6034] ioctl(4, LOOP_CLR_FD) = 0 [pid 6034] close(4) = 0 [pid 6034] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6033] <... futex resumed>) = 0 [pid 6033] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... futex resumed>) = 1 [pid 6034] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6034] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6033] <... futex resumed>) = 0 [pid 6033] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... futex resumed>) = 1 [pid 6034] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6034] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6033] <... futex resumed>) = 0 [pid 6033] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... futex resumed>) = 1 [ 158.894556][ T6034] REISERFS (device loop4): Using r5 hash to sort names [ 158.901669][ T6034] REISERFS (device loop4): using 3.5.x disk format [ 158.908969][ T6034] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6034] sendfile(4, 5, NULL, 140737974943952 [pid 6033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6033] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6033] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6033] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6036 attached , parent_tid=[6036], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6036 [pid 6033] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6036] open("./bus", O_RDONLY [pid 6033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6033] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6033] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6033] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6037], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6037 [pid 6033] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6037] truncate("./bus", 6 [pid 6033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6033] exit_group(0) = ? [pid 6034] <... sendfile resumed>) = ? [pid 6036] <... open resumed>) = ? [pid 6037] <... truncate resumed>) = ? [pid 6036] +++ exited with 0 +++ [pid 6034] +++ exited with 0 +++ [pid 6037] +++ exited with 0 +++ [pid 6033] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./154/binderfs") = 0 [pid 5073] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./154/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./154") = 0 [pid 5073] mkdir("./155", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6038 ./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6038] chdir("./155") = 0 [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6038] setpgid(0, 0) = 0 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6038] write(3, "1000", 4) = 4 [pid 6038] close(3) = 0 [pid 6038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6038] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6038] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6038] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6039], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6039 [pid 6038] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6039 attached ) = 0 [pid 6039] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6038] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6039] <... set_robust_list resumed>) = 0 [pid 6039] memfd_create("syzkaller", 0) = 3 [pid 6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6039] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6039] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6039] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6039] close(3) = 0 [pid 6039] mkdir("./file0", 0777) = 0 [ 159.418592][ T6039] loop4: detected capacity change from 0 to 8192 [ 159.428367][ T6039] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.441388][ T6039] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 159.450668][ T6039] REISERFS (device loop4): using ordered data mode [ 159.457226][ T6039] reiserfs: using flush barriers [ 159.462920][ T6039] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.479560][ T6039] REISERFS (device loop4): checking transaction log (loop4) [pid 6039] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6039] chdir("./file0") = 0 [pid 6039] ioctl(4, LOOP_CLR_FD) = 0 [pid 6039] close(4) = 0 [pid 6039] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = 0 [pid 6038] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] <... futex resumed>) = 1 [pid 6039] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6039] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = 0 [pid 6038] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] <... futex resumed>) = 1 [pid 6039] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6039] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = 0 [pid 6038] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6039] <... futex resumed>) = 1 [ 159.523868][ T6039] REISERFS (device loop4): Using r5 hash to sort names [ 159.530984][ T6039] REISERFS (device loop4): using 3.5.x disk format [ 159.538020][ T6039] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6039] sendfile(4, 5, NULL, 140737974943952 [pid 6038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6038] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6038] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6038] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6041], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6041 ./strace-static-x86_64: Process 6041 attached [pid 6038] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6041] open("./bus", O_RDONLY [pid 6038] <... futex resumed>) = 0 [pid 6038] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6038] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6038] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6038] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6042 attached , parent_tid=[6042], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6042 [pid 6042] set_robust_list(0x7fe8f42af9e0, 24 [pid 6038] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] <... set_robust_list resumed>) = 0 [pid 6038] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] truncate("./bus", 6 [pid 6038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6038] exit_group(0) = ? [pid 6041] <... open resumed>) = ? [pid 6039] <... sendfile resumed>) = ? [pid 6041] +++ exited with 0 +++ [pid 6042] <... truncate resumed>) = ? [pid 6042] +++ exited with 0 +++ [pid 6039] +++ exited with 0 +++ [pid 6038] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6038, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./155/binderfs") = 0 [pid 5073] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./155/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./155") = 0 [pid 5073] mkdir("./156", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6043 ./strace-static-x86_64: Process 6043 attached [pid 6043] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6043] chdir("./156") = 0 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6043] setpgid(0, 0) = 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6043] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6043] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6044 attached , parent_tid=[6044], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6044 [pid 6043] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6044] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6044] memfd_create("syzkaller", 0) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6044] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6044] close(3) = 0 [pid 6044] mkdir("./file0", 0777) = 0 [ 160.023742][ T6044] loop4: detected capacity change from 0 to 8192 [ 160.034044][ T6044] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.047279][ T6044] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 160.057229][ T6044] REISERFS (device loop4): using ordered data mode [ 160.063734][ T6044] reiserfs: using flush barriers [ 160.069735][ T6044] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.086776][ T6044] REISERFS (device loop4): checking transaction log (loop4) [pid 6044] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6044] chdir("./file0") = 0 [pid 6044] ioctl(4, LOOP_CLR_FD) = 0 [pid 6044] close(4) = 0 [pid 6044] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6044] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] <... futex resumed>) = 0 [pid 6043] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] <... futex resumed>) = 0 [pid 6044] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6044] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6043] <... futex resumed>) = 0 [pid 6043] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6044] openat(-1, "/proc/self/exe", O_RDONLY [pid 6043] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] <... openat resumed>) = 5 [pid 6044] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6044] sendfile(4, 5, NULL, 140737974943952 [pid 6043] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 160.130613][ T6044] REISERFS (device loop4): Using r5 hash to sort names [ 160.137678][ T6044] REISERFS (device loop4): using 3.5.x disk format [ 160.144396][ T6044] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6043] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6043] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6043] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6043] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6046], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6046 [pid 6043] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6046 attached [pid 6046] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6046] open("./bus", O_RDONLY [pid 6043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6043] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6043] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6043] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6047 attached [pid 6047] set_robust_list(0x7fe8f42af9e0, 24 [pid 6043] <... clone resumed>, parent_tid=[6047], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6047 [pid 6043] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... set_robust_list resumed>) = 0 [pid 6047] truncate("./bus", 6 [pid 6043] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6043] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6043] exit_group(0) = ? [pid 6044] <... sendfile resumed>) = ? [pid 6046] <... open resumed>) = ? [pid 6044] +++ exited with 0 +++ [pid 6047] <... truncate resumed>) = ? [pid 6047] +++ exited with 0 +++ [pid 6046] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./156/binderfs") = 0 [pid 5073] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 160.558188][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 160.558203][ T27] audit: type=1804 audit(1671282383.963:560): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/156/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 160.588731][ T27] audit: type=1800 audit(1671282383.963:561): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./156/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./156") = 0 [pid 5073] mkdir("./157", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6048 ./strace-static-x86_64: Process 6048 attached [pid 6048] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6048] chdir("./157") = 0 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6048] setpgid(0, 0) = 0 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6048] write(3, "1000", 4) = 4 [pid 6048] close(3) = 0 [pid 6048] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6048] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6048] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6048] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6049 attached , parent_tid=[6049], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6049 [pid 6049] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6048] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6049] <... set_robust_list resumed>) = 0 [pid 6049] memfd_create("syzkaller", 0) = 3 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6049] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6049] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6049] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6049] close(3) = 0 [pid 6049] mkdir("./file0", 0777) = 0 [ 160.706900][ T6049] loop4: detected capacity change from 0 to 8192 [ 160.717668][ T6049] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.730682][ T6049] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 160.739938][ T6049] REISERFS (device loop4): using ordered data mode [ 160.746580][ T6049] reiserfs: using flush barriers [ 160.752581][ T6049] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.769358][ T6049] REISERFS (device loop4): checking transaction log (loop4) [pid 6049] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6049] chdir("./file0") = 0 [pid 6049] ioctl(4, LOOP_CLR_FD) = 0 [pid 6049] close(4) = 0 [pid 6049] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] <... futex resumed>) = 0 [pid 6048] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = 0 [pid 6048] <... futex resumed>) = 1 [pid 6049] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6048] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] <... open resumed>) = 4 [pid 6049] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6048] <... futex resumed>) = 0 [pid 6049] openat(-1, "/proc/self/exe", O_RDONLY [pid 6048] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... openat resumed>) = 5 [pid 6048] <... futex resumed>) = 0 [pid 6049] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] <... futex resumed>) = 0 [pid 6048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] sendfile(4, 5, NULL, 140737974943952 [pid 6048] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 160.813318][ T6049] REISERFS (device loop4): Using r5 hash to sort names [ 160.820282][ T6049] REISERFS (device loop4): using 3.5.x disk format [ 160.827110][ T6049] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6048] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6048] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6048] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6048] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6048] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6051], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6051 [pid 6048] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6051 attached [ 160.844755][ T27] audit: type=1800 audit(1671282384.243:562): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6051] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6051] open("./bus", O_RDONLY [pid 6048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6048] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6048] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6048] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6052], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6052 [pid 6048] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6052 attached [pid 6048] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6052] truncate("./bus", 6 [pid 6048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6048] exit_group(0) = ? [pid 6049] <... sendfile resumed>) = ? [pid 6051] <... open resumed>) = ? [pid 6049] +++ exited with 0 +++ [pid 6052] <... truncate resumed>) = ? [pid 6052] +++ exited with 0 +++ [pid 6051] +++ exited with 0 +++ [pid 6048] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./157/binderfs") = 0 [pid 5073] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 161.188274][ T27] audit: type=1804 audit(1671282384.593:563): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/157/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 161.211945][ T27] audit: type=1800 audit(1671282384.593:564): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./157/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./157") = 0 [pid 5073] mkdir("./158", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6053 ./strace-static-x86_64: Process 6053 attached [pid 6053] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6053] chdir("./158") = 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6053] setpgid(0, 0) = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6053] write(3, "1000", 4) = 4 [pid 6053] close(3) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6053] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6053] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6053] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6054], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6054 [pid 6053] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6054 attached [pid 6054] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6054] memfd_create("syzkaller", 0) = 3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6054] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6054] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6054] close(3) = 0 [pid 6054] mkdir("./file0", 0777) = 0 [ 161.332356][ T6054] loop4: detected capacity change from 0 to 8192 [ 161.342489][ T6054] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.355605][ T6054] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 161.365099][ T6054] REISERFS (device loop4): using ordered data mode [ 161.371800][ T6054] reiserfs: using flush barriers [ 161.377986][ T6054] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.394613][ T6054] REISERFS (device loop4): checking transaction log (loop4) [pid 6054] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6054] chdir("./file0") = 0 [pid 6054] ioctl(4, LOOP_CLR_FD) = 0 [pid 6054] close(4) = 0 [pid 6054] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6053] <... futex resumed>) = 0 [pid 6054] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6053] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... open resumed>) = 4 [pid 6053] <... futex resumed>) = 0 [pid 6054] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] <... futex resumed>) = 0 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6054] openat(-1, "/proc/self/exe", O_RDONLY [pid 6053] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... openat resumed>) = 5 [pid 6053] <... futex resumed>) = 0 [pid 6054] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] <... futex resumed>) = 0 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6054] sendfile(4, 5, NULL, 140737974943952 [pid 6053] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 161.436117][ T6054] REISERFS (device loop4): Using r5 hash to sort names [ 161.443039][ T6054] REISERFS (device loop4): using 3.5.x disk format [ 161.449884][ T6054] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 161.466249][ T27] audit: type=1800 audit(1671282384.863:565): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6053] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6053] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6053] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6053] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6056], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6056 [pid 6053] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6056 attached [pid 6056] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6056] open("./bus", O_RDONLY [pid 6053] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6053] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6053] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6053] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6057 attached [pid 6057] set_robust_list(0x7fe8f42af9e0, 24 [pid 6053] <... clone resumed>, parent_tid=[6057], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6057 [pid 6057] <... set_robust_list resumed>) = 0 [pid 6053] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] truncate("./bus", 6 [pid 6053] <... futex resumed>) = 0 [pid 6053] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6053] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6053] exit_group(0) = ? [pid 6054] <... sendfile resumed>) = ? [pid 6056] <... open resumed>) = ? [pid 6054] +++ exited with 0 +++ [pid 6056] +++ exited with 0 +++ [pid 6057] <... truncate resumed>) = ? [pid 6057] +++ exited with 0 +++ [pid 6053] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./158/binderfs") = 0 [pid 5073] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 161.828912][ T27] audit: type=1804 audit(1671282385.233:566): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/158/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 161.852338][ T27] audit: type=1800 audit(1671282385.233:567): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./158/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./158") = 0 [pid 5073] mkdir("./159", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6058 ./strace-static-x86_64: Process 6058 attached [pid 6058] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6058] chdir("./159") = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6058] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6058] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6059], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6059 ./strace-static-x86_64: Process 6059 attached [pid 6059] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6059] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6058] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6059] memfd_create("syzkaller", 0) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6059] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6059] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6059] close(3) = 0 [pid 6059] mkdir("./file0", 0777) = 0 [ 161.983473][ T6059] loop4: detected capacity change from 0 to 8192 [ 161.993746][ T6059] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.006755][ T6059] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 162.016264][ T6059] REISERFS (device loop4): using ordered data mode [ 162.022800][ T6059] reiserfs: using flush barriers [ 162.028846][ T6059] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.045188][ T6059] REISERFS (device loop4): checking transaction log (loop4) [pid 6059] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6059] chdir("./file0") = 0 [pid 6059] ioctl(4, LOOP_CLR_FD) = 0 [pid 6059] close(4) = 0 [pid 6059] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... futex resumed>) = 0 [pid 6058] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... futex resumed>) = 0 [ 162.088017][ T6059] REISERFS (device loop4): Using r5 hash to sort names [ 162.094939][ T6059] REISERFS (device loop4): using 3.5.x disk format [ 162.102001][ T6059] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6059] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6059] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6059] openat(-1, "/proc/self/exe", O_RDONLY [pid 6058] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... openat resumed>) = 5 [pid 6058] <... futex resumed>) = 0 [pid 6059] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... futex resumed>) = 0 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] sendfile(4, 5, NULL, 140737974943952 [pid 6058] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6058] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6058] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6058] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6061], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6061 [pid 6058] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 162.128383][ T27] audit: type=1800 audit(1671282385.533:568): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6061] open("./bus", O_RDONLY [pid 6058] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6058] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6058] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6058] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6062 attached [pid 6062] set_robust_list(0x7fe8f42af9e0, 24 [pid 6058] <... clone resumed>, parent_tid=[6062], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6062 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6058] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] truncate("./bus", 6 [pid 6058] <... futex resumed>) = 0 [pid 6058] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6058] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6058] exit_group(0) = ? [pid 6059] <... sendfile resumed>) = ? [pid 6061] <... open resumed>) = ? [pid 6059] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ [pid 6062] <... truncate resumed>) = ? [pid 6062] +++ exited with 0 +++ [pid 6058] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6058, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./159/binderfs") = 0 [pid 5073] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 162.509432][ T27] audit: type=1804 audit(1671282385.913:569): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/159/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./159/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./159") = 0 [pid 5073] mkdir("./160", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6063 ./strace-static-x86_64: Process 6063 attached [pid 6063] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6063] chdir("./160") = 0 [pid 6063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6063] setpgid(0, 0) = 0 [pid 6063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6063] write(3, "1000", 4) = 4 [pid 6063] close(3) = 0 [pid 6063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6063] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6063] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6063] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6064], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6064 [pid 6063] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6064 attached ) = 0 [pid 6063] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6064] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6064] memfd_create("syzkaller", 0) = 3 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6064] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6064] close(3) = 0 [pid 6064] mkdir("./file0", 0777) = 0 [ 162.644287][ T6064] loop4: detected capacity change from 0 to 8192 [ 162.654612][ T6064] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.667792][ T6064] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 162.677444][ T6064] REISERFS (device loop4): using ordered data mode [ 162.684004][ T6064] reiserfs: using flush barriers [ 162.689923][ T6064] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.706209][ T6064] REISERFS (device loop4): checking transaction log (loop4) [pid 6064] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6064] chdir("./file0") = 0 [pid 6064] ioctl(4, LOOP_CLR_FD) = 0 [pid 6064] close(4) = 0 [pid 6064] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6064] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] <... futex resumed>) = 0 [pid 6063] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = 1 [pid 6064] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6063] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6064] <... open resumed>) = 4 [pid 6064] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6063] <... futex resumed>) = 0 [pid 6064] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6064] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6063] <... futex resumed>) = 0 [pid 6063] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6064] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6063] <... futex resumed>) = 0 [pid 6064] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6063] <... futex resumed>) = 0 [pid 6064] sendfile(4, 5, NULL, 140737974943952 [ 162.747635][ T6064] REISERFS (device loop4): Using r5 hash to sort names [ 162.754549][ T6064] REISERFS (device loop4): using 3.5.x disk format [ 162.761503][ T6064] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6063] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6063] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6063] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6063] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6066 attached , parent_tid=[6066], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6066 [pid 6063] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6063] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6066] open("./bus", O_RDONLY [pid 6063] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6063] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6063] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6063] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6063] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6067], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6067 ./strace-static-x86_64: Process 6067 attached [pid 6063] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6063] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6067] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6067] truncate("./bus", 6 [pid 6063] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6063] exit_group(0) = ? [pid 6064] <... sendfile resumed>) = ? [pid 6066] <... open resumed>) = ? [pid 6064] +++ exited with 0 +++ [pid 6066] +++ exited with 0 +++ [pid 6067] <... truncate resumed>) = ? [pid 6067] +++ exited with 0 +++ [pid 6063] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6063, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./160/binderfs") = 0 [pid 5073] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./160/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./160") = 0 [pid 5073] mkdir("./161", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6068 ./strace-static-x86_64: Process 6068 attached [pid 6068] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6068] chdir("./161") = 0 [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6068] setpgid(0, 0) = 0 [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6068] write(3, "1000", 4) = 4 [pid 6068] close(3) = 0 [pid 6068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6068] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6068] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6068] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6069], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6069 [pid 6068] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6069 attached [pid 6069] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6069] memfd_create("syzkaller", 0) = 3 [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6069] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6069] close(3) = 0 [pid 6069] mkdir("./file0", 0777) = 0 [ 163.277103][ T6069] loop4: detected capacity change from 0 to 8192 [ 163.286839][ T6069] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.299999][ T6069] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 163.309305][ T6069] REISERFS (device loop4): using ordered data mode [ 163.315882][ T6069] reiserfs: using flush barriers [ 163.321881][ T6069] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.338309][ T6069] REISERFS (device loop4): checking transaction log (loop4) [pid 6069] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6069] chdir("./file0") = 0 [pid 6069] ioctl(4, LOOP_CLR_FD) = 0 [pid 6069] close(4) = 0 [pid 6069] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6068] <... futex resumed>) = 0 [pid 6068] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6069] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6069] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6068] <... futex resumed>) = 0 [pid 6068] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] openat(-1, "/proc/self/exe", O_RDONLY [pid 6068] <... futex resumed>) = 0 [pid 6069] <... openat resumed>) = 5 [pid 6068] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6069] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6069] <... futex resumed>) = 0 [pid 6068] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] sendfile(4, 5, NULL, 140737974943952 [pid 6068] <... futex resumed>) = 0 [ 163.380455][ T6069] REISERFS (device loop4): Using r5 hash to sort names [ 163.387532][ T6069] REISERFS (device loop4): using 3.5.x disk format [ 163.394199][ T6069] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6068] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6068] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6068] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6068] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6071], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6071 ./strace-static-x86_64: Process 6071 attached [pid 6068] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6071] open("./bus", O_RDONLY [pid 6068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6068] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6068] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6068] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6072], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6072 [pid 6068] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6072 attached [pid 6072] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6072] truncate("./bus", 6 [pid 6068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6068] exit_group(0) = ? [pid 6069] <... sendfile resumed>) = ? [pid 6072] <... truncate resumed>) = ? [pid 6071] <... open resumed>) = ? [pid 6069] +++ exited with 0 +++ [pid 6072] +++ exited with 0 +++ [pid 6071] +++ exited with 0 +++ [pid 6068] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6068, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./161/binderfs") = 0 [pid 5073] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./161/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./161") = 0 [pid 5073] mkdir("./162", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6073 ./strace-static-x86_64: Process 6073 attached [pid 6073] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6073] chdir("./162") = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6073] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6074], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6074 [pid 6073] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6074 attached [pid 6074] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6074] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] mkdir("./file0", 0777) = 0 [ 163.883725][ T6074] loop4: detected capacity change from 0 to 8192 [ 163.893714][ T6074] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.907049][ T6074] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 163.916560][ T6074] REISERFS (device loop4): using ordered data mode [ 163.923092][ T6074] reiserfs: using flush barriers [ 163.929166][ T6074] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.945864][ T6074] REISERFS (device loop4): checking transaction log (loop4) [pid 6074] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file0") = 0 [pid 6074] ioctl(4, LOOP_CLR_FD) = 0 [pid 6074] close(4) = 0 [pid 6074] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6074] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6074] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6073] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... open resumed>) = 4 [pid 6074] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6074] openat(-1, "/proc/self/exe", O_RDONLY [pid 6073] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... openat resumed>) = 5 [pid 6073] <... futex resumed>) = 0 [pid 6074] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6074] sendfile(4, 5, NULL, 140737974943952 [pid 6073] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.988334][ T6074] REISERFS (device loop4): Using r5 hash to sort names [ 163.995248][ T6074] REISERFS (device loop4): using 3.5.x disk format [ 164.002052][ T6074] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6073] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6073] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6073] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6073] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x7fe8f42d09e0, 24 [pid 6073] <... clone resumed>, parent_tid=[6076], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6076 [pid 6073] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] <... set_robust_list resumed>) = 0 [pid 6073] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] open("./bus", O_RDONLY [pid 6073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6073] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6073] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6077], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6077 [pid 6073] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6077] truncate("./bus", 6 [pid 6073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6073] exit_group(0) = ? [pid 6074] <... sendfile resumed>) = ? [pid 6077] <... truncate resumed>) = ? [pid 6076] <... open resumed>) = ? [pid 6074] +++ exited with 0 +++ [pid 6077] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 6073] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./162/binderfs") = 0 [pid 5073] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./162/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./162") = 0 [pid 5073] mkdir("./163", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6078 ./strace-static-x86_64: Process 6078 attached [pid 6078] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6078] chdir("./163") = 0 [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6078] setpgid(0, 0) = 0 [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6078] write(3, "1000", 4) = 4 [pid 6078] close(3) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6078] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6078] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6078] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6079], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6079 [pid 6078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6079] memfd_create("syzkaller", 0) = 3 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6079] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6079] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6079] close(3) = 0 [pid 6079] mkdir("./file0", 0777) = 0 [ 164.531312][ T6079] loop4: detected capacity change from 0 to 8192 [ 164.541397][ T6079] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.554533][ T6079] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 164.563792][ T6079] REISERFS (device loop4): using ordered data mode [ 164.570356][ T6079] reiserfs: using flush barriers [ 164.576406][ T6079] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.593139][ T6079] REISERFS (device loop4): checking transaction log (loop4) [pid 6079] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6079] chdir("./file0") = 0 [pid 6079] ioctl(4, LOOP_CLR_FD) = 0 [pid 6079] close(4) = 0 [pid 6079] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6079] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = 1 [pid 6078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6079] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6078] <... futex resumed>) = 0 [pid 6078] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] sendfile(4, 5, NULL, 140737974943952 [ 164.636825][ T6079] REISERFS (device loop4): Using r5 hash to sort names [ 164.643842][ T6079] REISERFS (device loop4): using 3.5.x disk format [ 164.650799][ T6079] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6078] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6078] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6078] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6078] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6081 attached [pid 6081] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6081] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] <... clone resumed>, parent_tid=[6081], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6081 [pid 6078] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6078] <... futex resumed>) = 1 [pid 6081] open("./bus", O_RDONLY [pid 6078] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6078] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6078] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6078] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x7fe8f42af9e0, 24 [pid 6078] <... clone resumed>, parent_tid=[6082], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6082 [pid 6082] <... set_robust_list resumed>) = 0 [pid 6078] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] truncate("./bus", 6 [pid 6078] <... futex resumed>) = 0 [pid 6078] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6078] exit_group(0) = ? [pid 6079] <... sendfile resumed>) = ? [pid 6081] <... open resumed>) = ? [pid 6079] +++ exited with 0 +++ [pid 6082] <... truncate resumed>) = ? [pid 6081] +++ exited with 0 +++ [pid 6082] +++ exited with 0 +++ [pid 6078] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./163/binderfs") = 0 [pid 5073] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./163/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./163") = 0 [pid 5073] mkdir("./164", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6083 ./strace-static-x86_64: Process 6083 attached [pid 6083] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6083] chdir("./164") = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6083] write(3, "1000", 4) = 4 [pid 6083] close(3) = 0 [pid 6083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6083] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6083] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6083] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6084], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6084 [pid 6083] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6084 attached [pid 6084] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6084] memfd_create("syzkaller", 0) = 3 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6084] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6084] close(3) = 0 [pid 6084] mkdir("./file0", 0777) = 0 [ 165.183452][ T6084] loop4: detected capacity change from 0 to 8192 [ 165.193066][ T6084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.206163][ T6084] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 165.215467][ T6084] REISERFS (device loop4): using ordered data mode [ 165.222028][ T6084] reiserfs: using flush barriers [ 165.228029][ T6084] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.244684][ T6084] REISERFS (device loop4): checking transaction log (loop4) [pid 6084] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6084] chdir("./file0") = 0 [pid 6084] ioctl(4, LOOP_CLR_FD) = 0 [pid 6084] close(4) = 0 [pid 6084] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6084] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] <... futex resumed>) = 0 [pid 6083] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6083] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... futex resumed>) = 0 [pid 6084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6084] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = 0 [pid 6083] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... futex resumed>) = 1 [pid 6084] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6084] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = 0 [pid 6083] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] <... futex resumed>) = 1 [ 165.282008][ T6084] REISERFS (device loop4): Using r5 hash to sort names [ 165.288959][ T6084] REISERFS (device loop4): using 3.5.x disk format [ 165.296219][ T6084] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6084] sendfile(4, 5, NULL, 140737974943952 [pid 6083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6083] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6083] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6083] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6086] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] <... clone resumed>, parent_tid=[6086], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6086 [pid 6083] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = 0 [pid 6083] <... futex resumed>) = 1 [pid 6086] open("./bus", O_RDONLY [pid 6083] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6083] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6083] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6083] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6087 attached [pid 6087] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6083] <... clone resumed>, parent_tid=[6087], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6087 [pid 6087] truncate("./bus", 6 [pid 6083] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6083] exit_group(0) = ? [pid 6087] <... truncate resumed>) = ? [pid 6086] <... open resumed>) = ? [pid 6084] <... sendfile resumed>) = ? [pid 6087] +++ exited with 0 +++ [pid 6086] +++ exited with 0 +++ [pid 6084] +++ exited with 0 +++ [pid 6083] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./164/binderfs") = 0 [ 165.708020][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 165.708036][ T27] audit: type=1804 audit(1671282389.113:584): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/164/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./164/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./164") = 0 [pid 5073] mkdir("./165", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6088 [ 165.739313][ T27] audit: type=1800 audit(1671282389.113:585): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 ./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6088] chdir("./165") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6088] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6089 attached , parent_tid=[6089], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6089 [pid 6089] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6088] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6089] <... set_robust_list resumed>) = 0 [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6089] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] mkdir("./file0", 0777) = 0 [ 165.858143][ T6089] loop4: detected capacity change from 0 to 8192 [ 165.868106][ T6089] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.881254][ T6089] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 165.891027][ T6089] REISERFS (device loop4): using ordered data mode [ 165.897919][ T6089] reiserfs: using flush barriers [ 165.903561][ T6089] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.921451][ T6089] REISERFS (device loop4): checking transaction log (loop4) [pid 6089] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file0") = 0 [pid 6089] ioctl(4, LOOP_CLR_FD) = 0 [pid 6089] close(4) = 0 [pid 6089] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6089] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6089] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 1 [pid 6089] sendfile(4, 5, NULL, 140737974943952 [pid 6088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6088] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6088] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 165.959439][ T6089] REISERFS (device loop4): Using r5 hash to sort names [ 165.966640][ T6089] REISERFS (device loop4): using 3.5.x disk format [ 165.973294][ T6089] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 165.986161][ T27] audit: type=1800 audit(1671282389.393:586): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6088] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6091 attached [pid 6091] set_robust_list(0x7fe8f42d09e0, 24 [pid 6088] <... clone resumed>, parent_tid=[6091], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6091 [pid 6091] <... set_robust_list resumed>) = 0 [pid 6088] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] open("./bus", O_RDONLY [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6088] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6088] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6092 attached , parent_tid=[6092], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6092 [pid 6092] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6092] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 0 [pid 6092] truncate("./bus", 6 [pid 6088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6088] exit_group(0) = ? [pid 6089] <... sendfile resumed>) = ? [pid 6091] <... open resumed>) = ? [pid 6089] +++ exited with 0 +++ [pid 6092] <... truncate resumed>) = ? [pid 6092] +++ exited with 0 +++ [pid 6091] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./165/binderfs") = 0 [ 166.388563][ T27] audit: type=1804 audit(1671282389.793:587): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/165/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 166.412459][ T27] audit: type=1800 audit(1671282389.793:588): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./165/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./165") = 0 [pid 5073] mkdir("./166", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6093 ./strace-static-x86_64: Process 6093 attached [pid 6093] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6093] chdir("./166") = 0 [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6093] setpgid(0, 0) = 0 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6093] write(3, "1000", 4) = 4 [pid 6093] close(3) = 0 [pid 6093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6093] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6093] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6093] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6094], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6094 [pid 6093] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6094 attached [pid 6094] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6094] memfd_create("syzkaller", 0) = 3 [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6094] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6094] close(3) = 0 [pid 6094] mkdir("./file0", 0777) = 0 [ 166.542642][ T6094] loop4: detected capacity change from 0 to 8192 [ 166.552696][ T6094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.565821][ T6094] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 166.575086][ T6094] REISERFS (device loop4): using ordered data mode [ 166.581704][ T6094] reiserfs: using flush barriers [ 166.587947][ T6094] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.604287][ T6094] REISERFS (device loop4): checking transaction log (loop4) [pid 6094] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6094] chdir("./file0") = 0 [pid 6094] ioctl(4, LOOP_CLR_FD) = 0 [pid 6094] close(4) = 0 [pid 6094] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] <... futex resumed>) = 0 [pid 6093] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 0 [ 166.642791][ T6094] REISERFS (device loop4): Using r5 hash to sort names [ 166.649966][ T6094] REISERFS (device loop4): using 3.5.x disk format [ 166.657219][ T6094] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6094] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6094] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] <... futex resumed>) = 0 [pid 6093] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... futex resumed>) = 0 [pid 6093] <... futex resumed>) = 1 [pid 6094] openat(-1, "/proc/self/exe", O_RDONLY [pid 6093] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... openat resumed>) = 5 [pid 6094] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] <... futex resumed>) = 0 [pid 6094] sendfile(4, 5, NULL, 140737974943952 [pid 6093] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 166.677057][ T27] audit: type=1800 audit(1671282390.083:589): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6093] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6093] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6093] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6093] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6096], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6096 [pid 6093] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6096 attached [pid 6096] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6096] open("./bus", O_RDONLY [pid 6093] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6093] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6093] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6093] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6093] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6097 attached , parent_tid=[6097], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6097 [pid 6093] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6097] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6097] truncate("./bus", 6 [pid 6093] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6093] exit_group(0) = ? [pid 6094] <... sendfile resumed>) = ? [pid 6097] <... truncate resumed>) = ? [pid 6096] <... open resumed>) = ? [pid 6094] +++ exited with 0 +++ [pid 6097] +++ exited with 0 +++ [pid 6096] +++ exited with 0 +++ [pid 6093] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./166/binderfs") = 0 [pid 5073] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./166/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [ 167.078717][ T27] audit: type=1804 audit(1671282390.483:590): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/166/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 167.102892][ T27] audit: type=1800 audit(1671282390.483:591): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./166") = 0 [pid 5073] mkdir("./167", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6098 ./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6098] chdir("./167") = 0 [pid 6098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6098] setpgid(0, 0) = 0 [pid 6098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6098] write(3, "1000", 4) = 4 [pid 6098] close(3) = 0 [pid 6098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6098] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6098] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6098] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6099], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6099 ./strace-static-x86_64: Process 6099 attached [pid 6098] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6099] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6099] memfd_create("syzkaller", 0) = 3 [pid 6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6099] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6099] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6099] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6099] close(3) = 0 [pid 6099] mkdir("./file0", 0777) = 0 [ 167.225272][ T6099] loop4: detected capacity change from 0 to 8192 [ 167.236056][ T6099] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.249091][ T6099] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 167.258507][ T6099] REISERFS (device loop4): using ordered data mode [ 167.265021][ T6099] reiserfs: using flush barriers [ 167.271326][ T6099] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.288285][ T6099] REISERFS (device loop4): checking transaction log (loop4) [pid 6099] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6099] chdir("./file0") = 0 [pid 6099] ioctl(4, LOOP_CLR_FD) = 0 [pid 6099] close(4) = 0 [pid 6099] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = 0 [pid 6098] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6099] <... futex resumed>) = 1 [pid 6099] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6099] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = 0 [pid 6098] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6099] <... futex resumed>) = 1 [pid 6099] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6099] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = 0 [pid 6098] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6099] <... futex resumed>) = 1 [ 167.341051][ T6099] REISERFS (device loop4): Using r5 hash to sort names [ 167.348159][ T6099] REISERFS (device loop4): using 3.5.x disk format [ 167.354858][ T6099] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6099] sendfile(4, 5, NULL, 140737974943952 [pid 6098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6098] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6098] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6098] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6101], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6101 [pid 6098] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6101 attached [pid 6101] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 167.372341][ T27] audit: type=1800 audit(1671282390.773:592): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6101] open("./bus", O_RDONLY [pid 6098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6098] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6098] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6098] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6102], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6102 [pid 6098] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6102 attached [pid 6102] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6102] truncate("./bus", 6 [pid 6098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6098] exit_group(0) = ? [pid 6099] <... sendfile resumed>) = ? [pid 6101] <... open resumed>) = ? [pid 6101] +++ exited with 0 +++ [pid 6102] <... truncate resumed>) = ? [pid 6102] +++ exited with 0 +++ [pid 6099] +++ exited with 0 +++ [pid 6098] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6098, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./167/binderfs") = 0 [pid 5073] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 167.748867][ T27] audit: type=1804 audit(1671282391.153:593): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/167/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./167/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./167") = 0 [pid 5073] mkdir("./168", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6103 ./strace-static-x86_64: Process 6103 attached [pid 6103] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6103] chdir("./168") = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6103] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6104 attached , parent_tid=[6104], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6104 [pid 6103] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6104] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6104] memfd_create("syzkaller", 0) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6104] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6104] close(3) = 0 [pid 6104] mkdir("./file0", 0777) = 0 [ 167.883370][ T6104] loop4: detected capacity change from 0 to 8192 [ 167.893361][ T6104] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.906787][ T6104] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 167.916255][ T6104] REISERFS (device loop4): using ordered data mode [ 167.923490][ T6104] reiserfs: using flush barriers [ 167.929509][ T6104] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.946129][ T6104] REISERFS (device loop4): checking transaction log (loop4) [pid 6104] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] chdir("./file0") = 0 [pid 6104] ioctl(4, LOOP_CLR_FD) = 0 [pid 6104] close(4) = 0 [pid 6104] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6103] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] <... futex resumed>) = 0 [pid 6104] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6104] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] <... futex resumed>) = 1 [pid 6104] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6104] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6103] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6104] <... futex resumed>) = 0 [ 167.984206][ T6104] REISERFS (device loop4): Using r5 hash to sort names [ 167.991425][ T6104] REISERFS (device loop4): using 3.5.x disk format [ 167.998382][ T6104] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6104] sendfile(4, 5, NULL, 140737974943952 [pid 6103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6103] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6103] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6106], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6106 [pid 6103] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6106 attached [pid 6103] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6106] open("./bus", O_RDONLY [pid 6103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6103] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6103] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6103] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6107], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6107 [pid 6103] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6107] truncate("./bus", 6 [pid 6103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6103] exit_group(0) = ? [pid 6104] <... sendfile resumed>) = ? [pid 6106] <... open resumed>) = ? [pid 6104] +++ exited with 0 +++ [pid 6107] <... truncate resumed>) = ? [pid 6107] +++ exited with 0 +++ [pid 6106] +++ exited with 0 +++ [pid 6103] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./168/binderfs") = 0 [pid 5073] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./168/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./168") = 0 [pid 5073] mkdir("./169", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6108 ./strace-static-x86_64: Process 6108 attached [pid 6108] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6108] chdir("./169") = 0 [pid 6108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6108] setpgid(0, 0) = 0 [pid 6108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6108] write(3, "1000", 4) = 4 [pid 6108] close(3) = 0 [pid 6108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6108] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6108] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6108] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6109 attached , parent_tid=[6109], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6109 [pid 6109] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6109] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6109] <... futex resumed>) = 0 [pid 6109] memfd_create("syzkaller", 0) = 3 [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6109] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6109] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6109] close(3) = 0 [pid 6109] mkdir("./file0", 0777) = 0 [ 168.524163][ T6109] loop4: detected capacity change from 0 to 8192 [ 168.534373][ T6109] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.547643][ T6109] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 168.557105][ T6109] REISERFS (device loop4): using ordered data mode [ 168.563761][ T6109] reiserfs: using flush barriers [ 168.569910][ T6109] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.586328][ T6109] REISERFS (device loop4): checking transaction log (loop4) [pid 6109] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6109] chdir("./file0") = 0 [pid 6109] ioctl(4, LOOP_CLR_FD) = 0 [pid 6109] close(4) = 0 [pid 6109] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6108] <... futex resumed>) = 0 [pid 6108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6109] <... futex resumed>) = 0 [pid 6109] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6109] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = 0 [pid 6108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6109] <... futex resumed>) = 1 [pid 6109] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6109] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = 0 [pid 6108] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6109] <... futex resumed>) = 1 [ 168.630501][ T6109] REISERFS (device loop4): Using r5 hash to sort names [ 168.637540][ T6109] REISERFS (device loop4): using 3.5.x disk format [ 168.644485][ T6109] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6109] sendfile(4, 5, NULL, 140737974943952 [pid 6108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6108] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6108] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6108] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6108] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6111], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6111 ./strace-static-x86_64: Process 6111 attached [pid 6108] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6111] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6111] open("./bus", O_RDONLY [pid 6108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6108] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6108] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6108] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6112], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6112 [pid 6108] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6108] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6112] truncate("./bus", 6 [pid 6108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6108] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6108] exit_group(0) = ? [pid 6109] <... sendfile resumed>) = ? [pid 6111] <... open resumed>) = ? [pid 6112] <... truncate resumed>) = ? [pid 6109] +++ exited with 0 +++ [pid 6111] +++ exited with 0 +++ [pid 6112] +++ exited with 0 +++ [pid 6108] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6108, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./169/binderfs") = 0 [pid 5073] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./169/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./169") = 0 [pid 5073] mkdir("./170", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6113 ./strace-static-x86_64: Process 6113 attached [pid 6113] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6113] chdir("./170") = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6113] write(3, "1000", 4) = 4 [pid 6113] close(3) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6113] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6113] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6114], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6114 [pid 6113] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6114 attached [pid 6114] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6113] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6114] <... set_robust_list resumed>) = 0 [pid 6114] memfd_create("syzkaller", 0) = 3 [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6114] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6114] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6114] close(3) = 0 [pid 6114] mkdir("./file0", 0777) = 0 [ 169.125311][ T6114] loop4: detected capacity change from 0 to 8192 [ 169.135657][ T6114] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 169.149031][ T6114] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 169.158461][ T6114] REISERFS (device loop4): using ordered data mode [ 169.165006][ T6114] reiserfs: using flush barriers [ 169.171197][ T6114] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.187537][ T6114] REISERFS (device loop4): checking transaction log (loop4) [pid 6114] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6114] chdir("./file0") = 0 [pid 6114] ioctl(4, LOOP_CLR_FD) = 0 [pid 6114] close(4) = 0 [pid 6114] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6114] <... futex resumed>) = 1 [pid 6114] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6114] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6114] <... futex resumed>) = 1 [pid 6114] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6114] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6114] <... futex resumed>) = 1 [ 169.230656][ T6114] REISERFS (device loop4): Using r5 hash to sort names [ 169.237737][ T6114] REISERFS (device loop4): using 3.5.x disk format [ 169.244534][ T6114] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6114] sendfile(4, 5, NULL, 140737974943952 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6113] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6113] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6116], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6116 ./strace-static-x86_64: Process 6116 attached [pid 6113] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6116] open("./bus", O_RDONLY [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6113] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6113] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6117], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6117 ./strace-static-x86_64: Process 6117 attached [pid 6113] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6117] truncate("./bus", 6 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6113] exit_group(0) = ? [pid 6116] <... open resumed>) = ? [pid 6114] <... sendfile resumed>) = ? [pid 6116] +++ exited with 0 +++ [pid 6117] <... truncate resumed>) = ? [pid 6117] +++ exited with 0 +++ [pid 6114] +++ exited with 0 +++ [pid 6113] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./170/binderfs") = 0 [pid 5073] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./170/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./170") = 0 [pid 5073] mkdir("./171", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6118 ./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6118] chdir("./171") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6118] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6119], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6119 [pid 6118] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6119] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] mkdir("./file0", 0777) = 0 [ 169.735906][ T6119] loop4: detected capacity change from 0 to 8192 [ 169.746183][ T6119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 169.759268][ T6119] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 169.768728][ T6119] REISERFS (device loop4): using ordered data mode [ 169.775257][ T6119] reiserfs: using flush barriers [ 169.781287][ T6119] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.797820][ T6119] REISERFS (device loop4): checking transaction log (loop4) [pid 6119] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file0") = 0 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6119] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6119] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [ 169.840700][ T6119] REISERFS (device loop4): Using r5 hash to sort names [ 169.847782][ T6119] REISERFS (device loop4): using 3.5.x disk format [ 169.854650][ T6119] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6119] sendfile(4, 5, NULL, 140737974943952 [pid 6118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6118] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6118] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6121 attached , parent_tid=[6121], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6121 [pid 6121] set_robust_list(0x7fe8f42d09e0, 24 [pid 6118] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... set_robust_list resumed>) = 0 [pid 6118] <... futex resumed>) = 0 [pid 6121] open("./bus", O_RDONLY [pid 6118] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6118] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6118] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6122 attached [pid 6122] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6122] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... clone resumed>, parent_tid=[6122], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6122 [pid 6118] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... futex resumed>) = 0 [pid 6122] truncate("./bus", 6 [pid 6118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6118] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6118] exit_group(0) = ? [pid 6121] <... open resumed>) = ? [pid 6119] <... sendfile resumed>) = ? [pid 6122] <... truncate resumed>) = ? [pid 6121] +++ exited with 0 +++ [pid 6122] +++ exited with 0 +++ [pid 6119] +++ exited with 0 +++ [pid 6118] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6118, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./171/binderfs") = 0 [pid 5073] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./171/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./171/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./171") = 0 [pid 5073] mkdir("./172", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6123 ./strace-static-x86_64: Process 6123 attached [pid 6123] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6123] chdir("./172") = 0 [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6123] setpgid(0, 0) = 0 [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6123] write(3, "1000", 4) = 4 [pid 6123] close(3) = 0 [pid 6123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6123] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6123] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6123] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6124], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6124 [pid 6123] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6124 attached [pid 6124] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6124] memfd_create("syzkaller", 0) = 3 [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6124] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6124] close(3) = 0 [pid 6124] mkdir("./file0", 0777) = 0 [ 170.319428][ T6124] loop4: detected capacity change from 0 to 8192 [ 170.329482][ T6124] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.342574][ T6124] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 170.352967][ T6124] REISERFS (device loop4): using ordered data mode [ 170.359516][ T6124] reiserfs: using flush barriers [ 170.365566][ T6124] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.382263][ T6124] REISERFS (device loop4): checking transaction log (loop4) [pid 6124] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6124] chdir("./file0") = 0 [pid 6124] ioctl(4, LOOP_CLR_FD) = 0 [pid 6124] close(4) = 0 [pid 6124] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] <... futex resumed>) = 0 [pid 6123] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = 0 [pid 6123] <... futex resumed>) = 1 [pid 6124] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6123] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... open resumed>) = 4 [pid 6124] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] openat(-1, "/proc/self/exe", O_RDONLY [pid 6123] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... openat resumed>) = 5 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6123] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... futex resumed>) = 0 [pid 6123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6124] sendfile(4, 5, NULL, 140737974943952 [pid 6123] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.423998][ T6124] REISERFS (device loop4): Using r5 hash to sort names [ 170.431272][ T6124] REISERFS (device loop4): using 3.5.x disk format [ 170.438626][ T6124] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6123] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6123] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6123] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6123] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6126 attached , parent_tid=[6126], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6126 [pid 6126] set_robust_list(0x7fe8f42d09e0, 24 [pid 6123] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] <... set_robust_list resumed>) = 0 [pid 6123] <... futex resumed>) = 0 [pid 6126] open("./bus", O_RDONLY [pid 6123] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6123] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6123] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6123] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6127 attached , parent_tid=[6127], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6127 [pid 6123] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6127] truncate("./bus", 6 [pid 6123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6123] exit_group(0) = ? [pid 6124] <... sendfile resumed>) = ? [pid 6126] <... open resumed>) = ? [pid 6124] +++ exited with 0 +++ [pid 6127] <... truncate resumed>) = ? [pid 6127] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 6123] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./172/binderfs") = 0 [ 170.808280][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 170.808298][ T27] audit: type=1804 audit(1671282394.213:608): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/172/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./172/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./172") = 0 [pid 5073] mkdir("./173", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [ 170.840110][ T27] audit: type=1800 audit(1671282394.213:609): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6128 ./strace-static-x86_64: Process 6128 attached [pid 6128] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6128] chdir("./173") = 0 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6128] setpgid(0, 0) = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6128] write(3, "1000", 4) = 4 [pid 6128] close(3) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6128] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6128] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6128] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6129 attached , parent_tid=[6129], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6129 [pid 6128] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6129] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6129] memfd_create("syzkaller", 0) = 3 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6129] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6129] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6129] close(3) = 0 [pid 6129] mkdir("./file0", 0777) = 0 [ 170.957797][ T6129] loop4: detected capacity change from 0 to 8192 [ 170.967736][ T6129] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.980817][ T6129] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 170.990612][ T6129] REISERFS (device loop4): using ordered data mode [ 170.997235][ T6129] reiserfs: using flush barriers [ 171.003280][ T6129] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.020284][ T6129] REISERFS (device loop4): checking transaction log (loop4) [pid 6129] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6129] chdir("./file0") = 0 [pid 6129] ioctl(4, LOOP_CLR_FD) = 0 [pid 6129] close(4) = 0 [pid 6129] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] <... futex resumed>) = 0 [pid 6129] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6128] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] <... futex resumed>) = 0 [pid 6129] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6128] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6129] <... open resumed>) = 4 [pid 6129] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] <... futex resumed>) = 0 [pid 6129] openat(-1, "/proc/self/exe", O_RDONLY [pid 6128] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6129] <... openat resumed>) = 5 [pid 6128] <... futex resumed>) = 0 [pid 6129] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6129] <... futex resumed>) = 0 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] sendfile(4, 5, NULL, 140737974943952 [pid 6128] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 171.062996][ T6129] REISERFS (device loop4): Using r5 hash to sort names [ 171.070373][ T6129] REISERFS (device loop4): using 3.5.x disk format [ 171.077294][ T6129] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6128] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6128] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6128] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6128] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6131], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6131 [pid 6128] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6131 attached [ 171.095343][ T27] audit: type=1800 audit(1671282394.493:610): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6131] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6131] open("./bus", O_RDONLY [pid 6128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6128] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6128] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6128] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6132 attached [pid 6132] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6132] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6128] <... clone resumed>, parent_tid=[6132], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6132 [pid 6128] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] <... futex resumed>) = 0 [pid 6132] truncate("./bus", 6 [pid 6128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6128] exit_group(0) = ? [pid 6129] <... sendfile resumed>) = ? [pid 6132] <... truncate resumed>) = ? [pid 6131] <... open resumed>) = ? [pid 6132] +++ exited with 0 +++ [pid 6131] +++ exited with 0 +++ [pid 6129] +++ exited with 0 +++ [pid 6128] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./173/binderfs") = 0 [ 171.448172][ T27] audit: type=1804 audit(1671282394.853:611): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/173/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 171.472376][ T27] audit: type=1800 audit(1671282394.853:612): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./173/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./173") = 0 [pid 5073] mkdir("./174", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6133 ./strace-static-x86_64: Process 6133 attached [pid 6133] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6133] chdir("./174") = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6133] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6133] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6134], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6134 [pid 6133] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6134 attached [pid 6134] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6134] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] mkdir("./file0", 0777) = 0 [ 171.604163][ T6134] loop4: detected capacity change from 0 to 8192 [ 171.614177][ T6134] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 171.627364][ T6134] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 171.637048][ T6134] REISERFS (device loop4): using ordered data mode [ 171.643737][ T6134] reiserfs: using flush barriers [ 171.649723][ T6134] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.666037][ T6134] REISERFS (device loop4): checking transaction log (loop4) [pid 6134] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6134] chdir("./file0") = 0 [pid 6134] ioctl(4, LOOP_CLR_FD) = 0 [pid 6134] close(4) = 0 [pid 6134] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6134] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 0 [ 171.703615][ T6134] REISERFS (device loop4): Using r5 hash to sort names [ 171.710664][ T6134] REISERFS (device loop4): using 3.5.x disk format [ 171.717969][ T6134] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6134] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6134] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6134] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = 0 [pid 6133] <... futex resumed>) = 1 [pid 6134] openat(-1, "/proc/self/exe", O_RDONLY [pid 6133] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... openat resumed>) = 5 [pid 6134] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6134] sendfile(4, 5, NULL, 140737974943952 [pid 6133] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 171.735485][ T27] audit: type=1800 audit(1671282395.133:613): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6133] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6133] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6133] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6133] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6136 attached , parent_tid=[6136], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6136 [pid 6136] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6136] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] <... futex resumed>) = 0 [pid 6136] open("./bus", O_RDONLY [pid 6133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6133] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6133] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6137], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6137 [pid 6133] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6137 attached ) = 0 [pid 6133] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6137] truncate("./bus", 6 [pid 6133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6133] exit_group(0) = ? [pid 6134] <... sendfile resumed>) = ? [pid 6136] <... open resumed>) = ? [pid 6134] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ [pid 6137] <... truncate resumed>) = ? [pid 6137] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./174/binderfs") = 0 [ 172.158043][ T27] audit: type=1804 audit(1671282395.563:614): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/174/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 172.182140][ T27] audit: type=1800 audit(1671282395.563:615): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./174/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./174") = 0 [pid 5073] mkdir("./175", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6138 ./strace-static-x86_64: Process 6138 attached [pid 6138] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6138] chdir("./175") = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6138] setpgid(0, 0) = 0 [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6138] write(3, "1000", 4) = 4 [pid 6138] close(3) = 0 [pid 6138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6138] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6138] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6138] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6139], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6139 [pid 6138] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6139 attached [pid 6139] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6139] memfd_create("syzkaller", 0) = 3 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6139] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6139] close(3) = 0 [pid 6139] mkdir("./file0", 0777) = 0 [ 172.319823][ T6139] loop4: detected capacity change from 0 to 8192 [ 172.329133][ T6139] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.342273][ T6139] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 172.351518][ T6139] REISERFS (device loop4): using ordered data mode [ 172.358143][ T6139] reiserfs: using flush barriers [ 172.363883][ T6139] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.380505][ T6139] REISERFS (device loop4): checking transaction log (loop4) [pid 6139] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6139] chdir("./file0") = 0 [pid 6139] ioctl(4, LOOP_CLR_FD) = 0 [pid 6139] close(4) = 0 [pid 6139] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6138] <... futex resumed>) = 0 [pid 6138] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6138] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 0 [ 172.417329][ T6139] REISERFS (device loop4): Using r5 hash to sort names [ 172.424425][ T6139] REISERFS (device loop4): using 3.5.x disk format [ 172.431366][ T6139] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6139] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6139] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 6138] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 1 [pid 6139] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6139] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 6138] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] <... futex resumed>) = 1 [ 172.448595][ T27] audit: type=1800 audit(1671282395.853:616): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6139] sendfile(4, 5, NULL, 140737974943952 [pid 6138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6138] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6138] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6138] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6138] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6141 attached [pid 6141] set_robust_list(0x7fe8f42d09e0, 24 [pid 6138] <... clone resumed>, parent_tid=[6141], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6141 [pid 6141] <... set_robust_list resumed>) = 0 [pid 6141] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6138] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6138] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... futex resumed>) = 0 [pid 6141] open("./bus", O_RDONLY [pid 6138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6138] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6138] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6138] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6142], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6142 [pid 6138] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6142 attached [pid 6142] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6142] truncate("./bus", 6 [pid 6138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6138] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6138] exit_group(0) = ? [pid 6139] <... sendfile resumed>) = ? [pid 6141] <... open resumed>) = ? [pid 6139] +++ exited with 0 +++ [pid 6142] <... truncate resumed>) = ? [pid 6141] +++ exited with 0 +++ [pid 6142] +++ exited with 0 +++ [pid 6138] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./175/binderfs") = 0 [ 172.849009][ T27] audit: type=1804 audit(1671282396.253:617): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/175/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./175/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./175") = 0 [pid 5073] mkdir("./176", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6143 ./strace-static-x86_64: Process 6143 attached [pid 6143] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6143] chdir("./176") = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0) = 0 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6143] write(3, "1000", 4) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6143] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6144 attached [pid 6144] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6143] <... clone resumed>, parent_tid=[6144], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6144 [pid 6144] <... set_robust_list resumed>) = 0 [pid 6143] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6144] memfd_create("syzkaller", 0 [pid 6143] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6144] <... memfd_create resumed>) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6144] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6144] close(3) = 0 [pid 6144] mkdir("./file0", 0777) = 0 [ 172.986270][ T6144] loop4: detected capacity change from 0 to 8192 [ 172.996980][ T6144] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.010563][ T6144] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 173.020729][ T6144] REISERFS (device loop4): using ordered data mode [ 173.027334][ T6144] reiserfs: using flush barriers [ 173.033285][ T6144] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.049753][ T6144] REISERFS (device loop4): checking transaction log (loop4) [pid 6144] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6144] chdir("./file0") = 0 [pid 6144] ioctl(4, LOOP_CLR_FD) = 0 [pid 6144] close(4) = 0 [pid 6144] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... futex resumed>) = 1 [pid 6144] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6144] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... futex resumed>) = 1 [pid 6144] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6144] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6144] <... futex resumed>) = 1 [pid 6143] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] sendfile(4, 5, NULL, 140737974943952 [pid 6143] <... futex resumed>) = 0 [ 173.092809][ T6144] REISERFS (device loop4): Using r5 hash to sort names [ 173.099864][ T6144] REISERFS (device loop4): using 3.5.x disk format [ 173.106957][ T6144] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6143] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6143] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6143] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6146 attached , parent_tid=[6146], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6146 [pid 6146] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6143] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] open("./bus", O_RDONLY [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6143] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6143] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6147 attached [pid 6147] set_robust_list(0x7fe8f42af9e0, 24 [pid 6143] <... clone resumed>, parent_tid=[6147], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6147 [pid 6143] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... set_robust_list resumed>) = 0 [pid 6147] truncate("./bus", 6 [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6143] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6143] exit_group(0) = ? [pid 6144] <... sendfile resumed>) = ? [pid 6146] <... open resumed>) = ? [pid 6144] +++ exited with 0 +++ [pid 6147] <... truncate resumed>) = ? [pid 6146] +++ exited with 0 +++ [pid 6147] +++ exited with 0 +++ [pid 6143] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./176/binderfs") = 0 [pid 5073] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./176/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./176") = 0 [pid 5073] mkdir("./177", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6148 ./strace-static-x86_64: Process 6148 attached [pid 6148] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6148] chdir("./177") = 0 [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6148] setpgid(0, 0) = 0 [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6148] write(3, "1000", 4) = 4 [pid 6148] close(3) = 0 [pid 6148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6148] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6148] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6148] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6149], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6149 [pid 6148] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6149] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6149] close(3) = 0 [pid 6149] mkdir("./file0", 0777) = 0 [ 173.601971][ T6149] loop4: detected capacity change from 0 to 8192 [ 173.612567][ T6149] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.625628][ T6149] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 173.634823][ T6149] REISERFS (device loop4): using ordered data mode [ 173.641430][ T6149] reiserfs: using flush barriers [ 173.647373][ T6149] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.663912][ T6149] REISERFS (device loop4): checking transaction log (loop4) [pid 6149] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6149] chdir("./file0") = 0 [pid 6149] ioctl(4, LOOP_CLR_FD) = 0 [pid 6149] close(4) = 0 [pid 6149] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = 0 [pid 6148] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... futex resumed>) = 1 [pid 6149] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6149] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = 0 [pid 6148] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... futex resumed>) = 1 [pid 6149] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6149] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = 0 [pid 6148] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... futex resumed>) = 1 [ 173.701118][ T6149] REISERFS (device loop4): Using r5 hash to sort names [ 173.708213][ T6149] REISERFS (device loop4): using 3.5.x disk format [ 173.714956][ T6149] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6149] sendfile(4, 5, NULL, 140737974943952 [pid 6148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6148] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6148] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6148] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6151 attached [pid 6151] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6151] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6148] <... clone resumed>, parent_tid=[6151], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6151 [pid 6148] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = 0 [pid 6148] <... futex resumed>) = 1 [pid 6151] open("./bus", O_RDONLY [pid 6148] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6148] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6148] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6148] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6152 attached , parent_tid=[6152], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6152 [pid 6148] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6152] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6152] truncate("./bus", 6 [pid 6148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6148] exit_group(0) = ? [pid 6149] <... sendfile resumed>) = ? [pid 6151] <... open resumed>) = ? [pid 6149] +++ exited with 0 +++ [pid 6152] <... truncate resumed>) = ? [pid 6151] +++ exited with 0 +++ [pid 6152] +++ exited with 0 +++ [pid 6148] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6148, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./177/binderfs") = 0 [pid 5073] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./177/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./177") = 0 [pid 5073] mkdir("./178", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6153 ./strace-static-x86_64: Process 6153 attached [pid 6153] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6153] chdir("./178") = 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6153] setpgid(0, 0) = 0 [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6153] write(3, "1000", 4) = 4 [pid 6153] close(3) = 0 [pid 6153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6153] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6153] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6153] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6154 attached [pid 6154] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6153] <... clone resumed>, parent_tid=[6154], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6154 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6153] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6154] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6154] close(3) = 0 [pid 6154] mkdir("./file0", 0777) = 0 [ 174.189001][ T6154] loop4: detected capacity change from 0 to 8192 [ 174.199464][ T6154] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 174.212647][ T6154] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 174.221933][ T6154] REISERFS (device loop4): using ordered data mode [ 174.228495][ T6154] reiserfs: using flush barriers [ 174.234656][ T6154] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.251305][ T6154] REISERFS (device loop4): checking transaction log (loop4) [pid 6154] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6154] chdir("./file0") = 0 [pid 6154] ioctl(4, LOOP_CLR_FD) = 0 [pid 6154] close(4) = 0 [pid 6154] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 1 [pid 6154] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6153] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... open resumed>) = 4 [pid 6154] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6154] openat(-1, "/proc/self/exe", O_RDONLY [pid 6153] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... openat resumed>) = 5 [pid 6153] <... futex resumed>) = 0 [pid 6154] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] sendfile(4, 5, NULL, 140737974943952 [pid 6153] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 174.288268][ T6154] REISERFS (device loop4): Using r5 hash to sort names [ 174.295365][ T6154] REISERFS (device loop4): using 3.5.x disk format [ 174.302434][ T6154] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6153] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6153] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6153] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6153] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6156 attached , parent_tid=[6156], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6156 [pid 6156] set_robust_list(0x7fe8f42d09e0, 24 [pid 6153] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] <... set_robust_list resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6156] open("./bus", O_RDONLY [pid 6153] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6153] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6153] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6153] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6157 attached [pid 6157] set_robust_list(0x7fe8f42af9e0, 24 [pid 6153] <... clone resumed>, parent_tid=[6157], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6157 [pid 6157] <... set_robust_list resumed>) = 0 [pid 6153] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] truncate("./bus", 6 [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6153] exit_group(0) = ? [pid 6154] <... sendfile resumed>) = ? [pid 6156] <... open resumed>) = ? [pid 6154] +++ exited with 0 +++ [pid 6156] +++ exited with 0 +++ [pid 6157] <... truncate resumed>) = ? [pid 6157] +++ exited with 0 +++ [pid 6153] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./178/binderfs") = 0 [pid 5073] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./178/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./178/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./178") = 0 [pid 5073] mkdir("./179", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6158 ./strace-static-x86_64: Process 6158 attached [pid 6158] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6158] chdir("./179") = 0 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6158] write(3, "1000", 4) = 4 [pid 6158] close(3) = 0 [pid 6158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6158] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6158] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6159], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6159 [pid 6158] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6159 attached [pid 6159] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6159] memfd_create("syzkaller", 0) = 3 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6159] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6159] close(3) = 0 [pid 6159] mkdir("./file0", 0777) = 0 [ 174.799837][ T6159] loop4: detected capacity change from 0 to 8192 [ 174.810001][ T6159] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 174.823647][ T6159] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 174.833214][ T6159] REISERFS (device loop4): using ordered data mode [ 174.839777][ T6159] reiserfs: using flush barriers [ 174.845543][ T6159] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.862346][ T6159] REISERFS (device loop4): checking transaction log (loop4) [pid 6159] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6159] chdir("./file0") = 0 [pid 6159] ioctl(4, LOOP_CLR_FD) = 0 [pid 6159] close(4) = 0 [pid 6159] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6159] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... futex resumed>) = 0 [pid 6158] <... futex resumed>) = 1 [pid 6159] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6158] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6159] <... open resumed>) = 4 [pid 6159] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6159] openat(-1, "/proc/self/exe", O_RDONLY [pid 6158] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... openat resumed>) = 5 [pid 6158] <... futex resumed>) = 0 [pid 6159] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... futex resumed>) = 0 [pid 6159] sendfile(4, 5, NULL, 140737974943952 [pid 6158] <... futex resumed>) = 0 [ 174.906421][ T6159] REISERFS (device loop4): Using r5 hash to sort names [ 174.913348][ T6159] REISERFS (device loop4): using 3.5.x disk format [ 174.920342][ T6159] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6158] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6158] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6158] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6161], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6161 [pid 6158] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6161 attached [pid 6161] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6161] open("./bus", O_RDONLY [pid 6158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6158] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6158] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6162 attached [pid 6162] set_robust_list(0x7fe8f42af9e0, 24 [pid 6158] <... clone resumed>, parent_tid=[6162], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6162 [pid 6158] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... set_robust_list resumed>) = 0 [pid 6162] truncate("./bus", 6 [pid 6158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6158] exit_group(0) = ? [pid 6159] <... sendfile resumed>) = ? [pid 6161] <... open resumed>) = ? [pid 6161] +++ exited with 0 +++ [pid 6159] +++ exited with 0 +++ [pid 6162] <... truncate resumed>) = ? [pid 6162] +++ exited with 0 +++ [pid 6158] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6158, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./179/binderfs") = 0 [pid 5073] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./179/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./179") = 0 [pid 5073] mkdir("./180", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6163 ./strace-static-x86_64: Process 6163 attached [pid 6163] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6163] chdir("./180") = 0 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6163] setpgid(0, 0) = 0 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6163] write(3, "1000", 4) = 4 [pid 6163] close(3) = 0 [pid 6163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6163] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6163] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6163] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6164], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6164 [pid 6163] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6164 attached [pid 6164] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6164] memfd_create("syzkaller", 0) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6164] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6164] close(3) = 0 [pid 6164] mkdir("./file0", 0777) = 0 [ 175.441045][ T6164] loop4: detected capacity change from 0 to 8192 [ 175.450627][ T6164] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.463679][ T6164] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 175.473069][ T6164] REISERFS (device loop4): using ordered data mode [ 175.479666][ T6164] reiserfs: using flush barriers [ 175.486127][ T6164] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.502411][ T6164] REISERFS (device loop4): checking transaction log (loop4) [pid 6164] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6164] chdir("./file0") = 0 [pid 6164] ioctl(4, LOOP_CLR_FD) = 0 [pid 6164] close(4) = 0 [pid 6164] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] <... futex resumed>) = 1 [pid 6164] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6164] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] <... futex resumed>) = 1 [pid 6164] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6164] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6163] <... futex resumed>) = 0 [pid 6164] sendfile(4, 5, NULL, 140737974943952 [pid 6163] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 175.543863][ T6164] REISERFS (device loop4): Using r5 hash to sort names [ 175.551106][ T6164] REISERFS (device loop4): using 3.5.x disk format [ 175.557988][ T6164] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6163] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6163] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6163] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6163] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6166 attached , parent_tid=[6166], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6166 [pid 6166] set_robust_list(0x7fe8f42d09e0, 24 [pid 6163] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... set_robust_list resumed>) = 0 [pid 6163] <... futex resumed>) = 0 [pid 6166] open("./bus", O_RDONLY [pid 6163] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6163] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6163] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6163] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6163] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6167 attached , parent_tid=[6167], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6167 [pid 6163] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6167] truncate("./bus", 6 [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6163] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6163] exit_group(0) = ? [pid 6164] <... sendfile resumed>) = ? [pid 6166] <... open resumed>) = ? [pid 6166] +++ exited with 0 +++ [pid 6167] <... truncate resumed>) = ? [pid 6167] +++ exited with 0 +++ [pid 6164] +++ exited with 0 +++ [pid 6163] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./180/binderfs") = 0 [pid 5073] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [ 175.978001][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 175.978016][ T27] audit: type=1804 audit(1671282399.383:632): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/180/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 176.007491][ T27] audit: type=1800 audit(1671282399.383:633): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./180/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./180") = 0 [pid 5073] mkdir("./181", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6168 ./strace-static-x86_64: Process 6168 attached [pid 6168] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6168] chdir("./181") = 0 [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6168] setpgid(0, 0) = 0 [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6168] write(3, "1000", 4) = 4 [pid 6168] close(3) = 0 [pid 6168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6168] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6168] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6168] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6169 attached , parent_tid=[6169], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6169 [pid 6169] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6168] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6169] memfd_create("syzkaller", 0 [pid 6168] <... futex resumed>) = 0 [pid 6169] <... memfd_create resumed>) = 3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6168] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6169] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6169] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6169] close(3) = 0 [pid 6169] mkdir("./file0", 0777) = 0 [ 176.124709][ T6169] loop4: detected capacity change from 0 to 8192 [ 176.134935][ T6169] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.148628][ T6169] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 176.158201][ T6169] REISERFS (device loop4): using ordered data mode [ 176.164747][ T6169] reiserfs: using flush barriers [ 176.170669][ T6169] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.187577][ T6169] REISERFS (device loop4): checking transaction log (loop4) [pid 6169] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6169] chdir("./file0") = 0 [pid 6169] ioctl(4, LOOP_CLR_FD) = 0 [pid 6169] close(4) = 0 [pid 6169] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] <... futex resumed>) = 0 [pid 6168] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = 0 [pid 6168] <... futex resumed>) = 1 [ 176.230185][ T6169] REISERFS (device loop4): Using r5 hash to sort names [ 176.237315][ T6169] REISERFS (device loop4): using 3.5.x disk format [ 176.243984][ T6169] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6169] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6168] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = 0 [pid 6168] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] <... futex resumed>) = 1 [pid 6169] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6169] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = 0 [pid 6168] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] <... futex resumed>) = 1 [ 176.276029][ T27] audit: type=1800 audit(1671282399.683:634): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6169] sendfile(4, 5, NULL, 140737974943952 [pid 6168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6168] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6168] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6168] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6171], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6171 [pid 6168] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6171 attached [pid 6171] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6171] open("./bus", O_RDONLY [pid 6168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6168] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6168] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6168] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6168] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6172 attached , parent_tid=[6172], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6172 [pid 6168] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6172] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6172] truncate("./bus", 6 [pid 6168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6168] exit_group(0) = ? [pid 6169] <... sendfile resumed>) = ? [pid 6171] <... open resumed>) = ? [pid 6171] +++ exited with 0 +++ [pid 6172] <... truncate resumed>) = ? [pid 6172] +++ exited with 0 +++ [pid 6169] +++ exited with 0 +++ [pid 6168] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6168, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./181/binderfs") = 0 [pid 5073] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./181/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./181/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./181") = 0 [pid 5073] mkdir("./182", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 176.638628][ T27] audit: type=1804 audit(1671282400.043:635): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/181/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 176.661777][ T27] audit: type=1800 audit(1671282400.043:636): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6173 ./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6173] chdir("./182") = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6173] setpgid(0, 0) = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6173] write(3, "1000", 4) = 4 [pid 6173] close(3) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6173] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6173] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6173] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6174], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6174 [pid 6173] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6174 attached [pid 6174] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6174] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./file0", 0777) = 0 [ 176.782715][ T6174] loop4: detected capacity change from 0 to 8192 [ 176.793798][ T6174] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.806944][ T6174] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 176.816508][ T6174] REISERFS (device loop4): using ordered data mode [ 176.823021][ T6174] reiserfs: using flush barriers [ 176.829232][ T6174] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.846309][ T6174] REISERFS (device loop4): checking transaction log (loop4) [pid 6174] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6174] chdir("./file0") = 0 [pid 6174] ioctl(4, LOOP_CLR_FD) = 0 [pid 6174] close(4) = 0 [pid 6174] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 176.889588][ T6174] REISERFS (device loop4): Using r5 hash to sort names [ 176.896668][ T6174] REISERFS (device loop4): using 3.5.x disk format [ 176.903383][ T6174] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6174] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... futex resumed>) = 1 [pid 6174] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6174] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... futex resumed>) = 1 [pid 6174] sendfile(4, 5, NULL, 140737974943952 [pid 6173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6173] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6173] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 176.930232][ T27] audit: type=1800 audit(1671282400.333:637): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6173] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6176 attached , parent_tid=[6176], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6176 [pid 6176] set_robust_list(0x7fe8f42d09e0, 24 [pid 6173] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6176] open("./bus", O_RDONLY [pid 6173] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6173] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6173] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6173] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6177], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6177 [pid 6173] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6177 attached [pid 6177] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6177] truncate("./bus", 6 [pid 6173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6173] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6173] exit_group(0) = ? [pid 6174] <... sendfile resumed>) = ? [pid 6176] <... open resumed>) = ? [pid 6176] +++ exited with 0 +++ [pid 6177] <... truncate resumed>) = ? [pid 6177] +++ exited with 0 +++ [pid 6174] +++ exited with 0 +++ [pid 6173] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./182/binderfs") = 0 [pid 5073] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./182/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./182") = 0 [ 177.278288][ T27] audit: type=1804 audit(1671282400.683:638): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/182/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 177.301644][ T27] audit: type=1800 audit(1671282400.683:639): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] mkdir("./183", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6178 ./strace-static-x86_64: Process 6178 attached [pid 6178] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6178] chdir("./183") = 0 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6178] setpgid(0, 0) = 0 [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6178] write(3, "1000", 4) = 4 [pid 6178] close(3) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6178] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6178] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6178] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6179], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6179 [pid 6178] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6179 attached [pid 6179] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6179] memfd_create("syzkaller", 0) = 3 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6179] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6179] close(3) = 0 [pid 6179] mkdir("./file0", 0777) = 0 [ 177.419786][ T6179] loop4: detected capacity change from 0 to 8192 [ 177.429604][ T6179] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.442661][ T6179] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 177.452368][ T6179] REISERFS (device loop4): using ordered data mode [ 177.459197][ T6179] reiserfs: using flush barriers [ 177.465238][ T6179] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.481707][ T6179] REISERFS (device loop4): checking transaction log (loop4) [pid 6179] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6179] chdir("./file0") = 0 [pid 6179] ioctl(4, LOOP_CLR_FD) = 0 [pid 6179] close(4) = 0 [pid 6179] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 1 [pid 6179] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6179] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 1 [pid 6179] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6179] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6178] <... futex resumed>) = 0 [pid 6179] sendfile(4, 5, NULL, 140737974943952 [pid 6178] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 177.523850][ T6179] REISERFS (device loop4): Using r5 hash to sort names [ 177.531050][ T6179] REISERFS (device loop4): using 3.5.x disk format [ 177.537930][ T6179] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.556818][ T27] audit: type=1800 audit(1671282400.963:640): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6178] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6178] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6178] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6178] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6178] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6181 attached , parent_tid=[6181], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6181 [pid 6181] set_robust_list(0x7fe8f42d09e0, 24 [pid 6178] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... set_robust_list resumed>) = 0 [pid 6178] <... futex resumed>) = 0 [pid 6181] open("./bus", O_RDONLY [pid 6178] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6178] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6178] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6178] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x7fe8f42af9e0, 24 [pid 6178] <... clone resumed>, parent_tid=[6182], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6182 [pid 6182] <... set_robust_list resumed>) = 0 [pid 6178] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] truncate("./bus", 6 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6178] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6178] exit_group(0) = ? [pid 6179] <... sendfile resumed>) = ? [pid 6179] +++ exited with 0 +++ [pid 6181] <... open resumed>) = ? [pid 6182] <... truncate resumed>) = ? [pid 6181] +++ exited with 0 +++ [pid 6182] +++ exited with 0 +++ [pid 6178] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6178, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./183/binderfs") = 0 [pid 5073] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./183/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 177.888964][ T27] audit: type=1804 audit(1671282401.293:641): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/183/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./183/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./183") = 0 [pid 5073] mkdir("./184", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6183 ./strace-static-x86_64: Process 6183 attached [pid 6183] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6183] chdir("./184") = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6183] write(3, "1000", 4) = 4 [pid 6183] close(3) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6183] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6183] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6183] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6184], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6184 [pid 6183] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6184 attached [pid 6184] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6184] memfd_create("syzkaller", 0) = 3 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6184] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6184] close(3) = 0 [pid 6184] mkdir("./file0", 0777) = 0 [ 178.013869][ T6184] loop4: detected capacity change from 0 to 8192 [ 178.023742][ T6184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.036997][ T6184] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 178.046815][ T6184] REISERFS (device loop4): using ordered data mode [ 178.053320][ T6184] reiserfs: using flush barriers [ 178.059339][ T6184] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.076096][ T6184] REISERFS (device loop4): checking transaction log (loop4) [pid 6184] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6184] chdir("./file0") = 0 [pid 6184] ioctl(4, LOOP_CLR_FD) = 0 [pid 6184] close(4) = 0 [pid 6184] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = 0 [pid 6183] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... futex resumed>) = 1 [pid 6184] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6184] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = 0 [pid 6183] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... futex resumed>) = 1 [pid 6184] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6184] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = 0 [pid 6183] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... futex resumed>) = 1 [ 178.119161][ T6184] REISERFS (device loop4): Using r5 hash to sort names [ 178.126328][ T6184] REISERFS (device loop4): using 3.5.x disk format [ 178.133018][ T6184] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6184] sendfile(4, 5, NULL, 140737974943952 [pid 6183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6183] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6183] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6183] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6186], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6186 [pid 6183] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6186 attached [pid 6186] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6186] open("./bus", O_RDONLY [pid 6183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6183] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6183] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6183] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6183] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6187 attached , parent_tid=[6187], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6187 [pid 6183] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6187] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6187] truncate("./bus", 6 [pid 6183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6183] exit_group(0) = ? [pid 6184] <... sendfile resumed>) = ? [pid 6186] <... open resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 6187] <... truncate resumed>) = ? [pid 6187] +++ exited with 0 +++ [pid 6186] +++ exited with 0 +++ [pid 6183] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./184/binderfs") = 0 [pid 5073] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./184/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./184/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./184") = 0 [pid 5073] mkdir("./185", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6188 ./strace-static-x86_64: Process 6188 attached [pid 6188] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6188] chdir("./185") = 0 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6188] setpgid(0, 0) = 0 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6188] close(3) = 0 [pid 6188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6188] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6188] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6189], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6189 ./strace-static-x86_64: Process 6189 attached [pid 6188] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6188] <... futex resumed>) = 0 [pid 6189] <... set_robust_list resumed>) = 0 [pid 6188] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6189] memfd_create("syzkaller", 0) = 3 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6189] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6189] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6189] close(3) = 0 [pid 6189] mkdir("./file0", 0777) = 0 [ 178.645452][ T6189] loop4: detected capacity change from 0 to 8192 [ 178.655283][ T6189] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.668817][ T6189] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 178.678921][ T6189] REISERFS (device loop4): using ordered data mode [ 178.685807][ T6189] reiserfs: using flush barriers [ 178.691737][ T6189] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.708681][ T6189] REISERFS (device loop4): checking transaction log (loop4) [pid 6189] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6189] chdir("./file0") = 0 [pid 6189] ioctl(4, LOOP_CLR_FD) = 0 [pid 6189] close(4) = 0 [pid 6189] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6188] <... futex resumed>) = 0 [pid 6189] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6188] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] <... open resumed>) = 4 [pid 6188] <... futex resumed>) = 0 [pid 6189] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6189] <... futex resumed>) = 0 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] openat(-1, "/proc/self/exe", O_RDONLY [pid 6188] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] <... openat resumed>) = 5 [pid 6188] <... futex resumed>) = 0 [pid 6189] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6189] <... futex resumed>) = 0 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] sendfile(4, 5, NULL, 140737974943952 [pid 6188] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 178.751419][ T6189] REISERFS (device loop4): Using r5 hash to sort names [ 178.758385][ T6189] REISERFS (device loop4): using 3.5.x disk format [ 178.765312][ T6189] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6188] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6188] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6188] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6191], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6191 [pid 6188] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6191] open("./bus", O_RDONLY [pid 6188] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6188] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6188] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6188] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6192], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6192 [pid 6188] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6192 attached [pid 6192] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6192] truncate("./bus", 6 [pid 6188] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6188] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6188] exit_group(0) = ? [pid 6189] <... sendfile resumed>) = ? [pid 6191] <... open resumed>) = ? [pid 6191] +++ exited with 0 +++ [pid 6189] +++ exited with 0 +++ [pid 6192] <... truncate resumed>) = ? [pid 6192] +++ exited with 0 +++ [pid 6188] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6188, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./185/binderfs") = 0 [pid 5073] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./185/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./185") = 0 [pid 5073] mkdir("./186", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6193 ./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6193] chdir("./186") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6193] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6194], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6194 ./strace-static-x86_64: Process 6194 attached [pid 6193] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6194] memfd_create("syzkaller", 0 [pid 6193] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6194] <... memfd_create resumed>) = 3 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6194] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6194] close(3) = 0 [pid 6194] mkdir("./file0", 0777) = 0 [ 179.258106][ T6194] loop4: detected capacity change from 0 to 8192 [ 179.267903][ T6194] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.280931][ T6194] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 179.290481][ T6194] REISERFS (device loop4): using ordered data mode [ 179.297083][ T6194] reiserfs: using flush barriers [ 179.302814][ T6194] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.319315][ T6194] REISERFS (device loop4): checking transaction log (loop4) [pid 6194] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6194] chdir("./file0") = 0 [pid 6194] ioctl(4, LOOP_CLR_FD) = 0 [pid 6194] close(4) = 0 [pid 6194] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] <... futex resumed>) = 0 [pid 6193] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... futex resumed>) = 0 [pid 6194] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6194] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] openat(-1, "/proc/self/exe", O_RDONLY [pid 6193] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... openat resumed>) = 5 [pid 6194] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] sendfile(4, 5, NULL, 140737974943952 [pid 6193] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 179.364282][ T6194] REISERFS (device loop4): Using r5 hash to sort names [ 179.371289][ T6194] REISERFS (device loop4): using 3.5.x disk format [ 179.378094][ T6194] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6193] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6193] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6193] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6196 attached , parent_tid=[6196], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6196 [pid 6193] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6196] open("./bus", O_RDONLY [pid 6193] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6193] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6193] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6197], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6197 [pid 6193] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6197] truncate("./bus", 6 [pid 6193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6193] exit_group(0) = ? [pid 6194] <... sendfile resumed>) = ? [pid 6196] <... open resumed>) = ? [pid 6194] +++ exited with 0 +++ [pid 6197] <... truncate resumed>) = ? [pid 6196] +++ exited with 0 +++ [pid 6197] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./186/binderfs") = 0 [pid 5073] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./186/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./186/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./186") = 0 [pid 5073] mkdir("./187", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6198 ./strace-static-x86_64: Process 6198 attached [pid 6198] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6198] chdir("./187") = 0 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6198] setpgid(0, 0) = 0 [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6198] write(3, "1000", 4) = 4 [pid 6198] close(3) = 0 [pid 6198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6198] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6198] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6198] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6199], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6199 ./strace-static-x86_64: Process 6199 attached [pid 6198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6199] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6199] memfd_create("syzkaller", 0) = 3 [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6199] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6199] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6199] close(3) = 0 [pid 6199] mkdir("./file0", 0777) = 0 [ 179.911701][ T6199] loop4: detected capacity change from 0 to 8192 [ 179.921836][ T6199] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.935039][ T6199] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 179.944611][ T6199] REISERFS (device loop4): using ordered data mode [ 179.951724][ T6199] reiserfs: using flush barriers [ 179.957702][ T6199] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.974016][ T6199] REISERFS (device loop4): checking transaction log (loop4) [pid 6199] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6199] chdir("./file0") = 0 [pid 6199] ioctl(4, LOOP_CLR_FD) = 0 [pid 6199] close(4) = 0 [pid 6199] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6199] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] <... futex resumed>) = 0 [pid 6198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6199] <... futex resumed>) = 0 [pid 6199] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6199] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6199] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 0 [pid 6199] openat(-1, "/proc/self/exe", O_RDONLY [pid 6198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6199] <... openat resumed>) = 5 [pid 6199] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6199] sendfile(4, 5, NULL, 140737974943952 [pid 6198] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 180.016092][ T6199] REISERFS (device loop4): Using r5 hash to sort names [ 180.022977][ T6199] REISERFS (device loop4): using 3.5.x disk format [ 180.029775][ T6199] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6198] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6198] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6198] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6198] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6201 attached , parent_tid=[6201], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6201 [pid 6198] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] set_robust_list(0x7fe8f42d09e0, 24 [pid 6198] <... futex resumed>) = 0 [pid 6201] <... set_robust_list resumed>) = 0 [pid 6198] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6201] open("./bus", O_RDONLY [pid 6198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6198] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6198] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6198] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6198] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6202 attached , parent_tid=[6202], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6202 [pid 6202] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6202] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6198] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... futex resumed>) = 0 [pid 6202] truncate("./bus", 6 [pid 6198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6198] exit_group(0) = ? [pid 6199] <... sendfile resumed>) = ? [pid 6201] <... open resumed>) = ? [pid 6199] +++ exited with 0 +++ [pid 6202] <... truncate resumed>) = ? [pid 6201] +++ exited with 0 +++ [pid 6202] +++ exited with 0 +++ [pid 6198] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./187/binderfs") = 0 [pid 5073] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./187/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./187/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./187") = 0 [pid 5073] mkdir("./188", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6203 ./strace-static-x86_64: Process 6203 attached [pid 6203] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6203] chdir("./188") = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6203] setpgid(0, 0) = 0 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6203] write(3, "1000", 4) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6203] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6203] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6204 attached , parent_tid=[6204], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6204 [pid 6203] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6204] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6204] memfd_create("syzkaller", 0) = 3 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6204] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6204] close(3) = 0 [pid 6204] mkdir("./file0", 0777) = 0 [ 180.522372][ T6204] loop4: detected capacity change from 0 to 8192 [ 180.532355][ T6204] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 180.545874][ T6204] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 180.555104][ T6204] REISERFS (device loop4): using ordered data mode [ 180.561718][ T6204] reiserfs: using flush barriers [ 180.567682][ T6204] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.584248][ T6204] REISERFS (device loop4): checking transaction log (loop4) [pid 6204] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6204] chdir("./file0") = 0 [pid 6204] ioctl(4, LOOP_CLR_FD) = 0 [pid 6204] close(4) = 0 [pid 6204] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6204] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6204] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6203] <... futex resumed>) = 0 [pid 6204] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6204] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] <... futex resumed>) = 0 [pid 6204] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6204] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6204] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6204] sendfile(4, 5, NULL, 140737974943952 [ 180.626521][ T6204] REISERFS (device loop4): Using r5 hash to sort names [ 180.633550][ T6204] REISERFS (device loop4): using 3.5.x disk format [ 180.640442][ T6204] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6203] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6203] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6203] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6206], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6206 [pid 6203] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6206 attached [pid 6206] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6206] open("./bus", O_RDONLY [pid 6203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6203] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6203] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6207 attached , parent_tid=[6207], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6207 [pid 6203] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6207] truncate("./bus", 6 [pid 6203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6203] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6203] exit_group(0) = ? [pid 6204] <... sendfile resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6206] <... open resumed>) = ? [pid 6207] <... truncate resumed>) = ? [pid 6206] +++ exited with 0 +++ [pid 6207] +++ exited with 0 +++ [pid 6203] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./188/binderfs") = 0 [ 181.048916][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 181.048938][ T27] audit: type=1804 audit(1671282404.453:656): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/188/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./188/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./188") = 0 [pid 5073] mkdir("./189", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [ 181.080249][ T27] audit: type=1800 audit(1671282404.453:657): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6208 ./strace-static-x86_64: Process 6208 attached [pid 6208] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6208] chdir("./189") = 0 [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6208] setpgid(0, 0) = 0 [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6208] write(3, "1000", 4) = 4 [pid 6208] close(3) = 0 [pid 6208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6208] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6208] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6208] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6209], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6209 [pid 6208] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6209] memfd_create("syzkaller", 0) = 3 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6209] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6209] close(3) = 0 [pid 6209] mkdir("./file0", 0777) = 0 [ 181.201973][ T6209] loop4: detected capacity change from 0 to 8192 [ 181.212075][ T6209] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 181.225303][ T6209] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 181.234579][ T6209] REISERFS (device loop4): using ordered data mode [ 181.241146][ T6209] reiserfs: using flush barriers [ 181.247074][ T6209] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.263941][ T6209] REISERFS (device loop4): checking transaction log (loop4) [pid 6209] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6209] chdir("./file0") = 0 [pid 6209] ioctl(4, LOOP_CLR_FD) = 0 [pid 6209] close(4) = 0 [pid 6209] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6208] <... futex resumed>) = 0 [pid 6209] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6208] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... open resumed>) = 4 [pid 6208] <... futex resumed>) = 0 [pid 6209] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... futex resumed>) = 0 [pid 6208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] openat(-1, "/proc/self/exe", O_RDONLY [pid 6208] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... openat resumed>) = 5 [pid 6208] <... futex resumed>) = 0 [pid 6209] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... futex resumed>) = 0 [pid 6208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] sendfile(4, 5, NULL, 140737974943952 [pid 6208] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 181.301175][ T6209] REISERFS (device loop4): Using r5 hash to sort names [ 181.308254][ T6209] REISERFS (device loop4): using 3.5.x disk format [ 181.314975][ T6209] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 181.328398][ T27] audit: type=1800 audit(1671282404.733:658): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6208] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6208] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6208] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6208] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6211 attached , parent_tid=[6211], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6211 [pid 6208] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6211] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6211] open("./bus", O_RDONLY [pid 6208] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6208] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6208] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6208] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6212 attached , parent_tid=[6212], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6212 [pid 6212] set_robust_list(0x7fe8f42af9e0, 24 [pid 6208] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6212] truncate("./bus", 6 [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6208] exit_group(0) = ? [pid 6209] <... sendfile resumed>) = ? [pid 6211] <... open resumed>) = ? [pid 6209] +++ exited with 0 +++ [pid 6212] <... truncate resumed>) = ? [pid 6212] +++ exited with 0 +++ [pid 6211] +++ exited with 0 +++ [pid 6208] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./189/binderfs") = 0 [pid 5073] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 181.688629][ T27] audit: type=1804 audit(1671282405.093:659): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/189/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 181.712290][ T27] audit: type=1800 audit(1671282405.093:660): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./189/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./189") = 0 [pid 5073] mkdir("./190", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6213 ./strace-static-x86_64: Process 6213 attached [pid 6213] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6213] chdir("./190") = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6213] setpgid(0, 0) = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6213] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6214], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6214 [pid 6213] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6214 attached [pid 6214] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6214] memfd_create("syzkaller", 0) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6214] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6214] close(3) = 0 [pid 6214] mkdir("./file0", 0777) = 0 [ 181.842316][ T6214] loop4: detected capacity change from 0 to 8192 [ 181.852354][ T6214] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 181.865467][ T6214] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 181.874674][ T6214] REISERFS (device loop4): using ordered data mode [ 181.881422][ T6214] reiserfs: using flush barriers [ 181.887266][ T6214] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.903586][ T6214] REISERFS (device loop4): checking transaction log (loop4) [pid 6214] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6214] chdir("./file0") = 0 [pid 6214] ioctl(4, LOOP_CLR_FD) = 0 [pid 6214] close(4) = 0 [pid 6214] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6214] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6213] <... futex resumed>) = 1 [pid 6214] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6213] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... open resumed>) = 4 [pid 6214] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6213] <... futex resumed>) = 1 [pid 6214] openat(-1, "/proc/self/exe", O_RDONLY [pid 6213] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... openat resumed>) = 5 [pid 6214] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6214] sendfile(4, 5, NULL, 140737974943952 [pid 6213] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 181.944356][ T6214] REISERFS (device loop4): Using r5 hash to sort names [ 181.951303][ T6214] REISERFS (device loop4): using 3.5.x disk format [ 181.958242][ T6214] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 181.976497][ T27] audit: type=1800 audit(1671282405.383:661): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6213] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6213] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6213] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6216 attached , parent_tid=[6216], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6216 [pid 6216] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6213] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] open("./bus", O_RDONLY [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6213] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6213] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6213] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6217], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6217 [pid 6213] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6217 attached [pid 6217] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6217] truncate("./bus", 6 [pid 6213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6213] exit_group(0) = ? [pid 6214] <... sendfile resumed>) = ? [pid 6216] <... open resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 6217] <... truncate resumed>) = ? [pid 6217] +++ exited with 0 +++ [pid 6216] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./190/binderfs") = 0 [pid 5073] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 182.348939][ T27] audit: type=1804 audit(1671282405.753:662): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/190/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 182.372698][ T27] audit: type=1800 audit(1671282405.753:663): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./190/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./190") = 0 [pid 5073] mkdir("./191", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6218 ./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6218] chdir("./191") = 0 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] setpgid(0, 0) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6218] write(3, "1000", 4) = 4 [pid 6218] close(3) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6218] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6218] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6219], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6219 ./strace-static-x86_64: Process 6219 attached [pid 6218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6218] <... futex resumed>) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] memfd_create("syzkaller", 0) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6219] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6219] close(3) = 0 [pid 6219] mkdir("./file0", 0777) = 0 [ 182.507072][ T6219] loop4: detected capacity change from 0 to 8192 [ 182.517071][ T6219] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.530168][ T6219] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 182.540114][ T6219] REISERFS (device loop4): using ordered data mode [ 182.546757][ T6219] reiserfs: using flush barriers [ 182.553086][ T6219] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.569545][ T6219] REISERFS (device loop4): checking transaction log (loop4) [pid 6219] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] chdir("./file0") = 0 [pid 6219] ioctl(4, LOOP_CLR_FD) = 0 [pid 6219] close(4) = 0 [pid 6219] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... futex resumed>) = 1 [pid 6219] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6219] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... futex resumed>) = 1 [pid 6219] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6219] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... futex resumed>) = 1 [ 182.610893][ T6219] REISERFS (device loop4): Using r5 hash to sort names [ 182.618188][ T6219] REISERFS (device loop4): using 3.5.x disk format [ 182.625330][ T6219] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6219] sendfile(4, 5, NULL, 140737974943952 [pid 6218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6218] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6218] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6218] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 182.643479][ T27] audit: type=1800 audit(1671282406.043:664): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6218] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6221 attached [pid 6221] set_robust_list(0x7fe8f42d09e0, 24 [pid 6218] <... clone resumed>, parent_tid=[6221], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6221 [pid 6221] <... set_robust_list resumed>) = 0 [pid 6218] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] open("./bus", O_RDONLY [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6218] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6218] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6222 attached [pid 6222] set_robust_list(0x7fe8f42af9e0, 24 [pid 6218] <... clone resumed>, parent_tid=[6222], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6222 [pid 6218] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] <... set_robust_list resumed>) = 0 [pid 6218] <... futex resumed>) = 0 [pid 6222] truncate("./bus", 6 [pid 6218] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6218] exit_group(0) = ? [pid 6219] <... sendfile resumed>) = ? [pid 6222] <... truncate resumed>) = ? [pid 6221] <... open resumed>) = ? [pid 6219] +++ exited with 0 +++ [pid 6222] +++ exited with 0 +++ [pid 6221] +++ exited with 0 +++ [pid 6218] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./191/binderfs") = 0 [ 182.988663][ T27] audit: type=1804 audit(1671282406.393:665): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/191/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./191/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./191") = 0 [pid 5073] mkdir("./192", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6223 ./strace-static-x86_64: Process 6223 attached [pid 6223] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6223] chdir("./192") = 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6223] setpgid(0, 0) = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6223] write(3, "1000", 4) = 4 [pid 6223] close(3) = 0 [pid 6223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6223] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6223] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6223] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6224], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6224 [pid 6223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6224 attached [pid 6224] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6224] memfd_create("syzkaller", 0) = 3 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6224] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6224] close(3) = 0 [pid 6224] mkdir("./file0", 0777) = 0 [ 183.121426][ T6224] loop4: detected capacity change from 0 to 8192 [ 183.131407][ T6224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.144565][ T6224] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 183.153828][ T6224] REISERFS (device loop4): using ordered data mode [ 183.160694][ T6224] reiserfs: using flush barriers [ 183.166784][ T6224] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.183097][ T6224] REISERFS (device loop4): checking transaction log (loop4) [pid 6224] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6224] chdir("./file0") = 0 [pid 6224] ioctl(4, LOOP_CLR_FD) = 0 [pid 6224] close(4) = 0 [pid 6224] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... futex resumed>) = 1 [pid 6224] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6224] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... futex resumed>) = 1 [pid 6224] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6224] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... futex resumed>) = 1 [ 183.220117][ T6224] REISERFS (device loop4): Using r5 hash to sort names [ 183.227410][ T6224] REISERFS (device loop4): using 3.5.x disk format [ 183.234253][ T6224] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6224] sendfile(4, 5, NULL, 140737974943952 [pid 6223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6223] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6223] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6223] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6223] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6226 attached [pid 6226] set_robust_list(0x7fe8f42d09e0, 24 [pid 6223] <... clone resumed>, parent_tid=[6226], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6226 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] open("./bus", O_RDONLY [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6223] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6223] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6223] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6227 attached [pid 6227] set_robust_list(0x7fe8f42af9e0, 24 [pid 6223] <... clone resumed>, parent_tid=[6227], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6227 [pid 6227] <... set_robust_list resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] truncate("./bus", 6 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6223] exit_group(0) = ? [pid 6226] <... open resumed>) = ? [pid 6224] <... sendfile resumed>) = ? [pid 6227] <... truncate resumed>) = ? [pid 6227] +++ exited with 0 +++ [pid 6226] +++ exited with 0 +++ [pid 6224] +++ exited with 0 +++ [pid 6223] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./192/binderfs") = 0 [pid 5073] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./192/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./192") = 0 [pid 5073] mkdir("./193", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6228 ./strace-static-x86_64: Process 6228 attached [pid 6228] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6228] chdir("./193") = 0 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6228] setpgid(0, 0) = 0 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6228] write(3, "1000", 4) = 4 [pid 6228] close(3) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6228] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6228] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6228] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6229], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6229 ./strace-static-x86_64: Process 6229 attached [pid 6229] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6228] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6229] <... set_robust_list resumed>) = 0 [pid 6229] memfd_create("syzkaller", 0) = 3 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6229] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6229] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6229] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6229] close(3) = 0 [pid 6229] mkdir("./file0", 0777) = 0 [ 183.698571][ T6229] loop4: detected capacity change from 0 to 8192 [ 183.709425][ T6229] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.722503][ T6229] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 183.731810][ T6229] REISERFS (device loop4): using ordered data mode [ 183.738380][ T6229] reiserfs: using flush barriers [ 183.744151][ T6229] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.761614][ T6229] REISERFS (device loop4): checking transaction log (loop4) [pid 6229] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6229] chdir("./file0") = 0 [pid 6229] ioctl(4, LOOP_CLR_FD) = 0 [pid 6229] close(4) = 0 [pid 6229] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... futex resumed>) = 0 [pid 6228] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6229] <... futex resumed>) = 1 [pid 6229] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6229] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... futex resumed>) = 0 [pid 6228] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6229] <... futex resumed>) = 1 [pid 6229] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6229] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6229] sendfile(4, 5, NULL, 140737974943952 [pid 6228] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 183.799948][ T6229] REISERFS (device loop4): Using r5 hash to sort names [ 183.807014][ T6229] REISERFS (device loop4): using 3.5.x disk format [ 183.814110][ T6229] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6228] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6228] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6228] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6228] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6231], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6231 ./strace-static-x86_64: Process 6231 attached [pid 6228] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6231] open("./bus", O_RDONLY [pid 6228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6228] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6228] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6228] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6232], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6232 [pid 6228] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6232 attached [pid 6232] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6232] truncate("./bus", 6 [pid 6228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6228] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6228] exit_group(0) = ? [pid 6229] <... sendfile resumed>) = ? [pid 6231] <... open resumed>) = ? [pid 6231] +++ exited with 0 +++ [pid 6229] +++ exited with 0 +++ [pid 6232] <... truncate resumed>) = ? [pid 6232] +++ exited with 0 +++ [pid 6228] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./193/binderfs") = 0 [pid 5073] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./193/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./193") = 0 [pid 5073] mkdir("./194", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6233 ./strace-static-x86_64: Process 6233 attached [pid 6233] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6233] chdir("./194") = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6233] setpgid(0, 0) = 0 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6233] write(3, "1000", 4) = 4 [pid 6233] close(3) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6233] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6233] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6234], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6234 [pid 6233] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6234 attached [pid 6234] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6234] memfd_create("syzkaller", 0) = 3 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6234] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6234] close(3) = 0 [pid 6234] mkdir("./file0", 0777) = 0 [ 184.293436][ T6234] loop4: detected capacity change from 0 to 8192 [ 184.303836][ T6234] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.317176][ T6234] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 184.326485][ T6234] REISERFS (device loop4): using ordered data mode [ 184.333233][ T6234] reiserfs: using flush barriers [ 184.339476][ T6234] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.356522][ T6234] REISERFS (device loop4): checking transaction log (loop4) [pid 6234] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6234] chdir("./file0") = 0 [pid 6234] ioctl(4, LOOP_CLR_FD) = 0 [pid 6234] close(4) = 0 [pid 6234] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... futex resumed>) = 0 [pid 6234] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6234] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... futex resumed>) = 1 [pid 6234] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6234] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 184.394501][ T6234] REISERFS (device loop4): Using r5 hash to sort names [ 184.401687][ T6234] REISERFS (device loop4): using 3.5.x disk format [ 184.408472][ T6234] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6234] sendfile(4, 5, NULL, 140737974943952 [pid 6233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6233] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6233] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6236], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6236 [pid 6233] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6236] open("./bus", O_RDONLY [pid 6233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6233] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6233] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6237 attached , parent_tid=[6237], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6237 [pid 6233] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6237] set_robust_list(0x7fe8f42af9e0, 24 [pid 6233] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] <... set_robust_list resumed>) = 0 [pid 6237] truncate("./bus", 6 [pid 6233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6233] exit_group(0) = ? [pid 6234] <... sendfile resumed>) = ? [pid 6237] <... truncate resumed>) = ? [pid 6236] <... open resumed>) = ? [pid 6237] +++ exited with 0 +++ [pid 6234] +++ exited with 0 +++ [pid 6236] +++ exited with 0 +++ [pid 6233] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./194/binderfs") = 0 [pid 5073] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./194/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./194/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./194") = 0 [pid 5073] mkdir("./195", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6238 ./strace-static-x86_64: Process 6238 attached [pid 6238] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6238] chdir("./195") = 0 [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6238] setpgid(0, 0) = 0 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6238] write(3, "1000", 4) = 4 [pid 6238] close(3) = 0 [pid 6238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6238] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6238] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6238] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6239], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6239 [pid 6238] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6239 attached [pid 6239] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6239] memfd_create("syzkaller", 0) = 3 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6239] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6239] close(3) = 0 [pid 6239] mkdir("./file0", 0777) = 0 [ 184.896219][ T6239] loop4: detected capacity change from 0 to 8192 [ 184.906422][ T6239] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.919557][ T6239] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 184.928969][ T6239] REISERFS (device loop4): using ordered data mode [ 184.935770][ T6239] reiserfs: using flush barriers [ 184.941566][ T6239] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.958816][ T6239] REISERFS (device loop4): checking transaction log (loop4) [pid 6239] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6239] chdir("./file0") = 0 [pid 6239] ioctl(4, LOOP_CLR_FD) = 0 [pid 6239] close(4) = 0 [pid 6239] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6238] <... futex resumed>) = 0 [pid 6239] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6238] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... open resumed>) = 4 [pid 6238] <... futex resumed>) = 0 [pid 6239] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] <... futex resumed>) = 0 [pid 6238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6239] openat(-1, "/proc/self/exe", O_RDONLY [pid 6238] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... openat resumed>) = 5 [pid 6238] <... futex resumed>) = 0 [pid 6239] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] <... futex resumed>) = 0 [pid 6238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6239] sendfile(4, 5, NULL, 140737974943952 [pid 6238] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 185.003177][ T6239] REISERFS (device loop4): Using r5 hash to sort names [ 185.010474][ T6239] REISERFS (device loop4): using 3.5.x disk format [ 185.017361][ T6239] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6238] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6238] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6238] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6238] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6238] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6241 attached , parent_tid=[6241], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6241 [pid 6241] set_robust_list(0x7fe8f42d09e0, 24 [pid 6238] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... set_robust_list resumed>) = 0 [pid 6241] open("./bus", O_RDONLY [pid 6238] <... futex resumed>) = 0 [pid 6238] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6238] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6238] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6238] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6238] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6242], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6242 [pid 6238] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6242 attached [pid 6242] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6242] truncate("./bus", 6 [pid 6238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6238] exit_group(0) = ? [pid 6239] <... sendfile resumed>) = ? [pid 6241] <... open resumed>) = ? [pid 6239] +++ exited with 0 +++ [pid 6242] <... truncate resumed>) = ? [pid 6241] +++ exited with 0 +++ [pid 6242] +++ exited with 0 +++ [pid 6238] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./195/binderfs") = 0 [pid 5073] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./195/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./195") = 0 [pid 5073] mkdir("./196", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6243 ./strace-static-x86_64: Process 6243 attached [pid 6243] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6243] chdir("./196") = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6243] setpgid(0, 0) = 0 [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6243] write(3, "1000", 4) = 4 [pid 6243] close(3) = 0 [pid 6243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6243] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6243] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6243] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6244], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6244 [pid 6243] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6244 attached [pid 6244] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6244] memfd_create("syzkaller", 0) = 3 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6244] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6244] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6244] close(3) = 0 [pid 6244] mkdir("./file0", 0777) = 0 [ 185.540628][ T6244] loop4: detected capacity change from 0 to 8192 [ 185.550719][ T6244] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 185.564061][ T6244] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 185.573338][ T6244] REISERFS (device loop4): using ordered data mode [ 185.579931][ T6244] reiserfs: using flush barriers [ 185.585603][ T6244] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.602251][ T6244] REISERFS (device loop4): checking transaction log (loop4) [pid 6244] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6244] chdir("./file0") = 0 [pid 6244] ioctl(4, LOOP_CLR_FD) = 0 [pid 6244] close(4) = 0 [pid 6244] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = 0 [pid 6243] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] <... futex resumed>) = 1 [pid 6244] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6244] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = 0 [pid 6243] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] <... futex resumed>) = 1 [pid 6244] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6244] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = 0 [pid 6243] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] <... futex resumed>) = 1 [ 185.639478][ T6244] REISERFS (device loop4): Using r5 hash to sort names [ 185.646709][ T6244] REISERFS (device loop4): using 3.5.x disk format [ 185.653786][ T6244] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6244] sendfile(4, 5, NULL, 140737974943952 [pid 6243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6243] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6243] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6243] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6246 attached , parent_tid=[6246], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6246 [pid 6246] set_robust_list(0x7fe8f42d09e0, 24 [pid 6243] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... set_robust_list resumed>) = 0 [pid 6246] open("./bus", O_RDONLY [pid 6243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6243] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6243] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6243] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6247 attached , parent_tid=[6247], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6247 [pid 6243] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6247] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6247] truncate("./bus", 6 [pid 6243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6243] exit_group(0) = ? [pid 6244] <... sendfile resumed>) = ? [pid 6244] +++ exited with 0 +++ [pid 6246] <... open resumed>) = ? [pid 6246] +++ exited with 0 +++ [pid 6247] <... truncate resumed>) = ? [pid 6247] +++ exited with 0 +++ [pid 6243] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./196/binderfs") = 0 [pid 5073] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./196/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./196") = 0 [pid 5073] mkdir("./197", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6248 ./strace-static-x86_64: Process 6248 attached [pid 6248] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6248] chdir("./197") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6248] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6249], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6249 [pid 6248] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6249 attached [pid 6249] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6249] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6249] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6249] close(3) = 0 [pid 6249] mkdir("./file0", 0777) = 0 [ 186.110508][ T6249] loop4: detected capacity change from 0 to 8192 [ 186.121052][ T6249] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.134741][ T6249] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 186.144288][ T6249] REISERFS (device loop4): using ordered data mode [ 186.150859][ T6249] reiserfs: using flush barriers [ 186.156676][ T6249] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.173274][ T6249] REISERFS (device loop4): checking transaction log (loop4) [pid 6249] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0") = 0 [pid 6249] ioctl(4, LOOP_CLR_FD) = 0 [pid 6249] close(4) = 0 [pid 6249] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [ 186.210671][ T6249] REISERFS (device loop4): Using r5 hash to sort names [ 186.217641][ T6249] REISERFS (device loop4): using 3.5.x disk format [ 186.224353][ T6249] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 186.236889][ T27] kauditd_printk_skb: 16 callbacks suppressed [pid 6249] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6249] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [pid 6249] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6249] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6248] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = 1 [ 186.236901][ T27] audit: type=1800 audit(1671282409.643:682): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6249] sendfile(4, 5, NULL, 140737974943952 [pid 6248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6248] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6248] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6251], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6251 [pid 6248] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6251] open("./bus", O_RDONLY [pid 6248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6248] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6248] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6248] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6252], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6252 ./strace-static-x86_64: Process 6252 attached [pid 6248] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] set_robust_list(0x7fe8f42af9e0, 24 [pid 6248] <... futex resumed>) = 0 [pid 6252] <... set_robust_list resumed>) = 0 [pid 6248] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] truncate("./bus", 6 [pid 6248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6248] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6248] exit_group(0) = ? [pid 6249] <... sendfile resumed>) = ? [pid 6251] <... open resumed>) = ? [pid 6251] +++ exited with 0 +++ [pid 6252] <... truncate resumed>) = ? [pid 6252] +++ exited with 0 +++ [pid 6249] +++ exited with 0 +++ [pid 6248] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./197/binderfs") = 0 [pid 5073] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./197/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./197") = 0 [pid 5073] mkdir("./198", 0777) = 0 [ 186.648331][ T27] audit: type=1804 audit(1671282410.053:683): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/197/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 186.672125][ T27] audit: type=1800 audit(1671282410.053:684): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6253 ./strace-static-x86_64: Process 6253 attached [pid 6253] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6253] chdir("./198") = 0 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6253] write(3, "1000", 4) = 4 [pid 6253] close(3) = 0 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6253] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6253] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6253] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6254], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6254 [pid 6253] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6254] memfd_create("syzkaller", 0) = 3 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6254] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6254] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6254] close(3) = 0 [pid 6254] mkdir("./file0", 0777) = 0 [ 186.790412][ T6254] loop4: detected capacity change from 0 to 8192 [ 186.800712][ T6254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.813799][ T6254] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 186.823115][ T6254] REISERFS (device loop4): using ordered data mode [ 186.829684][ T6254] reiserfs: using flush barriers [ 186.835568][ T6254] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.852108][ T6254] REISERFS (device loop4): checking transaction log (loop4) [pid 6254] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6254] chdir("./file0") = 0 [pid 6254] ioctl(4, LOOP_CLR_FD) = 0 [pid 6254] close(4) = 0 [pid 6254] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... futex resumed>) = 0 [pid 6253] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... futex resumed>) = 1 [pid 6254] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6254] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... futex resumed>) = 0 [pid 6253] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... futex resumed>) = 1 [pid 6254] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6254] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... futex resumed>) = 0 [pid 6253] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... futex resumed>) = 1 [ 186.895348][ T6254] REISERFS (device loop4): Using r5 hash to sort names [ 186.902606][ T6254] REISERFS (device loop4): using 3.5.x disk format [ 186.909531][ T6254] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 186.925173][ T27] audit: type=1800 audit(1671282410.323:685): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6254] sendfile(4, 5, NULL, 140737974943952 [pid 6253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6253] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6253] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6253] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6256 attached , parent_tid=[6256], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6256 [pid 6253] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] set_robust_list(0x7fe8f42d09e0, 24 [pid 6253] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] <... set_robust_list resumed>) = 0 [pid 6256] open("./bus", O_RDONLY [pid 6253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6253] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6253] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6253] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6257], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6257 [pid 6253] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6257] truncate("./bus", 6 [pid 6253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6253] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6253] exit_group(0) = ? [pid 6254] <... sendfile resumed>) = ? [pid 6256] <... open resumed>) = ? [pid 6254] +++ exited with 0 +++ [pid 6256] +++ exited with 0 +++ [pid 6257] <... truncate resumed>) = ? [pid 6257] +++ exited with 0 +++ [pid 6253] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./198/binderfs") = 0 [pid 5073] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./198/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 187.288371][ T27] audit: type=1804 audit(1671282410.693:686): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/198/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 187.312008][ T27] audit: type=1800 audit(1671282410.693:687): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./198/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./198") = 0 [pid 5073] mkdir("./199", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6258 ./strace-static-x86_64: Process 6258 attached [pid 6258] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6258] chdir("./199") = 0 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6258] setpgid(0, 0) = 0 [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6258] write(3, "1000", 4) = 4 [pid 6258] close(3) = 0 [pid 6258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6258] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6258] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6258] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6259], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6259 ./strace-static-x86_64: Process 6259 attached [pid 6258] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6259] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6259] memfd_create("syzkaller", 0) = 3 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6259] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6259] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6259] close(3) = 0 [pid 6259] mkdir("./file0", 0777) = 0 [ 187.448965][ T6259] loop4: detected capacity change from 0 to 8192 [ 187.459226][ T6259] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.472544][ T6259] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 187.482523][ T6259] REISERFS (device loop4): using ordered data mode [ 187.489609][ T6259] reiserfs: using flush barriers [ 187.495701][ T6259] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.512540][ T6259] REISERFS (device loop4): checking transaction log (loop4) [pid 6259] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6259] chdir("./file0") = 0 [pid 6259] ioctl(4, LOOP_CLR_FD) = 0 [pid 6259] close(4) = 0 [pid 6259] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6258] <... futex resumed>) = 0 [pid 6258] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... futex resumed>) = 0 [pid 6258] <... futex resumed>) = 1 [pid 6259] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6258] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... open resumed>) = 4 [pid 6259] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6259] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6258] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] <... futex resumed>) = 0 [pid 6259] openat(-1, "/proc/self/exe", O_RDONLY [pid 6258] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... openat resumed>) = 5 [pid 6259] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6259] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6258] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] <... futex resumed>) = 0 [pid 6259] sendfile(4, 5, NULL, 140737974943952 [ 187.551761][ T6259] REISERFS (device loop4): Using r5 hash to sort names [ 187.558942][ T6259] REISERFS (device loop4): using 3.5.x disk format [ 187.566265][ T6259] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 187.585168][ T27] audit: type=1800 audit(1671282410.983:688): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6258] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6258] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6258] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6258] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6261], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6261 [pid 6258] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6261 attached [pid 6261] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6261] open("./bus", O_RDONLY [pid 6258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6258] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6258] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6258] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6258] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6262], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6262 [pid 6258] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6262 attached [pid 6262] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6262] truncate("./bus", 6 [pid 6258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6258] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6258] exit_group(0) = ? [pid 6259] <... sendfile resumed>) = ? [pid 6261] <... open resumed>) = ? [pid 6261] +++ exited with 0 +++ [pid 6262] <... truncate resumed>) = ? [pid 6262] +++ exited with 0 +++ [pid 6259] +++ exited with 0 +++ [pid 6258] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./199/binderfs") = 0 [pid 5073] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./199/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./199/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./199") = 0 [pid 5073] mkdir("./200", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 187.958373][ T27] audit: type=1804 audit(1671282411.363:689): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/199/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 187.982072][ T27] audit: type=1800 audit(1671282411.363:690): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6263 ./strace-static-x86_64: Process 6263 attached [pid 6263] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6263] chdir("./200") = 0 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] setpgid(0, 0) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6263] write(3, "1000", 4) = 4 [pid 6263] close(3) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6263] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6264 attached , parent_tid=[6264], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6264 [pid 6264] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6264] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6264] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6264] close(3) = 0 [pid 6264] mkdir("./file0", 0777) = 0 [ 188.102250][ T6264] loop4: detected capacity change from 0 to 8192 [ 188.112053][ T6264] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.125321][ T6264] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 188.134564][ T6264] REISERFS (device loop4): using ordered data mode [ 188.141124][ T6264] reiserfs: using flush barriers [ 188.147032][ T6264] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.163437][ T6264] REISERFS (device loop4): checking transaction log (loop4) [pid 6264] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0") = 0 [pid 6264] ioctl(4, LOOP_CLR_FD) = 0 [pid 6264] close(4) = 0 [pid 6264] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6264] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6264] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [ 188.206127][ T6264] REISERFS (device loop4): Using r5 hash to sort names [ 188.213395][ T6264] REISERFS (device loop4): using 3.5.x disk format [ 188.220393][ T6264] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 188.234782][ T27] audit: type=1800 audit(1671282411.633:691): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6264] sendfile(4, 5, NULL, 140737974943952 [pid 6263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6263] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6263] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6266], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6266 [pid 6263] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6266 attached [pid 6266] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6266] open("./bus", O_RDONLY [pid 6263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6263] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6263] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6263] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6267], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6267 [pid 6263] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6267 attached [pid 6267] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6267] truncate("./bus", 6 [pid 6263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6263] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6263] exit_group(0) = ? [pid 6264] <... sendfile resumed>) = ? [pid 6266] <... open resumed>) = ? [pid 6264] +++ exited with 0 +++ [pid 6267] <... truncate resumed>) = ? [pid 6266] +++ exited with 0 +++ [pid 6267] +++ exited with 0 +++ [pid 6263] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./200/binderfs") = 0 [pid 5073] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./200/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./200") = 0 [pid 5073] mkdir("./201", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6268 ./strace-static-x86_64: Process 6268 attached [pid 6268] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6268] chdir("./201") = 0 [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6268] setpgid(0, 0) = 0 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6268] write(3, "1000", 4) = 4 [pid 6268] close(3) = 0 [pid 6268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6268] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6268] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6268] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6269 attached , parent_tid=[6269], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6269 [pid 6269] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6268] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6269] <... set_robust_list resumed>) = 0 [pid 6269] memfd_create("syzkaller", 0) = 3 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6269] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6269] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6269] close(3) = 0 [pid 6269] mkdir("./file0", 0777) = 0 [ 188.702824][ T6269] loop4: detected capacity change from 0 to 8192 [ 188.712462][ T6269] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.725925][ T6269] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 188.735274][ T6269] REISERFS (device loop4): using ordered data mode [ 188.741893][ T6269] reiserfs: using flush barriers [ 188.747972][ T6269] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.764343][ T6269] REISERFS (device loop4): checking transaction log (loop4) [pid 6269] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6269] chdir("./file0") = 0 [pid 6269] ioctl(4, LOOP_CLR_FD) = 0 [pid 6269] close(4) = 0 [pid 6269] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6268] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 0 [pid 6269] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6269] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 1 [pid 6269] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6269] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... futex resumed>) = 0 [pid 6268] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... futex resumed>) = 1 [ 188.801329][ T6269] REISERFS (device loop4): Using r5 hash to sort names [ 188.808412][ T6269] REISERFS (device loop4): using 3.5.x disk format [ 188.815299][ T6269] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6269] sendfile(4, 5, NULL, 140737974943952 [pid 6268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6268] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6268] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6268] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6271 attached , parent_tid=[6271], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6271 [pid 6271] set_robust_list(0x7fe8f42d09e0, 24 [pid 6268] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... set_robust_list resumed>) = 0 [pid 6268] <... futex resumed>) = 0 [pid 6271] open("./bus", O_RDONLY [pid 6268] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6268] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6268] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6268] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6272 attached , parent_tid=[6272], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6272 [pid 6272] set_robust_list(0x7fe8f42af9e0, 24 [pid 6268] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... set_robust_list resumed>) = 0 [pid 6268] <... futex resumed>) = 0 [pid 6272] truncate("./bus", 6 [pid 6268] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6268] exit_group(0) = ? [pid 6269] <... sendfile resumed>) = ? [pid 6271] <... open resumed>) = ? [pid 6269] +++ exited with 0 +++ [pid 6272] <... truncate resumed>) = ? [pid 6271] +++ exited with 0 +++ [pid 6272] +++ exited with 0 +++ [pid 6268] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./201/binderfs") = 0 [pid 5073] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./201/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./201") = 0 [pid 5073] mkdir("./202", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6273 ./strace-static-x86_64: Process 6273 attached [pid 6273] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6273] chdir("./202") = 0 [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6273] setpgid(0, 0) = 0 [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6273] write(3, "1000", 4) = 4 [pid 6273] close(3) = 0 [pid 6273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6273] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6273] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6273] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6274], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6274 [pid 6273] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6274 attached [pid 6274] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6274] memfd_create("syzkaller", 0) = 3 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6274] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6274] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6274] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6274] close(3) = 0 [pid 6274] mkdir("./file0", 0777) = 0 [ 189.306340][ T6274] loop4: detected capacity change from 0 to 8192 [ 189.317428][ T6274] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.331148][ T6274] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 189.340384][ T6274] REISERFS (device loop4): using ordered data mode [ 189.346962][ T6274] reiserfs: using flush barriers [ 189.352626][ T6274] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.369258][ T6274] REISERFS (device loop4): checking transaction log (loop4) [pid 6274] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6274] chdir("./file0") = 0 [pid 6274] ioctl(4, LOOP_CLR_FD) = 0 [pid 6274] close(4) = 0 [pid 6274] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = 0 [pid 6273] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6274] <... futex resumed>) = 1 [pid 6274] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6274] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = 0 [pid 6273] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6274] <... futex resumed>) = 1 [pid 6274] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6274] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = 0 [pid 6273] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6274] <... futex resumed>) = 1 [ 189.411880][ T6274] REISERFS (device loop4): Using r5 hash to sort names [ 189.418925][ T6274] REISERFS (device loop4): using 3.5.x disk format [ 189.426126][ T6274] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6274] sendfile(4, 5, NULL, 140737974943952 [pid 6273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6273] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6273] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6273] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6276], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6276 [pid 6273] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6276 attached [pid 6276] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6276] open("./bus", O_RDONLY [pid 6273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6273] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6273] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6273] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6273] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6277 attached , parent_tid=[6277], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6277 [pid 6273] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6277] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6277] truncate("./bus", 6 [pid 6273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6273] exit_group(0) = ? [pid 6274] <... sendfile resumed>) = ? [pid 6276] <... open resumed>) = ? [pid 6274] +++ exited with 0 +++ [pid 6277] <... truncate resumed>) = ? [pid 6276] +++ exited with 0 +++ [pid 6277] +++ exited with 0 +++ [pid 6273] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./202/binderfs") = 0 [pid 5073] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./202/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./202") = 0 [pid 5073] mkdir("./203", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6278 ./strace-static-x86_64: Process 6278 attached [pid 6278] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6278] chdir("./203") = 0 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6278] setpgid(0, 0) = 0 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6278] write(3, "1000", 4) = 4 [pid 6278] close(3) = 0 [pid 6278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6278] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6278] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6279], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6279 [pid 6278] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6279 attached [pid 6279] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6279] memfd_create("syzkaller", 0) = 3 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6279] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6279] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6279] close(3) = 0 [pid 6279] mkdir("./file0", 0777) = 0 [ 189.915167][ T6279] loop4: detected capacity change from 0 to 8192 [ 189.926226][ T6279] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.939364][ T6279] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 189.948753][ T6279] REISERFS (device loop4): using ordered data mode [ 189.955302][ T6279] reiserfs: using flush barriers [ 189.961575][ T6279] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.978779][ T6279] REISERFS (device loop4): checking transaction log (loop4) [pid 6279] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6279] chdir("./file0") = 0 [pid 6279] ioctl(4, LOOP_CLR_FD) = 0 [pid 6279] close(4) = 0 [pid 6279] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6278] <... futex resumed>) = 0 [pid 6279] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6278] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... open resumed>) = 4 [pid 6278] <... futex resumed>) = 0 [pid 6279] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6279] <... futex resumed>) = 0 [pid 6278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6279] openat(-1, "/proc/self/exe", O_RDONLY [pid 6278] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] <... openat resumed>) = 5 [pid 6278] <... futex resumed>) = 0 [pid 6279] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6279] <... futex resumed>) = 0 [pid 6278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6279] sendfile(4, 5, NULL, 140737974943952 [pid 6278] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 190.020014][ T6279] REISERFS (device loop4): Using r5 hash to sort names [ 190.027228][ T6279] REISERFS (device loop4): using 3.5.x disk format [ 190.034011][ T6279] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6278] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6278] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6278] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6281 attached [pid 6281] set_robust_list(0x7fe8f42d09e0, 24 [pid 6278] <... clone resumed>, parent_tid=[6281], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6281 [pid 6281] <... set_robust_list resumed>) = 0 [pid 6278] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] open("./bus", O_RDONLY [pid 6278] <... futex resumed>) = 0 [pid 6278] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6278] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6278] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6282], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6282 [pid 6278] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6282 attached [pid 6282] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6282] truncate("./bus", 6 [pid 6278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6278] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6278] exit_group(0) = ? [pid 6279] <... sendfile resumed>) = ? [pid 6281] <... open resumed>) = ? [pid 6281] +++ exited with 0 +++ [pid 6282] <... truncate resumed>) = ? [pid 6279] +++ exited with 0 +++ [pid 6282] +++ exited with 0 +++ [pid 6278] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6278, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./203/binderfs") = 0 [pid 5073] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./203/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./203") = 0 [pid 5073] mkdir("./204", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6283 ./strace-static-x86_64: Process 6283 attached [pid 6283] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6283] chdir("./204") = 0 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6283] setpgid(0, 0) = 0 [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6283] write(3, "1000", 4) = 4 [pid 6283] close(3) = 0 [pid 6283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6283] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6283] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6283] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6284 attached , parent_tid=[6284], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6284 [pid 6284] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6283] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6284] <... set_robust_list resumed>) = 0 [pid 6284] memfd_create("syzkaller", 0) = 3 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6284] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6284] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6284] close(3) = 0 [pid 6284] mkdir("./file0", 0777) = 0 [ 190.529804][ T6284] loop4: detected capacity change from 0 to 8192 [ 190.540616][ T6284] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.553664][ T6284] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 190.563079][ T6284] REISERFS (device loop4): using ordered data mode [ 190.569689][ T6284] reiserfs: using flush barriers [ 190.575603][ T6284] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.592171][ T6284] REISERFS (device loop4): checking transaction log (loop4) [pid 6284] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6284] chdir("./file0") = 0 [pid 6284] ioctl(4, LOOP_CLR_FD) = 0 [pid 6284] close(4) = 0 [pid 6284] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6283] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... open resumed>) = 4 [pid 6283] <... futex resumed>) = 0 [pid 6284] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... futex resumed>) = 0 [pid 6283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] openat(-1, "/proc/self/exe", O_RDONLY [pid 6283] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... openat resumed>) = 5 [pid 6283] <... futex resumed>) = 0 [pid 6284] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... futex resumed>) = 0 [pid 6283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] sendfile(4, 5, NULL, 140737974943952 [pid 6283] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 190.635546][ T6284] REISERFS (device loop4): Using r5 hash to sort names [ 190.642509][ T6284] REISERFS (device loop4): using 3.5.x disk format [ 190.649446][ T6284] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6283] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6283] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6283] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6283] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6286 attached , parent_tid=[6286], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6286 [pid 6283] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6286] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6286] open("./bus", O_RDONLY [pid 6283] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6283] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6283] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6283] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6287 attached , parent_tid=[6287], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6287 [pid 6287] set_robust_list(0x7fe8f42af9e0, 24 [pid 6283] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... set_robust_list resumed>) = 0 [pid 6283] <... futex resumed>) = 0 [pid 6287] truncate("./bus", 6 [pid 6283] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6283] exit_group(0) = ? [pid 6284] <... sendfile resumed>) = ? [pid 6286] <... open resumed>) = ? [pid 6286] +++ exited with 0 +++ [pid 6284] +++ exited with 0 +++ [pid 6287] <... truncate resumed>) = ? [pid 6287] +++ exited with 0 +++ [pid 6283] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./204/binderfs") = 0 [pid 5073] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./204/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./204") = 0 [pid 5073] mkdir("./205", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6288 ./strace-static-x86_64: Process 6288 attached [pid 6288] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6288] chdir("./205") = 0 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6288] setpgid(0, 0) = 0 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6288] write(3, "1000", 4) = 4 [pid 6288] close(3) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6288] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6288] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6289], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6289 [pid 6288] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6289 attached [pid 6288] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6289] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6289] memfd_create("syzkaller", 0) = 3 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6289] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6289] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6289] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6289] close(3) = 0 [pid 6289] mkdir("./file0", 0777) = 0 [ 191.130587][ T6289] loop4: detected capacity change from 0 to 8192 [ 191.141151][ T6289] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 191.154186][ T6289] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 191.163597][ T6289] REISERFS (device loop4): using ordered data mode [ 191.170162][ T6289] reiserfs: using flush barriers [ 191.175886][ T6289] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.192337][ T6289] REISERFS (device loop4): checking transaction log (loop4) [pid 6289] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6289] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6289] chdir("./file0") = 0 [pid 6289] ioctl(4, LOOP_CLR_FD) = 0 [pid 6289] close(4) = 0 [pid 6289] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6289] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 191.234594][ T6289] REISERFS (device loop4): Using r5 hash to sort names [ 191.241650][ T6289] REISERFS (device loop4): using 3.5.x disk format [ 191.248623][ T6289] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 191.261265][ T27] kauditd_printk_skb: 14 callbacks suppressed [pid 6288] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... open resumed>) = 4 [pid 6288] <... futex resumed>) = 0 [pid 6289] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6289] openat(-1, "/proc/self/exe", O_RDONLY [pid 6288] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] <... openat resumed>) = 5 [pid 6289] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6289] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6289] sendfile(4, 5, NULL, 140737974943952 [ 191.261278][ T27] audit: type=1800 audit(1671282414.663:706): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6288] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6288] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6288] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6291 attached , parent_tid=[6291], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6291 [pid 6288] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6291] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6291] open("./bus", O_RDONLY [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6288] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6288] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6288] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6292 attached , parent_tid=[6292], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6292 [pid 6288] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6292] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6292] truncate("./bus", 6 [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6288] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6288] exit_group(0) = ? [pid 6289] <... sendfile resumed>) = ? [pid 6291] <... open resumed>) = ? [pid 6289] +++ exited with 0 +++ [pid 6292] <... truncate resumed>) = ? [pid 6292] +++ exited with 0 +++ [pid 6291] +++ exited with 0 +++ [pid 6288] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./205/binderfs") = 0 [pid 5073] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./205/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 191.688543][ T27] audit: type=1804 audit(1671282415.093:707): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/205/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 191.712405][ T27] audit: type=1800 audit(1671282415.093:708): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./205/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./205") = 0 [pid 5073] mkdir("./206", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6293 ./strace-static-x86_64: Process 6293 attached [pid 6293] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6293] chdir("./206") = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6293] setpgid(0, 0) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6293] write(3, "1000", 4) = 4 [pid 6293] close(3) = 0 [pid 6293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6293] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6293] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6294 attached , parent_tid=[6294], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6294 [pid 6294] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6293] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] <... set_robust_list resumed>) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6294] memfd_create("syzkaller", 0 [pid 6293] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6294] <... memfd_create resumed>) = 3 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6294] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6294] close(3) = 0 [pid 6294] mkdir("./file0", 0777) = 0 [ 191.846098][ T6294] loop4: detected capacity change from 0 to 8192 [ 191.856487][ T6294] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 191.869837][ T6294] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 191.879451][ T6294] REISERFS (device loop4): using ordered data mode [ 191.886550][ T6294] reiserfs: using flush barriers [ 191.892717][ T6294] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.909582][ T6294] REISERFS (device loop4): checking transaction log (loop4) [pid 6294] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6294] chdir("./file0") = 0 [pid 6294] ioctl(4, LOOP_CLR_FD) = 0 [pid 6294] close(4) = 0 [pid 6294] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6294] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] <... futex resumed>) = 0 [pid 6293] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6294] <... futex resumed>) = 0 [ 191.952448][ T6294] REISERFS (device loop4): Using r5 hash to sort names [ 191.959531][ T6294] REISERFS (device loop4): using 3.5.x disk format [ 191.966404][ T6294] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6294] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6294] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6294] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] <... futex resumed>) = 0 [pid 6293] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6294] <... futex resumed>) = 0 [pid 6294] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6294] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6294] sendfile(4, 5, NULL, 140737974943952 [pid 6293] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 191.986162][ T27] audit: type=1800 audit(1671282415.393:709): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6293] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6293] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6293] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6296], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6296 ./strace-static-x86_64: Process 6296 attached [pid 6293] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6296] open("./bus", O_RDONLY [pid 6293] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6293] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6293] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6297], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6297 [pid 6293] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6297 attached [pid 6297] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6297] truncate("./bus", 6 [pid 6293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6293] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6293] exit_group(0) = ? [pid 6294] <... sendfile resumed>) = ? [pid 6296] <... open resumed>) = ? [pid 6294] +++ exited with 0 +++ [pid 6296] +++ exited with 0 +++ [pid 6297] <... truncate resumed>) = ? [pid 6297] +++ exited with 0 +++ [pid 6293] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./206/binderfs") = 0 [ 192.338434][ T27] audit: type=1804 audit(1671282415.743:710): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/206/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 192.362437][ T27] audit: type=1800 audit(1671282415.743:711): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./206/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./206") = 0 [pid 5073] mkdir("./207", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6298 attached [pid 6298] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6298 [pid 6298] <... set_robust_list resumed>) = 0 [pid 6298] chdir("./207") = 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6298] setpgid(0, 0) = 0 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6298] write(3, "1000", 4) = 4 [pid 6298] close(3) = 0 [pid 6298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6298] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6298] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6298] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6299], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6299 [pid 6298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6299 attached [pid 6299] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6299] memfd_create("syzkaller", 0) = 3 [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6299] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6299] close(3) = 0 [pid 6299] mkdir("./file0", 0777) = 0 [ 192.497895][ T6299] loop4: detected capacity change from 0 to 8192 [ 192.508977][ T6299] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 192.522291][ T6299] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 192.531670][ T6299] REISERFS (device loop4): using ordered data mode [ 192.538312][ T6299] reiserfs: using flush barriers [ 192.544085][ T6299] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.561100][ T6299] REISERFS (device loop4): checking transaction log (loop4) [pid 6299] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6299] chdir("./file0") = 0 [pid 6299] ioctl(4, LOOP_CLR_FD) = 0 [pid 6299] close(4) = 0 [pid 6299] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6298] <... futex resumed>) = 0 [pid 6299] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6298] <... futex resumed>) = 0 [pid 6299] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] <... open resumed>) = 4 [pid 6299] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6298] <... futex resumed>) = 0 [pid 6299] openat(-1, "/proc/self/exe", O_RDONLY [pid 6298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... openat resumed>) = 5 [pid 6298] <... futex resumed>) = 0 [pid 6299] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] <... futex resumed>) = 0 [pid 6298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6299] sendfile(4, 5, NULL, 140737974943952 [pid 6298] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 192.606401][ T6299] REISERFS (device loop4): Using r5 hash to sort names [ 192.613362][ T6299] REISERFS (device loop4): using 3.5.x disk format [ 192.620282][ T6299] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6298] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6298] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6298] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6298] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6301], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6301 [pid 6298] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6301 attached [pid 6301] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 192.641397][ T27] audit: type=1800 audit(1671282416.043:712): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6301] open("./bus", O_RDONLY [pid 6298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6298] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6298] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6298] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6298] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6298] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6302], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6302 [pid 6298] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6298] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6302 attached [pid 6302] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6302] truncate("./bus", 6 [pid 6298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6298] exit_group(0) = ? [pid 6299] <... sendfile resumed>) = ? [pid 6302] <... truncate resumed>) = ? [pid 6301] <... open resumed>) = ? [pid 6299] +++ exited with 0 +++ [pid 6302] +++ exited with 0 +++ [pid 6301] +++ exited with 0 +++ [pid 6298] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./207/binderfs") = 0 [pid 5073] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./207/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [ 192.988418][ T27] audit: type=1804 audit(1671282416.393:713): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/207/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 193.012442][ T27] audit: type=1800 audit(1671282416.393:714): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./207") = 0 [pid 5073] mkdir("./208", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6303 ./strace-static-x86_64: Process 6303 attached [pid 6303] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6303] chdir("./208") = 0 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6303] setpgid(0, 0) = 0 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6303] write(3, "1000", 4) = 4 [pid 6303] close(3) = 0 [pid 6303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6303] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6303] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6303] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6304 attached , parent_tid=[6304], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6304 [pid 6303] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6303] <... futex resumed>) = 0 [pid 6304] <... set_robust_list resumed>) = 0 [pid 6304] memfd_create("syzkaller", 0) = 3 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6303] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6304] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6304] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6304] close(3) = 0 [pid 6304] mkdir("./file0", 0777) = 0 [ 193.153423][ T6304] loop4: detected capacity change from 0 to 8192 [ 193.163938][ T6304] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.178120][ T6304] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 193.188406][ T6304] REISERFS (device loop4): using ordered data mode [ 193.195049][ T6304] reiserfs: using flush barriers [ 193.201191][ T6304] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.218167][ T6304] REISERFS (device loop4): checking transaction log (loop4) [pid 6304] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6304] chdir("./file0") = 0 [pid 6304] ioctl(4, LOOP_CLR_FD) = 0 [pid 6304] close(4) = 0 [pid 6304] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 0 [pid 6303] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = 1 [pid 6304] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6304] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 0 [pid 6303] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = 1 [pid 6304] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6304] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 0 [pid 6303] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = 1 [ 193.255059][ T6304] REISERFS (device loop4): Using r5 hash to sort names [ 193.262197][ T6304] REISERFS (device loop4): using 3.5.x disk format [ 193.269229][ T6304] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6304] sendfile(4, 5, NULL, 140737974943952 [pid 6303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6303] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6303] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6303] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6306 attached , parent_tid=[6306], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6306 [pid 6306] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6306] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6303] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6306] <... futex resumed>) = 0 [ 193.288390][ T27] audit: type=1800 audit(1671282416.683:715): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6306] open("./bus", O_RDONLY [pid 6303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6303] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6303] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6303] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6307], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6307 ./strace-static-x86_64: Process 6307 attached [pid 6307] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6307] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6307] <... futex resumed>) = 0 [pid 6307] truncate("./bus", 6 [pid 6303] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6303] exit_group(0) = ? [pid 6304] <... sendfile resumed>) = ? [pid 6307] <... truncate resumed>) = ? [pid 6306] <... open resumed>) = ? [pid 6304] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ [pid 6306] +++ exited with 0 +++ [pid 6303] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./208/binderfs") = 0 [pid 5073] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./208/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./208") = 0 [pid 5073] mkdir("./209", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6308 ./strace-static-x86_64: Process 6308 attached [pid 6308] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6308] chdir("./209") = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6308] setpgid(0, 0) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6308] write(3, "1000", 4) = 4 [pid 6308] close(3) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6308] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6308] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6309], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6309 [pid 6308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6309 attached [pid 6309] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6309] memfd_create("syzkaller", 0) = 3 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6309] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6309] close(3) = 0 [pid 6309] mkdir("./file0", 0777) = 0 [ 193.806252][ T6309] loop4: detected capacity change from 0 to 8192 [ 193.818655][ T6309] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.832280][ T6309] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 193.842354][ T6309] REISERFS (device loop4): using ordered data mode [ 193.849600][ T6309] reiserfs: using flush barriers [ 193.856837][ T6309] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.873870][ T6309] REISERFS (device loop4): checking transaction log (loop4) [pid 6309] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6309] chdir("./file0") = 0 [pid 6309] ioctl(4, LOOP_CLR_FD) = 0 [pid 6309] close(4) = 0 [pid 6309] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... futex resumed>) = 1 [pid 6309] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6309] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... futex resumed>) = 1 [pid 6309] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6309] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... futex resumed>) = 1 [ 193.944011][ T6309] REISERFS (device loop4): Using r5 hash to sort names [ 193.951529][ T6309] REISERFS (device loop4): using 3.5.x disk format [ 193.959321][ T6309] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6309] sendfile(4, 5, NULL, 140737974943952 [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6308] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6308] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6308] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6311], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6311 [pid 6308] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6311 attached [pid 6311] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6311] open("./bus", O_RDONLY [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6308] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6308] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6308] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6312 attached [pid 6312] set_robust_list(0x7fe8f42af9e0, 24 [pid 6308] <... clone resumed>, parent_tid=[6312], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6312 [pid 6312] <... set_robust_list resumed>) = 0 [pid 6312] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] <... futex resumed>) = 0 [pid 6308] <... futex resumed>) = 1 [pid 6312] truncate("./bus", 6 [pid 6308] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6308] exit_group(0) = ? [pid 6309] <... sendfile resumed>) = ? [pid 6311] <... open resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 6312] <... truncate resumed>) = ? [pid 6311] +++ exited with 0 +++ [pid 6312] +++ exited with 0 +++ [pid 6308] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6308, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./209/binderfs") = 0 [pid 5073] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./209/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./209") = 0 [pid 5073] mkdir("./210", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6313 ./strace-static-x86_64: Process 6313 attached [pid 6313] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6313] chdir("./210") = 0 [pid 6313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6313] setpgid(0, 0) = 0 [pid 6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6313] write(3, "1000", 4) = 4 [pid 6313] close(3) = 0 [pid 6313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6313] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6313] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6313] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6314], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6314 [pid 6313] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6314 attached [pid 6314] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6314] memfd_create("syzkaller", 0) = 3 [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6314] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6314] close(3) = 0 [pid 6314] mkdir("./file0", 0777) = 0 [ 194.426070][ T6314] loop4: detected capacity change from 0 to 8192 [ 194.435907][ T6314] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 194.449643][ T6314] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 194.459200][ T6314] REISERFS (device loop4): using ordered data mode [ 194.465910][ T6314] reiserfs: using flush barriers [ 194.471790][ T6314] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.488490][ T6314] REISERFS (device loop4): checking transaction log (loop4) [pid 6314] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6314] chdir("./file0") = 0 [pid 6314] ioctl(4, LOOP_CLR_FD) = 0 [pid 6314] close(4) = 0 [pid 6314] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [pid 6314] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6314] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [pid 6314] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6314] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6313] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... futex resumed>) = 1 [ 194.534079][ T6314] REISERFS (device loop4): Using r5 hash to sort names [ 194.541189][ T6314] REISERFS (device loop4): using 3.5.x disk format [ 194.548100][ T6314] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6314] sendfile(4, 5, NULL, 140737974943952 [pid 6313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6313] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6313] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6313] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6316], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6316 [pid 6313] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6316 attached [pid 6316] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6316] open("./bus", O_RDONLY [pid 6313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6313] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6313] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6313] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6313] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6317], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6317 [pid 6313] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6313] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6317 attached [pid 6317] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6317] truncate("./bus", 6 [pid 6313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6313] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6313] exit_group(0) = ? [pid 6314] <... sendfile resumed>) = ? [pid 6316] <... open resumed>) = ? [pid 6314] +++ exited with 0 +++ [pid 6316] +++ exited with 0 +++ [pid 6317] <... truncate resumed>) = ? [pid 6317] +++ exited with 0 +++ [pid 6313] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./210/binderfs") = 0 [pid 5073] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./210/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./210/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./210") = 0 [pid 5073] mkdir("./211", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6318 ./strace-static-x86_64: Process 6318 attached [pid 6318] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6318] chdir("./211") = 0 [pid 6318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6318] setpgid(0, 0) = 0 [pid 6318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6318] write(3, "1000", 4) = 4 [pid 6318] close(3) = 0 [pid 6318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6318] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6318] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6318] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6319 attached , parent_tid=[6319], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6319 [pid 6319] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6319] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6319] <... futex resumed>) = 0 [pid 6319] memfd_create("syzkaller", 0 [pid 6318] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6319] <... memfd_create resumed>) = 3 [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6319] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6319] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6319] close(3) = 0 [pid 6319] mkdir("./file0", 0777) = 0 [ 195.039391][ T6319] loop4: detected capacity change from 0 to 8192 [ 195.050484][ T6319] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.063510][ T6319] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 195.072868][ T6319] REISERFS (device loop4): using ordered data mode [ 195.079401][ T6319] reiserfs: using flush barriers [ 195.085184][ T6319] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.101739][ T6319] REISERFS (device loop4): checking transaction log (loop4) [pid 6319] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6319] chdir("./file0") = 0 [pid 6319] ioctl(4, LOOP_CLR_FD) = 0 [pid 6319] close(4) = 0 [pid 6319] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = 1 [pid 6319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6319] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = 1 [pid 6319] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6319] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = 1 [ 195.138602][ T6319] REISERFS (device loop4): Using r5 hash to sort names [ 195.145693][ T6319] REISERFS (device loop4): using 3.5.x disk format [ 195.152388][ T6319] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6319] sendfile(4, 5, NULL, 140737974943952 [pid 6318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6318] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6318] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6318] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6321], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6321 [pid 6318] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6321 attached [pid 6321] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6321] open("./bus", O_RDONLY [pid 6318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6318] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6318] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6318] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6322 attached , parent_tid=[6322], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6322 [pid 6318] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6322] truncate("./bus", 6 [pid 6318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6318] exit_group(0) = ? [pid 6319] <... sendfile resumed>) = ? [pid 6321] <... open resumed>) = ? [pid 6319] +++ exited with 0 +++ [pid 6321] +++ exited with 0 +++ [pid 6322] <... truncate resumed>) = ? [pid 6322] +++ exited with 0 +++ [pid 6318] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6318, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./211/binderfs") = 0 [pid 5073] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./211/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./211") = 0 [pid 5073] mkdir("./212", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6323 attached [pid 6323] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6323 [pid 6323] <... set_robust_list resumed>) = 0 [pid 6323] chdir("./212") = 0 [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6323] setpgid(0, 0) = 0 [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6323] write(3, "1000", 4) = 4 [pid 6323] close(3) = 0 [pid 6323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6323] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6323] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6324], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6324 [pid 6323] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6324 attached [pid 6324] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6324] memfd_create("syzkaller", 0) = 3 [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6324] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6324] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6324] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6324] close(3) = 0 [pid 6324] mkdir("./file0", 0777) = 0 [ 195.599506][ T6324] loop4: detected capacity change from 0 to 8192 [ 195.609976][ T6324] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.623169][ T6324] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 195.632458][ T6324] REISERFS (device loop4): using ordered data mode [ 195.639069][ T6324] reiserfs: using flush barriers [ 195.645026][ T6324] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.661535][ T6324] REISERFS (device loop4): checking transaction log (loop4) [pid 6324] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6324] chdir("./file0") = 0 [pid 6324] ioctl(4, LOOP_CLR_FD) = 0 [pid 6324] close(4) = 0 [pid 6324] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6323] <... futex resumed>) = 0 [pid 6324] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6323] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... open resumed>) = 4 [pid 6323] <... futex resumed>) = 0 [pid 6324] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6324] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] openat(-1, "/proc/self/exe", O_RDONLY [pid 6323] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... openat resumed>) = 5 [pid 6323] <... futex resumed>) = 0 [pid 6324] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6324] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] sendfile(4, 5, NULL, 140737974943952 [pid 6323] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 195.704595][ T6324] REISERFS (device loop4): Using r5 hash to sort names [ 195.711650][ T6324] REISERFS (device loop4): using 3.5.x disk format [ 195.718505][ T6324] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6323] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6323] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6323] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6323] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6326 attached , parent_tid=[6326], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6326 [pid 6323] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6326] open("./bus", O_RDONLY [pid 6323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6323] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6323] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6323] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6327 attached , parent_tid=[6327], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6327 [pid 6323] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6327] truncate("./bus", 6 [pid 6323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6323] exit_group(0) = ? [pid 6326] <... open resumed>) = ? [pid 6324] <... sendfile resumed>) = ? [pid 6327] <... truncate resumed>) = ? [pid 6326] +++ exited with 0 +++ [pid 6327] +++ exited with 0 +++ [pid 6324] +++ exited with 0 +++ [pid 6323] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./212/binderfs") = 0 [pid 5073] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./212/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./212") = 0 [pid 5073] mkdir("./213", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6328 ./strace-static-x86_64: Process 6328 attached [pid 6328] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6328] chdir("./213") = 0 [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6328] setpgid(0, 0) = 0 [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6328] write(3, "1000", 4) = 4 [pid 6328] close(3) = 0 [pid 6328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6328] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6328] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6328] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6329], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6329 [pid 6328] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6329 attached [pid 6329] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6329] memfd_create("syzkaller", 0) = 3 [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6329] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6329] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6329] close(3) = 0 [pid 6329] mkdir("./file0", 0777) = 0 [ 196.187629][ T6329] loop4: detected capacity change from 0 to 8192 [ 196.198151][ T6329] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.211690][ T6329] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 196.221370][ T6329] REISERFS (device loop4): using ordered data mode [ 196.227948][ T6329] reiserfs: using flush barriers [ 196.233717][ T6329] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.250628][ T6329] REISERFS (device loop4): checking transaction log (loop4) [pid 6329] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6329] chdir("./file0") = 0 [pid 6329] ioctl(4, LOOP_CLR_FD) = 0 [pid 6329] close(4) = 0 [pid 6329] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 1 [pid 6329] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6329] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 1 [pid 6329] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6329] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 1 [ 196.294541][ T6329] REISERFS (device loop4): Using r5 hash to sort names [ 196.301575][ T6329] REISERFS (device loop4): using 3.5.x disk format [ 196.308585][ T6329] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 196.325488][ T27] kauditd_printk_skb: 14 callbacks suppressed [pid 6329] sendfile(4, 5, NULL, 140737974943952 [pid 6328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6328] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6328] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6328] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6331 attached , parent_tid=[6331], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6331 [pid 6331] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6331] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6331] <... futex resumed>) = 0 [pid 6331] open("./bus", O_RDONLY [ 196.325502][ T27] audit: type=1800 audit(1671282419.723:730): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6328] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6328] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6328] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6328] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6328] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6332], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6332 ./strace-static-x86_64: Process 6332 attached [pid 6328] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] set_robust_list(0x7fe8f42af9e0, 24 [pid 6328] <... futex resumed>) = 0 [pid 6328] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... set_robust_list resumed>) = 0 [pid 6332] truncate("./bus", 6 [pid 6328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6328] exit_group(0) = ? [pid 6331] <... open resumed>) = ? [pid 6329] <... sendfile resumed>) = ? [pid 6331] +++ exited with 0 +++ [pid 6332] <... truncate resumed>) = ? [pid 6332] +++ exited with 0 +++ [pid 6329] +++ exited with 0 +++ [pid 6328] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./213/binderfs") = 0 [pid 5073] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 196.727838][ T27] audit: type=1804 audit(1671282420.133:731): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/213/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 196.751317][ T27] audit: type=1800 audit(1671282420.133:732): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./213/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./213") = 0 [pid 5073] mkdir("./214", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6333 ./strace-static-x86_64: Process 6333 attached [pid 6333] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6333] chdir("./214") = 0 [pid 6333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6333] setpgid(0, 0) = 0 [pid 6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6333] write(3, "1000", 4) = 4 [pid 6333] close(3) = 0 [pid 6333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6333] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6333] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6333] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6334 attached [pid 6334] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6334] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6333] <... clone resumed>, parent_tid=[6334], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6334 [pid 6333] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6334] <... futex resumed>) = 0 [pid 6334] memfd_create("syzkaller", 0) = 3 [pid 6333] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6334] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6334] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6334] close(3) = 0 [pid 6334] mkdir("./file0", 0777) = 0 [ 196.896361][ T6334] loop4: detected capacity change from 0 to 8192 [ 196.907047][ T6334] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.920155][ T6334] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 196.929792][ T6334] REISERFS (device loop4): using ordered data mode [ 196.936568][ T6334] reiserfs: using flush barriers [ 196.942464][ T6334] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.958904][ T6334] REISERFS (device loop4): checking transaction log (loop4) [pid 6334] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6334] chdir("./file0") = 0 [pid 6334] ioctl(4, LOOP_CLR_FD) = 0 [pid 6334] close(4) = 0 [pid 6334] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6333] <... futex resumed>) = 0 [pid 6334] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6333] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6333] <... futex resumed>) = 0 [pid 6334] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6333] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... open resumed>) = 4 [pid 6334] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6333] <... futex resumed>) = 0 [pid 6334] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6333] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6333] <... futex resumed>) = 0 [pid 6334] openat(-1, "/proc/self/exe", O_RDONLY [pid 6333] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... openat resumed>) = 5 [pid 6334] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6333] <... futex resumed>) = 0 [pid 6334] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6333] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6333] <... futex resumed>) = 0 [ 197.002796][ T6334] REISERFS (device loop4): Using r5 hash to sort names [ 197.009899][ T6334] REISERFS (device loop4): using 3.5.x disk format [ 197.016899][ T6334] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6334] sendfile(4, 5, NULL, 140737974943952 [ 197.035643][ T27] audit: type=1800 audit(1671282420.433:733): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6333] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6333] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6333] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6333] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6336], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6336 [pid 6333] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6336 attached [pid 6336] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6336] open("./bus", O_RDONLY [pid 6333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6333] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6333] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6333] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6337 attached , parent_tid=[6337], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6337 [pid 6333] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6337] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6337] truncate("./bus", 6 [pid 6333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6333] exit_group(0) = ? [pid 6334] <... sendfile resumed>) = ? [pid 6336] <... open resumed>) = ? [pid 6336] +++ exited with 0 +++ [pid 6337] <... truncate resumed>) = ? [pid 6337] +++ exited with 0 +++ [pid 6334] +++ exited with 0 +++ [pid 6333] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./214/binderfs") = 0 [pid 5073] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 197.418864][ T27] audit: type=1804 audit(1671282420.823:734): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/214/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 197.443249][ T27] audit: type=1800 audit(1671282420.823:735): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./214/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./214") = 0 [pid 5073] mkdir("./215", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6338 ./strace-static-x86_64: Process 6338 attached [pid 6338] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6338] chdir("./215") = 0 [pid 6338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6338] setpgid(0, 0) = 0 [pid 6338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6338] write(3, "1000", 4) = 4 [pid 6338] close(3) = 0 [pid 6338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6338] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6338] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6338] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6339], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6339 ./strace-static-x86_64: Process 6339 attached [pid 6339] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6339] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6338] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6339] memfd_create("syzkaller", 0) = 3 [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6338] <... futex resumed>) = 0 [pid 6339] <... mmap resumed>) = 0x7fe8f3ed1000 [pid 6338] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6339] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6339] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6339] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6339] close(3) = 0 [pid 6339] mkdir("./file0", 0777) = 0 [ 197.577527][ T6339] loop4: detected capacity change from 0 to 8192 [ 197.588241][ T6339] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.601375][ T6339] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 197.611237][ T6339] REISERFS (device loop4): using ordered data mode [ 197.618263][ T6339] reiserfs: using flush barriers [ 197.624189][ T6339] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.640806][ T6339] REISERFS (device loop4): checking transaction log (loop4) [pid 6339] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6339] chdir("./file0") = 0 [pid 6339] ioctl(4, LOOP_CLR_FD) = 0 [pid 6339] close(4) = 0 [pid 6339] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6338] <... futex resumed>) = 0 [pid 6339] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6338] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6338] <... futex resumed>) = 0 [pid 6339] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6338] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6339] <... open resumed>) = 4 [pid 6339] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6338] <... futex resumed>) = 0 [pid 6339] openat(-1, "/proc/self/exe", O_RDONLY [pid 6338] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] <... openat resumed>) = 5 [pid 6338] <... futex resumed>) = 0 [pid 6339] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6339] <... futex resumed>) = 0 [pid 6338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6339] sendfile(4, 5, NULL, 140737974943952 [pid 6338] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 197.685858][ T6339] REISERFS (device loop4): Using r5 hash to sort names [ 197.692876][ T6339] REISERFS (device loop4): using 3.5.x disk format [ 197.699795][ T6339] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6338] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6338] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 197.718801][ T27] audit: type=1800 audit(1671282421.123:736): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6338] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6338] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6341 attached [pid 6341] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6341] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6338] <... clone resumed>, parent_tid=[6341], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6341 [pid 6338] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] <... futex resumed>) = 0 [pid 6338] <... futex resumed>) = 1 [pid 6341] open("./bus", O_RDONLY [pid 6338] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6338] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6338] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6338] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6338] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6342], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6342 [pid 6338] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6338] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6342 attached [pid 6342] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6342] truncate("./bus", 6 [pid 6338] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6338] exit_group(0) = ? [pid 6339] <... sendfile resumed>) = ? [pid 6341] <... open resumed>) = ? [pid 6339] +++ exited with 0 +++ [pid 6341] +++ exited with 0 +++ [pid 6342] <... truncate resumed>) = ? [pid 6342] +++ exited with 0 +++ [pid 6338] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6338, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./215/binderfs") = 0 [ 198.058608][ T27] audit: type=1804 audit(1671282421.463:737): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/215/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 198.081941][ T27] audit: type=1800 audit(1671282421.463:738): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./215/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./215") = 0 [pid 5073] mkdir("./216", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6343 ./strace-static-x86_64: Process 6343 attached [pid 6343] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6343] chdir("./216") = 0 [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6343] setpgid(0, 0) = 0 [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6343] write(3, "1000", 4) = 4 [pid 6343] close(3) = 0 [pid 6343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6343] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6343] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6343] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6344], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6344 ./strace-static-x86_64: Process 6344 attached [pid 6344] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6344] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] <... futex resumed>) = 0 [pid 6344] memfd_create("syzkaller", 0 [pid 6343] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6344] <... memfd_create resumed>) = 3 [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6344] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6344] close(3) = 0 [pid 6344] mkdir("./file0", 0777) = 0 [ 198.225453][ T6344] loop4: detected capacity change from 0 to 8192 [ 198.235761][ T6344] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.248778][ T6344] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 198.258688][ T6344] REISERFS (device loop4): using ordered data mode [ 198.265274][ T6344] reiserfs: using flush barriers [ 198.271559][ T6344] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.287908][ T6344] REISERFS (device loop4): checking transaction log (loop4) [pid 6344] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6344] chdir("./file0") = 0 [pid 6344] ioctl(4, LOOP_CLR_FD) = 0 [pid 6344] close(4) = 0 [pid 6344] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6343] <... futex resumed>) = 0 [pid 6344] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6343] <... futex resumed>) = 0 [pid 6344] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6343] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... open resumed>) = 4 [pid 6344] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6343] <... futex resumed>) = 0 [pid 6344] openat(-1, "/proc/self/exe", O_RDONLY [pid 6343] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] <... openat resumed>) = 5 [pid 6343] <... futex resumed>) = 0 [pid 6344] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... futex resumed>) = 0 [pid 6343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6344] sendfile(4, 5, NULL, 140737974943952 [pid 6343] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 198.330565][ T6344] REISERFS (device loop4): Using r5 hash to sort names [ 198.337508][ T6344] REISERFS (device loop4): using 3.5.x disk format [ 198.344218][ T6344] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6343] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6343] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6343] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 198.362303][ T27] audit: type=1800 audit(1671282421.763:739): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6343] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6346 attached [pid 6346] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6346] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] <... clone resumed>, parent_tid=[6346], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6346 [pid 6343] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] <... futex resumed>) = 0 [pid 6346] open("./bus", O_RDONLY [pid 6343] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6343] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6343] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6343] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6347 attached , parent_tid=[6347], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6347 [pid 6343] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] set_robust_list(0x7fe8f42af9e0, 24 [pid 6343] <... futex resumed>) = 0 [pid 6343] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... set_robust_list resumed>) = 0 [pid 6347] truncate("./bus", 6 [pid 6343] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6343] exit_group(0) = ? [pid 6344] <... sendfile resumed>) = ? [pid 6347] <... truncate resumed>) = ? [pid 6346] <... open resumed>) = ? [pid 6344] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 6346] +++ exited with 0 +++ [pid 6343] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./216/binderfs") = 0 [pid 5073] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./216/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./216") = 0 [pid 5073] mkdir("./217", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6348 ./strace-static-x86_64: Process 6348 attached [pid 6348] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6348] chdir("./217") = 0 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6348] setpgid(0, 0) = 0 [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6348] write(3, "1000", 4) = 4 [pid 6348] close(3) = 0 [pid 6348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6348] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6348] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6348] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6349 attached [pid 6349] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6349] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] <... clone resumed>, parent_tid=[6349], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6349 [pid 6348] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6348] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6349] memfd_create("syzkaller", 0) = 3 [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6349] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6349] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6349] close(3) = 0 [pid 6349] mkdir("./file0", 0777) = 0 [ 198.841980][ T6349] loop4: detected capacity change from 0 to 8192 [ 198.852824][ T6349] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.866121][ T6349] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 198.875350][ T6349] REISERFS (device loop4): using ordered data mode [ 198.881937][ T6349] reiserfs: using flush barriers [ 198.887989][ T6349] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.904621][ T6349] REISERFS (device loop4): checking transaction log (loop4) [pid 6349] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6349] chdir("./file0") = 0 [pid 6349] ioctl(4, LOOP_CLR_FD) = 0 [pid 6349] close(4) = 0 [pid 6349] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6349] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6348] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... open resumed>) = 4 [pid 6348] <... futex resumed>) = 0 [pid 6349] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6349] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6349] openat(-1, "/proc/self/exe", O_RDONLY [pid 6348] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... openat resumed>) = 5 [pid 6348] <... futex resumed>) = 0 [pid 6349] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6349] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6349] sendfile(4, 5, NULL, 140737974943952 [pid 6348] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 198.947779][ T6349] REISERFS (device loop4): Using r5 hash to sort names [ 198.954761][ T6349] REISERFS (device loop4): using 3.5.x disk format [ 198.961732][ T6349] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6348] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6348] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6348] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6348] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6351], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6351 [pid 6348] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6351 attached [pid 6351] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6351] open("./bus", O_RDONLY [pid 6348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6348] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6348] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6348] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6352 attached , parent_tid=[6352], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6352 [pid 6352] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6352] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 1 [pid 6352] truncate("./bus", 6 [pid 6348] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6348] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6348] exit_group(0) = ? [pid 6349] <... sendfile resumed>) = ? [pid 6349] +++ exited with 0 +++ [pid 6351] <... open resumed>) = ? [pid 6352] <... truncate resumed>) = ? [pid 6351] +++ exited with 0 +++ [pid 6352] +++ exited with 0 +++ [pid 6348] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./217/binderfs") = 0 [pid 5073] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./217/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./217") = 0 [pid 5073] mkdir("./218", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6353 ./strace-static-x86_64: Process 6353 attached [pid 6353] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6353] chdir("./218") = 0 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6353] setpgid(0, 0) = 0 [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6353] write(3, "1000", 4) = 4 [pid 6353] close(3) = 0 [pid 6353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6353] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6353] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6354], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6354 [pid 6353] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6354 attached [pid 6354] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6354] memfd_create("syzkaller", 0) = 3 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6354] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6354] close(3) = 0 [pid 6354] mkdir("./file0", 0777) = 0 [ 199.483802][ T6354] loop4: detected capacity change from 0 to 8192 [ 199.496686][ T6354] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.511142][ T6354] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 199.520601][ T6354] REISERFS (device loop4): using ordered data mode [ 199.527333][ T6354] reiserfs: using flush barriers [ 199.533095][ T6354] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.549760][ T6354] REISERFS (device loop4): checking transaction log (loop4) [pid 6354] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6354] chdir("./file0") = 0 [pid 6354] ioctl(4, LOOP_CLR_FD) = 0 [pid 6354] close(4) = 0 [pid 6354] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 0 [pid 6353] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] <... futex resumed>) = 1 [pid 6354] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6354] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 0 [pid 6353] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] <... futex resumed>) = 1 [pid 6354] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6354] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 0 [pid 6353] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] <... futex resumed>) = 1 [ 199.593051][ T6354] REISERFS (device loop4): Using r5 hash to sort names [ 199.600425][ T6354] REISERFS (device loop4): using 3.5.x disk format [ 199.607303][ T6354] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6354] sendfile(4, 5, NULL, 140737974943952 [pid 6353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6353] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6353] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6353] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6356], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6356 [pid 6353] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6356 attached [pid 6356] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6356] open("./bus", O_RDONLY [pid 6353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6353] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6353] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6357 attached [pid 6357] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6357] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] <... clone resumed>, parent_tid=[6357], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6357 [pid 6353] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6357] <... futex resumed>) = 0 [pid 6357] truncate("./bus", 6 [pid 6353] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6353] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6353] exit_group(0) = ? [pid 6354] <... sendfile resumed>) = ? [pid 6356] <... open resumed>) = ? [pid 6354] +++ exited with 0 +++ [pid 6357] <... truncate resumed>) = ? [pid 6356] +++ exited with 0 +++ [pid 6357] +++ exited with 0 +++ [pid 6353] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6353, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./218/binderfs") = 0 [pid 5073] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./218/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./218") = 0 [pid 5073] mkdir("./219", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6358 ./strace-static-x86_64: Process 6358 attached [pid 6358] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6358] chdir("./219") = 0 [pid 6358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6358] setpgid(0, 0) = 0 [pid 6358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6358] write(3, "1000", 4) = 4 [pid 6358] close(3) = 0 [pid 6358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6358] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6358] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6358] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6359 attached , parent_tid=[6359], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6359 [pid 6359] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6359] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6358] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6359] <... futex resumed>) = 0 [pid 6359] memfd_create("syzkaller", 0 [pid 6358] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6359] <... memfd_create resumed>) = 3 [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6359] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6359] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6359] close(3) = 0 [pid 6359] mkdir("./file0", 0777) = 0 [ 200.091376][ T6359] loop4: detected capacity change from 0 to 8192 [ 200.101387][ T6359] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.114651][ T6359] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 200.124027][ T6359] REISERFS (device loop4): using ordered data mode [ 200.130621][ T6359] reiserfs: using flush barriers [ 200.136678][ T6359] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.153001][ T6359] REISERFS (device loop4): checking transaction log (loop4) [pid 6359] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6359] chdir("./file0") = 0 [pid 6359] ioctl(4, LOOP_CLR_FD) = 0 [pid 6359] close(4) = 0 [pid 6359] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6358] <... futex resumed>) = 0 [pid 6359] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6358] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] <... open resumed>) = 4 [pid 6358] <... futex resumed>) = 0 [pid 6359] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] <... futex resumed>) = 0 [pid 6358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6359] openat(-1, "/proc/self/exe", O_RDONLY [pid 6358] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] <... openat resumed>) = 5 [pid 6358] <... futex resumed>) = 0 [pid 6359] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] <... futex resumed>) = 0 [pid 6358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6359] sendfile(4, 5, NULL, 140737974943952 [pid 6358] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 200.194540][ T6359] REISERFS (device loop4): Using r5 hash to sort names [ 200.201599][ T6359] REISERFS (device loop4): using 3.5.x disk format [ 200.208628][ T6359] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6358] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6358] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6358] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6358] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6361 attached , parent_tid=[6361], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6361 [pid 6361] set_robust_list(0x7fe8f42d09e0, 24 [pid 6358] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6361] <... set_robust_list resumed>) = 0 [pid 6358] <... futex resumed>) = 0 [pid 6361] open("./bus", O_RDONLY [pid 6358] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6358] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6358] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6358] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6362 attached , parent_tid=[6362], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6362 [pid 6358] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6358] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6362] truncate("./bus", 6 [pid 6358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6358] exit_group(0) = ? [pid 6359] <... sendfile resumed>) = ? [pid 6361] <... open resumed>) = ? [pid 6359] +++ exited with 0 +++ [pid 6362] <... truncate resumed>) = ? [pid 6361] +++ exited with 0 +++ [pid 6362] +++ exited with 0 +++ [pid 6358] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6358, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./219/binderfs") = 0 [pid 5073] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./219/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./219") = 0 [pid 5073] mkdir("./220", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6363 ./strace-static-x86_64: Process 6363 attached [pid 6363] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6363] chdir("./220") = 0 [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6363] setpgid(0, 0) = 0 [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6363] write(3, "1000", 4) = 4 [pid 6363] close(3) = 0 [pid 6363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6363] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6363] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6363] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6364], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6364 [pid 6363] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6364 attached [pid 6364] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6364] memfd_create("syzkaller", 0) = 3 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6364] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6364] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6364] close(3) = 0 [pid 6364] mkdir("./file0", 0777) = 0 [ 200.649807][ T6364] loop4: detected capacity change from 0 to 8192 [ 200.659823][ T6364] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.673058][ T6364] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 200.682415][ T6364] REISERFS (device loop4): using ordered data mode [ 200.689038][ T6364] reiserfs: using flush barriers [ 200.694886][ T6364] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.711335][ T6364] REISERFS (device loop4): checking transaction log (loop4) [pid 6364] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6364] chdir("./file0") = 0 [pid 6364] ioctl(4, LOOP_CLR_FD) = 0 [pid 6364] close(4) = 0 [pid 6364] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6364] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] <... futex resumed>) = 0 [pid 6363] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6363] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... futex resumed>) = 0 [pid 6364] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6364] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6363] <... futex resumed>) = 0 [pid 6364] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6363] <... futex resumed>) = 0 [pid 6364] openat(-1, "/proc/self/exe", O_RDONLY [pid 6363] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... openat resumed>) = 5 [pid 6364] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6363] <... futex resumed>) = 0 [pid 6363] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] sendfile(4, 5, NULL, 140737974943952 [ 200.753745][ T6364] REISERFS (device loop4): Using r5 hash to sort names [ 200.760714][ T6364] REISERFS (device loop4): using 3.5.x disk format [ 200.767566][ T6364] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6363] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6363] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6363] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6363] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6366 attached [pid 6366] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6366] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] <... clone resumed>, parent_tid=[6366], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6366 [pid 6363] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6366] <... futex resumed>) = 0 [pid 6363] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] open("./bus", O_RDONLY [pid 6363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6363] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6363] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6363] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6367 attached , parent_tid=[6367], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6367 [pid 6367] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6363] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] truncate("./bus", 6 [pid 6363] <... futex resumed>) = 0 [pid 6363] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6363] exit_group(0) = ? [pid 6364] <... sendfile resumed>) = ? [pid 6366] <... open resumed>) = ? [pid 6367] <... truncate resumed>) = ? [pid 6364] +++ exited with 0 +++ [pid 6367] +++ exited with 0 +++ [pid 6366] +++ exited with 0 +++ [pid 6363] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./220/binderfs") = 0 [pid 5073] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./220/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./220") = 0 [pid 5073] mkdir("./221", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6368 ./strace-static-x86_64: Process 6368 attached [pid 6368] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6368] chdir("./221") = 0 [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6368] setpgid(0, 0) = 0 [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6368] write(3, "1000", 4) = 4 [pid 6368] close(3) = 0 [pid 6368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6368] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6368] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6368] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6369], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6369 ./strace-static-x86_64: Process 6369 attached [pid 6369] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6368] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... set_robust_list resumed>) = 0 [pid 6369] memfd_create("syzkaller", 0 [pid 6368] <... futex resumed>) = 0 [pid 6369] <... memfd_create resumed>) = 3 [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6368] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6369] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6369] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6369] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6369] close(3) = 0 [pid 6369] mkdir("./file0", 0777) = 0 [ 201.284180][ T6369] loop4: detected capacity change from 0 to 8192 [ 201.295889][ T6369] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 201.308900][ T6369] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 201.318215][ T6369] REISERFS (device loop4): using ordered data mode [ 201.325080][ T6369] reiserfs: using flush barriers [ 201.330917][ T6369] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.347183][ T6369] REISERFS (device loop4): checking transaction log (loop4) [pid 6369] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6369] chdir("./file0") = 0 [pid 6369] ioctl(4, LOOP_CLR_FD) = 0 [pid 6369] close(4) = 0 [pid 6369] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] <... futex resumed>) = 0 [pid 6368] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6369] <... futex resumed>) = 1 [ 201.384141][ T6369] REISERFS (device loop4): Using r5 hash to sort names [ 201.391459][ T6369] REISERFS (device loop4): using 3.5.x disk format [ 201.398552][ T6369] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 201.416901][ T27] kauditd_printk_skb: 14 callbacks suppressed [pid 6369] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6369] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6369] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6368] <... futex resumed>) = 0 [pid 6368] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = 0 [pid 6368] <... futex resumed>) = 1 [pid 6369] openat(-1, "/proc/self/exe", O_RDONLY [pid 6368] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6369] <... openat resumed>) = 5 [pid 6369] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6369] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6368] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6368] <... futex resumed>) = 0 [pid 6369] sendfile(4, 5, NULL, 140737974943952 [ 201.416917][ T27] audit: type=1800 audit(1671282424.823:754): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6368] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6368] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6368] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6368] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6371 attached [pid 6371] set_robust_list(0x7fe8f42d09e0, 24 [pid 6368] <... clone resumed>, parent_tid=[6371], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6371 [pid 6371] <... set_robust_list resumed>) = 0 [pid 6368] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] open("./bus", O_RDONLY [pid 6368] <... futex resumed>) = 0 [pid 6368] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6368] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6368] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6368] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6372], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6372 ./strace-static-x86_64: Process 6372 attached [pid 6368] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] set_robust_list(0x7fe8f42af9e0, 24 [pid 6368] <... futex resumed>) = 0 [pid 6368] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6372] <... set_robust_list resumed>) = 0 [pid 6372] truncate("./bus", 6 [pid 6368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6368] exit_group(0) = ? [pid 6369] <... sendfile resumed>) = ? [pid 6372] <... truncate resumed>) = ? [pid 6371] <... open resumed>) = ? [pid 6372] +++ exited with 0 +++ [pid 6371] +++ exited with 0 +++ [pid 6369] +++ exited with 0 +++ [pid 6368] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6368, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./221/binderfs") = 0 [pid 5073] umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./221/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [ 201.768688][ T27] audit: type=1804 audit(1671282425.173:755): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/221/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 201.792697][ T27] audit: type=1800 audit(1671282425.173:756): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./221/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./221") = 0 [pid 5073] mkdir("./222", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6373 ./strace-static-x86_64: Process 6373 attached [pid 6373] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6373] chdir("./222") = 0 [pid 6373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6373] setpgid(0, 0) = 0 [pid 6373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6373] write(3, "1000", 4) = 4 [pid 6373] close(3) = 0 [pid 6373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6373] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6373] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6373] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6374 attached , parent_tid=[6374], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6374 [pid 6373] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6374] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6374] memfd_create("syzkaller", 0) = 3 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6374] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6374] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6374] close(3) = 0 [pid 6374] mkdir("./file0", 0777) = 0 [ 201.919430][ T6374] loop4: detected capacity change from 0 to 8192 [ 201.929874][ T6374] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 201.943098][ T6374] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 201.952530][ T6374] REISERFS (device loop4): using ordered data mode [ 201.959110][ T6374] reiserfs: using flush barriers [ 201.965089][ T6374] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.982023][ T6374] REISERFS (device loop4): checking transaction log (loop4) [pid 6374] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6374] chdir("./file0") = 0 [pid 6374] ioctl(4, LOOP_CLR_FD) = 0 [pid 6374] close(4) = 0 [pid 6374] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6373] <... futex resumed>) = 0 [pid 6374] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6373] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... open resumed>) = 4 [pid 6373] <... futex resumed>) = 0 [pid 6374] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... futex resumed>) = 0 [pid 6373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6374] openat(-1, "/proc/self/exe", O_RDONLY [pid 6373] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... openat resumed>) = 5 [pid 6373] <... futex resumed>) = 0 [pid 6374] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... futex resumed>) = 0 [pid 6373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6374] sendfile(4, 5, NULL, 140737974943952 [pid 6373] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 202.019932][ T6374] REISERFS (device loop4): Using r5 hash to sort names [ 202.027065][ T6374] REISERFS (device loop4): using 3.5.x disk format [ 202.033736][ T6374] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6373] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6373] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6373] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6373] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6376 attached [pid 6376] set_robust_list(0x7fe8f42d09e0, 24 [pid 6373] <... clone resumed>, parent_tid=[6376], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6376 [pid 6373] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6376] <... set_robust_list resumed>) = 0 [pid 6373] <... futex resumed>) = 0 [pid 6373] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 202.050279][ T27] audit: type=1800 audit(1671282425.453:757): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6376] open("./bus", O_RDONLY [pid 6373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6373] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6373] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6373] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6373] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6377], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6377 [pid 6373] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6373] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6377 attached [pid 6377] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6377] truncate("./bus", 6 [pid 6373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6373] exit_group(0) = ? [pid 6377] <... truncate resumed>) = ? [pid 6376] <... open resumed>) = ? [pid 6374] <... sendfile resumed>) = ? [pid 6377] +++ exited with 0 +++ [pid 6376] +++ exited with 0 +++ [pid 6374] +++ exited with 0 +++ [pid 6373] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6373, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./222/binderfs") = 0 [pid 5073] umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 202.408189][ T27] audit: type=1804 audit(1671282425.813:758): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/222/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 202.431401][ T27] audit: type=1800 audit(1671282425.813:759): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./222/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./222/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./222") = 0 [pid 5073] mkdir("./223", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6378 attached [pid 6378] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6378 [pid 6378] <... set_robust_list resumed>) = 0 [pid 6378] chdir("./223") = 0 [pid 6378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6378] setpgid(0, 0) = 0 [pid 6378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6378] write(3, "1000", 4) = 4 [pid 6378] close(3) = 0 [pid 6378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6378] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6378] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6378] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6379], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6379 [pid 6378] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6379 attached [pid 6379] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6379] memfd_create("syzkaller", 0) = 3 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6379] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6379] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6379] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6379] close(3) = 0 [pid 6379] mkdir("./file0", 0777) = 0 [ 202.559462][ T6379] loop4: detected capacity change from 0 to 8192 [ 202.569262][ T6379] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.582314][ T6379] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 202.591646][ T6379] REISERFS (device loop4): using ordered data mode [ 202.598426][ T6379] reiserfs: using flush barriers [ 202.604098][ T6379] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.620789][ T6379] REISERFS (device loop4): checking transaction log (loop4) [pid 6379] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6379] chdir("./file0") = 0 [pid 6379] ioctl(4, LOOP_CLR_FD) = 0 [pid 6379] close(4) = 0 [pid 6379] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6379] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6378] <... futex resumed>) = 0 [pid 6378] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6378] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] <... futex resumed>) = 0 [pid 6379] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6379] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = 0 [pid 6378] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] <... futex resumed>) = 1 [pid 6379] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6379] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... futex resumed>) = 0 [pid 6378] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] <... futex resumed>) = 1 [ 202.658356][ T6379] REISERFS (device loop4): Using r5 hash to sort names [ 202.665293][ T6379] REISERFS (device loop4): using 3.5.x disk format [ 202.672577][ T6379] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6379] sendfile(4, 5, NULL, 140737974943952 [pid 6378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6378] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6378] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6378] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6381 attached , parent_tid=[6381], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6381 [pid 6378] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6381] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 202.693765][ T27] audit: type=1800 audit(1671282426.093:760): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6381] open("./bus", O_RDONLY [pid 6378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6378] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6378] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6378] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6382], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6382 [pid 6378] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6382 attached [pid 6382] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6382] truncate("./bus", 6 [pid 6378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6378] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6378] exit_group(0) = ? [pid 6379] <... sendfile resumed>) = ? [pid 6381] <... open resumed>) = ? [pid 6379] +++ exited with 0 +++ [pid 6382] <... truncate resumed>) = ? [pid 6382] +++ exited with 0 +++ [pid 6381] +++ exited with 0 +++ [pid 6378] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6378, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./223/binderfs") = 0 [pid 5073] umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 203.038733][ T27] audit: type=1804 audit(1671282426.443:761): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/223/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 203.062765][ T27] audit: type=1800 audit(1671282426.443:762): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./223/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./223/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./223") = 0 [pid 5073] mkdir("./224", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6383 ./strace-static-x86_64: Process 6383 attached [pid 6383] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6383] chdir("./224") = 0 [pid 6383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6383] setpgid(0, 0) = 0 [pid 6383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6383] write(3, "1000", 4) = 4 [pid 6383] close(3) = 0 [pid 6383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6383] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6383] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6383] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6384], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6384 [pid 6383] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6384 attached [pid 6384] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6384] memfd_create("syzkaller", 0) = 3 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6384] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6384] close(3) = 0 [pid 6384] mkdir("./file0", 0777) = 0 [ 203.190569][ T6384] loop4: detected capacity change from 0 to 8192 [ 203.202065][ T6384] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 203.215340][ T6384] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 203.224926][ T6384] REISERFS (device loop4): using ordered data mode [ 203.231506][ T6384] reiserfs: using flush barriers [ 203.237747][ T6384] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.254214][ T6384] REISERFS (device loop4): checking transaction log (loop4) [pid 6384] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6384] chdir("./file0") = 0 [pid 6384] ioctl(4, LOOP_CLR_FD) = 0 [pid 6384] close(4) = 0 [pid 6384] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6383] <... futex resumed>) = 0 [pid 6384] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6383] <... futex resumed>) = 0 [pid 6384] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6383] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] <... open resumed>) = 4 [pid 6384] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6383] <... futex resumed>) = 0 [pid 6384] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6383] <... futex resumed>) = 0 [pid 6384] openat(-1, "/proc/self/exe", O_RDONLY [pid 6383] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] <... openat resumed>) = 5 [pid 6384] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6383] <... futex resumed>) = 0 [pid 6384] sendfile(4, 5, NULL, 140737974943952 [pid 6383] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 203.297645][ T6384] REISERFS (device loop4): Using r5 hash to sort names [ 203.304922][ T6384] REISERFS (device loop4): using 3.5.x disk format [ 203.311977][ T6384] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 203.330864][ T27] audit: type=1800 audit(1671282426.733:763): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6383] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6383] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6383] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6383] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6386 attached [pid 6386] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6386] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] <... clone resumed>, parent_tid=[6386], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6386 [pid 6383] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6383] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6386] open("./bus", O_RDONLY [pid 6383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6383] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6383] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6383] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6387 attached , parent_tid=[6387], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6387 [pid 6383] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6383] <... futex resumed>) = 0 [pid 6387] truncate("./bus", 6 [pid 6383] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6383] exit_group(0) = ? [pid 6384] <... sendfile resumed>) = ? [pid 6386] <... open resumed>) = ? [pid 6384] +++ exited with 0 +++ [pid 6386] +++ exited with 0 +++ [pid 6387] <... truncate resumed>) = ? [pid 6387] +++ exited with 0 +++ [pid 6383] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6383, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./224/binderfs") = 0 [pid 5073] umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./224/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./224/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./224") = 0 [pid 5073] mkdir("./225", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6388 ./strace-static-x86_64: Process 6388 attached [pid 6388] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6388] chdir("./225") = 0 [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6388] setpgid(0, 0) = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6388] write(3, "1000", 4) = 4 [pid 6388] close(3) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6388] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6388] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6388] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6389 attached [pid 6389] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6388] <... clone resumed>, parent_tid=[6389], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6389 [pid 6388] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6389] <... set_robust_list resumed>) = 0 [pid 6389] memfd_create("syzkaller", 0) = 3 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6389] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6389] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6389] close(3) = 0 [pid 6389] mkdir("./file0", 0777) = 0 [ 203.814291][ T6389] loop4: detected capacity change from 0 to 8192 [ 203.824177][ T6389] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 203.837482][ T6389] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 203.846834][ T6389] REISERFS (device loop4): using ordered data mode [ 203.853370][ T6389] reiserfs: using flush barriers [ 203.859372][ T6389] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.875780][ T6389] REISERFS (device loop4): checking transaction log (loop4) [pid 6389] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6389] chdir("./file0") = 0 [pid 6389] ioctl(4, LOOP_CLR_FD) = 0 [pid 6389] close(4) = 0 [pid 6389] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6389] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6388] <... futex resumed>) = 0 [pid 6389] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6388] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6389] <... open resumed>) = 4 [pid 6389] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6389] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6388] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6389] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6389] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6388] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] sendfile(4, 5, NULL, 140737974943952 [pid 6388] <... futex resumed>) = 0 [ 203.913541][ T6389] REISERFS (device loop4): Using r5 hash to sort names [ 203.920585][ T6389] REISERFS (device loop4): using 3.5.x disk format [ 203.927602][ T6389] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6388] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6388] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6388] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6388] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6388] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6391 attached [pid 6391] set_robust_list(0x7fe8f42d09e0, 24 [pid 6388] <... clone resumed>, parent_tid=[6391], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6391 [pid 6388] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... set_robust_list resumed>) = 0 [pid 6391] open("./bus", O_RDONLY [pid 6388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6388] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6388] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6388] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6392], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6392 [pid 6388] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6392 attached [pid 6392] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6392] truncate("./bus", 6 [pid 6388] <... futex resumed>) = 0 [pid 6388] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6388] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6388] exit_group(0) = ? [pid 6389] <... sendfile resumed>) = ? [pid 6391] <... open resumed>) = ? [pid 6389] +++ exited with 0 +++ [pid 6392] <... truncate resumed>) = ? [pid 6391] +++ exited with 0 +++ [pid 6392] +++ exited with 0 +++ [pid 6388] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./225/binderfs") = 0 [pid 5073] umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./225/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./225/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./225") = 0 [pid 5073] mkdir("./226", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6393 attached , child_tidptr=0x5555558b65d0) = 6393 [pid 6393] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6393] chdir("./226") = 0 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6393] setpgid(0, 0) = 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6393] write(3, "1000", 4) = 4 [pid 6393] close(3) = 0 [pid 6393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6393] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6393] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6393] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6394], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6394 [pid 6393] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6394 attached [pid 6394] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6394] memfd_create("syzkaller", 0) = 3 [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6394] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6394] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6394] close(3) = 0 [pid 6394] mkdir("./file0", 0777) = 0 [ 204.431959][ T6394] loop4: detected capacity change from 0 to 8192 [ 204.442333][ T6394] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 204.455543][ T6394] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 204.464766][ T6394] REISERFS (device loop4): using ordered data mode [ 204.471695][ T6394] reiserfs: using flush barriers [ 204.478235][ T6394] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.494775][ T6394] REISERFS (device loop4): checking transaction log (loop4) [pid 6394] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6394] chdir("./file0") = 0 [pid 6394] ioctl(4, LOOP_CLR_FD) = 0 [pid 6394] close(4) = 0 [pid 6394] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... futex resumed>) = 0 [pid 6393] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6394] <... futex resumed>) = 1 [pid 6394] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6394] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... futex resumed>) = 0 [pid 6393] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6394] <... futex resumed>) = 1 [pid 6394] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6394] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... futex resumed>) = 0 [pid 6393] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6394] <... futex resumed>) = 1 [ 204.531985][ T6394] REISERFS (device loop4): Using r5 hash to sort names [ 204.539072][ T6394] REISERFS (device loop4): using 3.5.x disk format [ 204.546000][ T6394] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6394] sendfile(4, 5, NULL, 140737974943952 [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6393] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6393] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6393] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6396], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6396 [pid 6393] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6396 attached [pid 6396] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6396] open("./bus", O_RDONLY [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6393] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6393] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6393] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6397 attached , parent_tid=[6397], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6397 [pid 6397] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6393] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6397] truncate("./bus", 6 [pid 6393] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6393] exit_group(0) = ? [pid 6396] <... open resumed>) = ? [pid 6394] <... sendfile resumed>) = ? [pid 6397] <... truncate resumed>) = ? [pid 6396] +++ exited with 0 +++ [pid 6397] +++ exited with 0 +++ [pid 6394] +++ exited with 0 +++ [pid 6393] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./226/binderfs") = 0 [pid 5073] umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./226/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./226/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./226") = 0 [pid 5073] mkdir("./227", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6398 ./strace-static-x86_64: Process 6398 attached [pid 6398] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6398] chdir("./227") = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6398] setpgid(0, 0) = 0 [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6398] write(3, "1000", 4) = 4 [pid 6398] close(3) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6398] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6398] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6398] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6399], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6399 ./strace-static-x86_64: Process 6399 attached [pid 6398] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6399] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6399] memfd_create("syzkaller", 0) = 3 [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6399] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6399] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6399] close(3) = 0 [pid 6399] mkdir("./file0", 0777) = 0 [ 205.026186][ T6399] loop4: detected capacity change from 0 to 8192 [ 205.037091][ T6399] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.050335][ T6399] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 205.059919][ T6399] REISERFS (device loop4): using ordered data mode [ 205.066872][ T6399] reiserfs: using flush barriers [ 205.072667][ T6399] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.090108][ T6399] REISERFS (device loop4): checking transaction log (loop4) [pid 6399] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6399] chdir("./file0") = 0 [pid 6399] ioctl(4, LOOP_CLR_FD) = 0 [pid 6399] close(4) = 0 [pid 6399] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6399] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = 0 [pid 6398] <... futex resumed>) = 1 [pid 6399] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6398] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] <... open resumed>) = 4 [pid 6399] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6399] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = 0 [pid 6398] <... futex resumed>) = 1 [pid 6399] openat(-1, "/proc/self/exe", O_RDONLY [pid 6398] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] <... openat resumed>) = 5 [pid 6399] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6398] <... futex resumed>) = 0 [pid 6399] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6398] <... futex resumed>) = 0 [pid 6399] sendfile(4, 5, NULL, 140737974943952 [ 205.132096][ T6399] REISERFS (device loop4): Using r5 hash to sort names [ 205.139068][ T6399] REISERFS (device loop4): using 3.5.x disk format [ 205.145982][ T6399] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6398] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6398] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6398] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6398] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6401], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6401 [pid 6398] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6401 attached [pid 6401] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6401] open("./bus", O_RDONLY [pid 6398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6398] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6398] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6398] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6398] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6402 attached [pid 6402] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6402] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... clone resumed>, parent_tid=[6402], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6402 [pid 6398] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6398] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6402] <... futex resumed>) = 0 [pid 6402] truncate("./bus", 6 [pid 6398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6398] exit_group(0) = ? [pid 6401] <... open resumed>) = ? [pid 6399] <... sendfile resumed>) = ? [pid 6402] <... truncate resumed>) = ? [pid 6401] +++ exited with 0 +++ [pid 6402] +++ exited with 0 +++ [pid 6399] +++ exited with 0 +++ [pid 6398] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6398, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./227/binderfs") = 0 [pid 5073] umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./227/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./227/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./227") = 0 [pid 5073] mkdir("./228", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6403 ./strace-static-x86_64: Process 6403 attached [pid 6403] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6403] chdir("./228") = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6403] setpgid(0, 0) = 0 [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6403] write(3, "1000", 4) = 4 [pid 6403] close(3) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6403] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6403] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6404], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6404 [pid 6403] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6404 attached [pid 6404] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6404] memfd_create("syzkaller", 0) = 3 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6404] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6404] close(3) = 0 [pid 6404] mkdir("./file0", 0777) = 0 [ 205.632783][ T6404] loop4: detected capacity change from 0 to 8192 [ 205.642714][ T6404] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.655818][ T6404] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 205.665015][ T6404] REISERFS (device loop4): using ordered data mode [ 205.671590][ T6404] reiserfs: using flush barriers [ 205.677526][ T6404] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.694038][ T6404] REISERFS (device loop4): checking transaction log (loop4) [pid 6404] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6404] chdir("./file0") = 0 [pid 6404] ioctl(4, LOOP_CLR_FD) = 0 [pid 6404] close(4) = 0 [pid 6404] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... futex resumed>) = 1 [pid 6404] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6404] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... futex resumed>) = 1 [pid 6404] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6404] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... futex resumed>) = 1 [ 205.738044][ T6404] REISERFS (device loop4): Using r5 hash to sort names [ 205.745102][ T6404] REISERFS (device loop4): using 3.5.x disk format [ 205.752063][ T6404] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6404] sendfile(4, 5, NULL, 140737974943952 [pid 6403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6403] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6403] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6403] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6406], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6406 [pid 6403] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6406 attached [pid 6406] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6406] open("./bus", O_RDONLY [pid 6403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6403] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6403] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6403] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6407], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6407 [pid 6403] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6407 attached [pid 6407] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6407] truncate("./bus", 6 [pid 6403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6403] exit_group(0) = ? [pid 6404] <... sendfile resumed>) = ? [pid 6406] <... open resumed>) = ? [pid 6404] +++ exited with 0 +++ [pid 6407] <... truncate resumed>) = ? [pid 6406] +++ exited with 0 +++ [pid 6407] +++ exited with 0 +++ [pid 6403] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6403, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./228/binderfs") = 0 [pid 5073] umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./228/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./228/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./228") = 0 [pid 5073] mkdir("./229", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6408 attached [pid 6408] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6408 [pid 6408] <... set_robust_list resumed>) = 0 [pid 6408] chdir("./229") = 0 [pid 6408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6408] setpgid(0, 0) = 0 [pid 6408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6408] write(3, "1000", 4) = 4 [pid 6408] close(3) = 0 [pid 6408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6408] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6408] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6408] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6409], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6409 [pid 6408] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6409 attached [pid 6409] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6409] memfd_create("syzkaller", 0) = 3 [pid 6409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6409] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6409] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6409] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6409] close(3) = 0 [pid 6409] mkdir("./file0", 0777) = 0 [ 206.241737][ T6409] loop4: detected capacity change from 0 to 8192 [ 206.251788][ T6409] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.264885][ T6409] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 206.274089][ T6409] REISERFS (device loop4): using ordered data mode [ 206.280621][ T6409] reiserfs: using flush barriers [ 206.286398][ T6409] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.302891][ T6409] REISERFS (device loop4): checking transaction log (loop4) [pid 6409] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6409] chdir("./file0") = 0 [pid 6409] ioctl(4, LOOP_CLR_FD) = 0 [pid 6409] close(4) = 0 [pid 6409] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6409] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] <... futex resumed>) = 0 [pid 6408] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6409] <... futex resumed>) = 0 [pid 6408] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6409] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6409] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] <... futex resumed>) = 0 [pid 6408] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6409] <... futex resumed>) = 0 [pid 6408] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6409] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6408] <... futex resumed>) = 0 [pid 6409] sendfile(4, 5, NULL, 140737974943952 [pid 6408] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 206.348543][ T6409] REISERFS (device loop4): Using r5 hash to sort names [ 206.355857][ T6409] REISERFS (device loop4): using 3.5.x disk format [ 206.362594][ T6409] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6408] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6408] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6408] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6408] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6408] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6411 attached , parent_tid=[6411], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6411 [pid 6411] set_robust_list(0x7fe8f42d09e0, 24 [pid 6408] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... set_robust_list resumed>) = 0 [pid 6411] open("./bus", O_RDONLY [pid 6408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6408] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6408] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6408] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6412 attached [pid 6412] set_robust_list(0x7fe8f42af9e0, 24 [pid 6408] <... clone resumed>, parent_tid=[6412], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6412 [pid 6412] <... set_robust_list resumed>) = 0 [pid 6408] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] truncate("./bus", 6 [pid 6408] <... futex resumed>) = 0 [pid 6408] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6408] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6408] exit_group(0) = ? [pid 6409] <... sendfile resumed>) = ? [pid 6411] <... open resumed>) = ? [pid 6409] +++ exited with 0 +++ [pid 6412] <... truncate resumed>) = ? [pid 6411] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ [pid 6408] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6408, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./229/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./229/binderfs") = 0 [ 206.739141][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 206.739157][ T27] audit: type=1804 audit(1671282430.143:779): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/229/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 206.769764][ T27] audit: type=1800 audit(1671282430.143:780): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./229/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./229/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./229") = 0 [pid 5073] mkdir("./230", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6413 ./strace-static-x86_64: Process 6413 attached [pid 6413] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6413] chdir("./230") = 0 [pid 6413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6413] setpgid(0, 0) = 0 [pid 6413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6413] write(3, "1000", 4) = 4 [pid 6413] close(3) = 0 [pid 6413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6413] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6413] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6413] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6414], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6414 [pid 6413] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6414 attached [pid 6414] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6414] memfd_create("syzkaller", 0) = 3 [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6414] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6414] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6414] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6414] close(3) = 0 [pid 6414] mkdir("./file0", 0777) = 0 [ 206.897380][ T6414] loop4: detected capacity change from 0 to 8192 [ 206.907874][ T6414] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.920986][ T6414] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 206.930655][ T6414] REISERFS (device loop4): using ordered data mode [ 206.937285][ T6414] reiserfs: using flush barriers [ 206.943163][ T6414] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.959622][ T6414] REISERFS (device loop4): checking transaction log (loop4) [pid 6414] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6414] chdir("./file0") = 0 [pid 6414] ioctl(4, LOOP_CLR_FD) = 0 [pid 6414] close(4) = 0 [pid 6414] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6414] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6413] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6414] <... futex resumed>) = 0 [ 207.000864][ T6414] REISERFS (device loop4): Using r5 hash to sort names [ 207.007969][ T6414] REISERFS (device loop4): using 3.5.x disk format [ 207.014766][ T6414] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6414] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6414] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6413] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] <... futex resumed>) = 0 [pid 6413] <... futex resumed>) = 1 [pid 6414] openat(-1, "/proc/self/exe", O_RDONLY [pid 6413] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6414] <... openat resumed>) = 5 [pid 6414] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] <... futex resumed>) = 0 [pid 6414] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] <... futex resumed>) = 0 [pid 6414] sendfile(4, 5, NULL, 140737974943952 [ 207.035757][ T27] audit: type=1800 audit(1671282430.443:781): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6413] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6413] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6413] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6413] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6416], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6416 [pid 6413] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6416 attached [pid 6416] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6416] open("./bus", O_RDONLY [pid 6413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6413] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6413] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6413] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6417], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6417 [pid 6413] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6417 attached [pid 6417] set_robust_list(0x7fe8f42af9e0, 24 [pid 6413] <... futex resumed>) = 0 [pid 6417] <... set_robust_list resumed>) = 0 [pid 6413] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6417] truncate("./bus", 6 [pid 6413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6413] exit_group(0) = ? [pid 6414] <... sendfile resumed>) = ? [pid 6416] <... open resumed>) = ? [pid 6414] +++ exited with 0 +++ [pid 6417] <... truncate resumed>) = ? [pid 6417] +++ exited with 0 +++ [pid 6416] +++ exited with 0 +++ [pid 6413] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6413, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./230/binderfs") = 0 [pid 5073] umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./230/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [ 207.389029][ T27] audit: type=1804 audit(1671282430.793:782): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/230/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 207.412522][ T27] audit: type=1800 audit(1671282430.793:783): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./230/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./230") = 0 [pid 5073] mkdir("./231", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6418 ./strace-static-x86_64: Process 6418 attached [pid 6418] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6418] chdir("./231") = 0 [pid 6418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6418] setpgid(0, 0) = 0 [pid 6418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6418] write(3, "1000", 4) = 4 [pid 6418] close(3) = 0 [pid 6418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6418] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6418] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6418] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6419], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6419 [pid 6418] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6419 attached [pid 6419] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6419] memfd_create("syzkaller", 0) = 3 [pid 6419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6419] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6419] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6419] close(3) = 0 [pid 6419] mkdir("./file0", 0777) = 0 [ 207.529568][ T6419] loop4: detected capacity change from 0 to 8192 [ 207.539896][ T6419] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 207.553053][ T6419] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 207.562259][ T6419] REISERFS (device loop4): using ordered data mode [ 207.568857][ T6419] reiserfs: using flush barriers [ 207.574685][ T6419] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.591172][ T6419] REISERFS (device loop4): checking transaction log (loop4) [pid 6419] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6419] chdir("./file0") = 0 [pid 6419] ioctl(4, LOOP_CLR_FD) = 0 [pid 6419] close(4) = 0 [pid 6419] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6418] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] <... open resumed>) = 4 [pid 6418] <... futex resumed>) = 0 [pid 6419] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6419] openat(-1, "/proc/self/exe", O_RDONLY [pid 6418] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] <... openat resumed>) = 5 [pid 6418] <... futex resumed>) = 0 [pid 6419] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6419] sendfile(4, 5, NULL, 140737974943952 [pid 6418] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 207.633017][ T6419] REISERFS (device loop4): Using r5 hash to sort names [ 207.640022][ T6419] REISERFS (device loop4): using 3.5.x disk format [ 207.646818][ T6419] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6418] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6418] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6418] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6418] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6421 attached , parent_tid=[6421], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6421 [pid 6418] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6421] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 207.664219][ T27] audit: type=1800 audit(1671282431.063:784): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6421] open("./bus", O_RDONLY [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6418] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6418] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6418] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6418] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6422 attached , parent_tid=[6422], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6422 [pid 6418] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6422] truncate("./bus", 6 [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6418] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6418] exit_group(0) = ? [pid 6419] <... sendfile resumed>) = ? [pid 6421] <... open resumed>) = ? [pid 6421] +++ exited with 0 +++ [pid 6422] <... truncate resumed>) = ? [pid 6419] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 6418] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6418, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./231/binderfs") = 0 [pid 5073] umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 208.008511][ T27] audit: type=1804 audit(1671282431.413:785): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/231/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 208.032945][ T27] audit: type=1800 audit(1671282431.413:786): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./231/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./231/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./231") = 0 [pid 5073] mkdir("./232", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6423 attached [pid 6423] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6423 [pid 6423] <... set_robust_list resumed>) = 0 [pid 6423] chdir("./232") = 0 [pid 6423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6423] setpgid(0, 0) = 0 [pid 6423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6423] write(3, "1000", 4) = 4 [pid 6423] close(3) = 0 [pid 6423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6423] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6423] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6423] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6424], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6424 ./strace-static-x86_64: Process 6424 attached [pid 6423] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6423] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6424] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6424] memfd_create("syzkaller", 0) = 3 [pid 6424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6424] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6424] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6424] close(3) = 0 [pid 6424] mkdir("./file0", 0777) = 0 [ 208.164968][ T6424] loop4: detected capacity change from 0 to 8192 [ 208.174667][ T6424] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.187755][ T6424] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 208.197181][ T6424] REISERFS (device loop4): using ordered data mode [ 208.203729][ T6424] reiserfs: using flush barriers [ 208.209909][ T6424] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.226266][ T6424] REISERFS (device loop4): checking transaction log (loop4) [pid 6424] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6424] chdir("./file0") = 0 [pid 6424] ioctl(4, LOOP_CLR_FD) = 0 [pid 6424] close(4) = 0 [pid 6424] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6424] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6423] <... futex resumed>) = 0 [pid 6423] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6423] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] <... futex resumed>) = 0 [pid 6424] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6424] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6423] <... futex resumed>) = 0 [pid 6424] openat(-1, "/proc/self/exe", O_RDONLY [pid 6423] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... openat resumed>) = 5 [pid 6423] <... futex resumed>) = 0 [pid 6424] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] <... futex resumed>) = 0 [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] sendfile(4, 5, NULL, 140737974943952 [pid 6423] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 208.268756][ T6424] REISERFS (device loop4): Using r5 hash to sort names [ 208.275803][ T6424] REISERFS (device loop4): using 3.5.x disk format [ 208.282690][ T6424] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6423] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6423] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 208.302054][ T27] audit: type=1800 audit(1671282431.703:787): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6423] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6423] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6426 attached [pid 6426] set_robust_list(0x7fe8f42d09e0, 24 [pid 6423] <... clone resumed>, parent_tid=[6426], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6426 [pid 6426] <... set_robust_list resumed>) = 0 [pid 6423] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] open("./bus", O_RDONLY [pid 6423] <... futex resumed>) = 0 [pid 6423] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6423] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6423] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6423] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6427 attached , parent_tid=[6427], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6427 [pid 6423] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6423] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6427] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6427] truncate("./bus", 6 [pid 6423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6423] exit_group(0) = ? [pid 6424] <... sendfile resumed>) = ? [pid 6426] <... open resumed>) = ? [pid 6424] +++ exited with 0 +++ [pid 6427] <... truncate resumed>) = ? [pid 6427] +++ exited with 0 +++ [pid 6426] +++ exited with 0 +++ [pid 6423] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6423, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./232/binderfs") = 0 [pid 5073] umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 208.629222][ T27] audit: type=1804 audit(1671282432.033:788): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/232/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./232/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./232/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./232") = 0 [pid 5073] mkdir("./233", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6428 ./strace-static-x86_64: Process 6428 attached [pid 6428] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6428] chdir("./233") = 0 [pid 6428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6428] setpgid(0, 0) = 0 [pid 6428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6428] write(3, "1000", 4) = 4 [pid 6428] close(3) = 0 [pid 6428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6428] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6428] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6428] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6429], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6429 [pid 6428] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6429 attached [pid 6429] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6429] memfd_create("syzkaller", 0) = 3 [pid 6429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6429] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6429] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6429] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6429] close(3) = 0 [pid 6429] mkdir("./file0", 0777) = 0 [ 208.764594][ T6429] loop4: detected capacity change from 0 to 8192 [ 208.778135][ T6429] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.791272][ T6429] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 208.800566][ T6429] REISERFS (device loop4): using ordered data mode [ 208.807165][ T6429] reiserfs: using flush barriers [ 208.812868][ T6429] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.829325][ T6429] REISERFS (device loop4): checking transaction log (loop4) [pid 6429] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6429] chdir("./file0") = 0 [pid 6429] ioctl(4, LOOP_CLR_FD) = 0 [pid 6429] close(4) = 0 [pid 6429] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] <... futex resumed>) = 0 [pid 6428] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6429] <... futex resumed>) = 1 [pid 6429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6429] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] <... futex resumed>) = 0 [pid 6428] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6429] <... futex resumed>) = 1 [pid 6429] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6429] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] <... futex resumed>) = 0 [pid 6428] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6429] <... futex resumed>) = 1 [ 208.866710][ T6429] REISERFS (device loop4): Using r5 hash to sort names [ 208.873835][ T6429] REISERFS (device loop4): using 3.5.x disk format [ 208.880744][ T6429] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6429] sendfile(4, 5, NULL, 140737974943952 [pid 6428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6428] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6428] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6428] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6431], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6431 ./strace-static-x86_64: Process 6431 attached [pid 6428] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6431] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6431] open("./bus", O_RDONLY [pid 6428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6428] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6428] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6428] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6432 attached , parent_tid=[6432], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6432 [pid 6432] set_robust_list(0x7fe8f42af9e0, 24 [pid 6428] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6432] <... set_robust_list resumed>) = 0 [pid 6428] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6432] truncate("./bus", 6 [pid 6428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6428] exit_group(0) = ? [pid 6431] <... open resumed>) = ? [pid 6429] <... sendfile resumed>) = ? [pid 6432] <... truncate resumed>) = ? [pid 6431] +++ exited with 0 +++ [pid 6429] +++ exited with 0 +++ [pid 6432] +++ exited with 0 +++ [pid 6428] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6428, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./233", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./233/binderfs") = 0 [pid 5073] umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./233/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./233/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./233") = 0 [pid 5073] mkdir("./234", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6433 ./strace-static-x86_64: Process 6433 attached [pid 6433] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6433] chdir("./234") = 0 [pid 6433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6433] setpgid(0, 0) = 0 [pid 6433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6433] write(3, "1000", 4) = 4 [pid 6433] close(3) = 0 [pid 6433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6433] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6433] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6433] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6434 attached , parent_tid=[6434], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6434 [pid 6433] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6434] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6434] memfd_create("syzkaller", 0) = 3 [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6434] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6434] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6434] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6434] close(3) = 0 [pid 6434] mkdir("./file0", 0777) = 0 [ 209.350490][ T6434] loop4: detected capacity change from 0 to 8192 [ 209.360987][ T6434] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.374303][ T6434] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 209.383540][ T6434] REISERFS (device loop4): using ordered data mode [ 209.390109][ T6434] reiserfs: using flush barriers [ 209.396070][ T6434] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.412423][ T6434] REISERFS (device loop4): checking transaction log (loop4) [pid 6434] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6434] chdir("./file0") = 0 [pid 6434] ioctl(4, LOOP_CLR_FD) = 0 [pid 6434] close(4) = 0 [pid 6434] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6433] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 1 [pid 6434] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6434] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6433] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 1 [pid 6434] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6434] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6433] <... futex resumed>) = 0 [pid 6434] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6433] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6433] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 209.453413][ T6434] REISERFS (device loop4): Using r5 hash to sort names [ 209.460423][ T6434] REISERFS (device loop4): using 3.5.x disk format [ 209.467404][ T6434] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6434] sendfile(4, 5, NULL, 140737974943952 [pid 6433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6433] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6433] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6433] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6436 attached [pid 6436] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6436] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6433] <... clone resumed>, parent_tid=[6436], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6436 [pid 6436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6433] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] open("./bus", O_RDONLY [pid 6433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6433] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6433] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6433] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6437 attached [pid 6437] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6437] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6433] <... clone resumed>, parent_tid=[6437], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6437 [pid 6433] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6437] <... futex resumed>) = 0 [pid 6433] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] truncate("./bus", 6 [pid 6433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6433] exit_group(0) = ? [pid 6434] <... sendfile resumed>) = ? [pid 6436] <... open resumed>) = ? [pid 6434] +++ exited with 0 +++ [pid 6437] <... truncate resumed>) = ? [pid 6436] +++ exited with 0 +++ [pid 6437] +++ exited with 0 +++ [pid 6433] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6433, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./234", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./234/binderfs") = 0 [pid 5073] umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./234/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./234/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./234") = 0 [pid 5073] mkdir("./235", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6438 ./strace-static-x86_64: Process 6438 attached [pid 6438] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6438] chdir("./235") = 0 [pid 6438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6438] setpgid(0, 0) = 0 [pid 6438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6438] write(3, "1000", 4) = 4 [pid 6438] close(3) = 0 [pid 6438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6438] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6438] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6438] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6439], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6439 [pid 6438] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6439 attached [pid 6439] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6439] memfd_create("syzkaller", 0) = 3 [pid 6439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6439] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6439] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6439] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6439] close(3) = 0 [pid 6439] mkdir("./file0", 0777) = 0 [ 209.960318][ T6439] loop4: detected capacity change from 0 to 8192 [ 209.970825][ T6439] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.984014][ T6439] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 209.993267][ T6439] REISERFS (device loop4): using ordered data mode [ 209.999949][ T6439] reiserfs: using flush barriers [ 210.006090][ T6439] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.022418][ T6439] REISERFS (device loop4): checking transaction log (loop4) [pid 6439] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6439] chdir("./file0") = 0 [pid 6439] ioctl(4, LOOP_CLR_FD) = 0 [pid 6439] close(4) = 0 [pid 6439] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6438] <... futex resumed>) = 0 [pid 6439] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6438] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6438] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] <... futex resumed>) = 0 [pid 6439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6439] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... futex resumed>) = 0 [pid 6438] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] <... futex resumed>) = 1 [pid 6439] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6439] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6438] <... futex resumed>) = 0 [pid 6439] sendfile(4, 5, NULL, 140737974943952 [pid 6438] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 210.066346][ T6439] REISERFS (device loop4): Using r5 hash to sort names [ 210.073431][ T6439] REISERFS (device loop4): using 3.5.x disk format [ 210.080417][ T6439] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6438] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6438] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6438] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6438] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6441], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6441 ./strace-static-x86_64: Process 6441 attached [pid 6441] set_robust_list(0x7fe8f42d09e0, 24 [pid 6438] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... set_robust_list resumed>) = 0 [pid 6441] open("./bus", O_RDONLY [pid 6438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6438] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6438] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6438] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6442 attached , parent_tid=[6442], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6442 [pid 6438] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6442] truncate("./bus", 6 [pid 6438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6438] exit_group(0) = ? [pid 6439] <... sendfile resumed>) = ? [pid 6441] <... open resumed>) = ? [pid 6439] +++ exited with 0 +++ [pid 6441] +++ exited with 0 +++ [pid 6442] <... truncate resumed>) = ? [pid 6442] +++ exited with 0 +++ [pid 6438] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6438, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./235", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./235/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./235/binderfs") = 0 [pid 5073] umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./235/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./235/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./235") = 0 [pid 5073] mkdir("./236", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6443 ./strace-static-x86_64: Process 6443 attached [pid 6443] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6443] chdir("./236") = 0 [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6443] setpgid(0, 0) = 0 [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6443] write(3, "1000", 4) = 4 [pid 6443] close(3) = 0 [pid 6443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6443] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6443] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6444], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6444 [pid 6443] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6444 attached [pid 6444] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6444] memfd_create("syzkaller", 0) = 3 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6444] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6444] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6444] close(3) = 0 [pid 6444] mkdir("./file0", 0777) = 0 [ 210.583769][ T6444] loop4: detected capacity change from 0 to 8192 [ 210.594397][ T6444] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 210.607554][ T6444] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 210.616825][ T6444] REISERFS (device loop4): using ordered data mode [ 210.623370][ T6444] reiserfs: using flush barriers [ 210.629756][ T6444] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.646238][ T6444] REISERFS (device loop4): checking transaction log (loop4) [pid 6444] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6444] chdir("./file0") = 0 [pid 6444] ioctl(4, LOOP_CLR_FD) = 0 [pid 6444] close(4) = 0 [pid 6444] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6444] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6443] <... futex resumed>) = 0 [pid 6443] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 1 [pid 6444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6443] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... open resumed>) = 4 [pid 6444] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6443] <... futex resumed>) = 0 [pid 6444] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6443] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6444] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6444] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6443] <... futex resumed>) = 0 [pid 6444] sendfile(4, 5, NULL, 140737974943952 [pid 6443] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 210.689917][ T6444] REISERFS (device loop4): Using r5 hash to sort names [ 210.696909][ T6444] REISERFS (device loop4): using 3.5.x disk format [ 210.703732][ T6444] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6443] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6443] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6443] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6443] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6446 attached , parent_tid=[6446], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6446 [pid 6443] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6446] open("./bus", O_RDONLY [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6443] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6443] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6447], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6447 [pid 6443] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6447 attached [pid 6447] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6447] truncate("./bus", 6 [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6443] exit_group(0) = ? [pid 6444] <... sendfile resumed>) = ? [pid 6446] <... open resumed>) = ? [pid 6444] +++ exited with 0 +++ [pid 6446] +++ exited with 0 +++ [pid 6447] <... truncate resumed>) = ? [pid 6447] +++ exited with 0 +++ [pid 6443] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6443, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./236", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./236/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./236/binderfs") = 0 [pid 5073] umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./236/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./236/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./236") = 0 [pid 5073] mkdir("./237", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6448 ./strace-static-x86_64: Process 6448 attached [pid 6448] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6448] chdir("./237") = 0 [pid 6448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6448] setpgid(0, 0) = 0 [pid 6448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6448] write(3, "1000", 4) = 4 [pid 6448] close(3) = 0 [pid 6448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6448] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6448] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6448] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6449], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6449 [pid 6448] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6449 attached [pid 6449] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6449] memfd_create("syzkaller", 0) = 3 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6449] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6449] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6449] close(3) = 0 [pid 6449] mkdir("./file0", 0777) = 0 [ 211.201172][ T6449] loop4: detected capacity change from 0 to 8192 [ 211.211190][ T6449] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.224340][ T6449] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 211.233721][ T6449] REISERFS (device loop4): using ordered data mode [ 211.240302][ T6449] reiserfs: using flush barriers [ 211.246419][ T6449] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.263355][ T6449] REISERFS (device loop4): checking transaction log (loop4) [pid 6449] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6449] chdir("./file0") = 0 [pid 6449] ioctl(4, LOOP_CLR_FD) = 0 [pid 6449] close(4) = 0 [pid 6449] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = 0 [pid 6448] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... futex resumed>) = 1 [pid 6449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6449] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = 0 [pid 6448] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... futex resumed>) = 1 [pid 6449] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6449] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = 0 [pid 6448] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... futex resumed>) = 1 [ 211.300603][ T6449] REISERFS (device loop4): Using r5 hash to sort names [ 211.308000][ T6449] REISERFS (device loop4): using 3.5.x disk format [ 211.314723][ T6449] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6449] sendfile(4, 5, NULL, 140737974943952 [pid 6448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6448] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6448] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6448] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6451 attached , parent_tid=[6451], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6451 [pid 6451] set_robust_list(0x7fe8f42d09e0, 24 [pid 6448] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6451] <... set_robust_list resumed>) = 0 [pid 6451] open("./bus", O_RDONLY [pid 6448] <... futex resumed>) = 0 [pid 6448] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6448] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6448] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6448] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6452 attached , parent_tid=[6452], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6452 [pid 6448] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6452] set_robust_list(0x7fe8f42af9e0, 24 [pid 6448] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6452] <... set_robust_list resumed>) = 0 [pid 6452] truncate("./bus", 6 [pid 6448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6448] exit_group(0) = ? [pid 6449] <... sendfile resumed>) = ? [pid 6451] <... open resumed>) = ? [pid 6449] +++ exited with 0 +++ [pid 6452] <... truncate resumed>) = ? [pid 6451] +++ exited with 0 +++ [pid 6452] +++ exited with 0 +++ [pid 6448] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6448, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./237", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./237/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./237/binderfs") = 0 [pid 5073] umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./237/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./237/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./237/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./237") = 0 [pid 5073] mkdir("./238", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6453 ./strace-static-x86_64: Process 6453 attached [pid 6453] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6453] chdir("./238") = 0 [pid 6453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6453] setpgid(0, 0) = 0 [pid 6453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6453] write(3, "1000", 4) = 4 [pid 6453] close(3) = 0 [pid 6453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6453] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6453] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6453] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6454 attached [pid 6454] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6453] <... clone resumed>, parent_tid=[6454], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6454 [pid 6454] <... set_robust_list resumed>) = 0 [pid 6453] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6454] memfd_create("syzkaller", 0 [pid 6453] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6454] <... memfd_create resumed>) = 3 [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6454] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6454] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6454] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6454] close(3) = 0 [pid 6454] mkdir("./file0", 0777) = 0 [ 211.787204][ T6454] loop4: detected capacity change from 0 to 8192 [ 211.797594][ T6454] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.810730][ T6454] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 211.820213][ T6454] REISERFS (device loop4): using ordered data mode [ 211.826854][ T6454] reiserfs: using flush barriers [ 211.833007][ T6454] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.849540][ T6454] REISERFS (device loop4): checking transaction log (loop4) [pid 6454] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6454] chdir("./file0") = 0 [pid 6454] ioctl(4, LOOP_CLR_FD) = 0 [pid 6454] close(4) = 0 [pid 6454] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6453] <... futex resumed>) = 0 [pid 6453] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6453] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6454] <... futex resumed>) = 1 [ 211.892045][ T6454] REISERFS (device loop4): Using r5 hash to sort names [ 211.899026][ T6454] REISERFS (device loop4): using 3.5.x disk format [ 211.905897][ T6454] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6454] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6454] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6453] <... futex resumed>) = 0 [pid 6454] openat(-1, "/proc/self/exe", O_RDONLY [pid 6453] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6454] <... openat resumed>) = 5 [pid 6454] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6453] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6454] <... futex resumed>) = 0 [pid 6454] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6453] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] sendfile(4, 5, NULL, 140737974943952 [pid 6453] <... futex resumed>) = 0 [ 211.933480][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 211.933495][ T27] audit: type=1800 audit(1671282435.333:805): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6453] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6453] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6453] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6453] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6456 attached , parent_tid=[6456], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6456 [pid 6453] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6453] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6456] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6456] open("./bus", O_RDONLY [pid 6453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6453] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6453] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6453] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6457 attached [pid 6457] set_robust_list(0x7fe8f42af9e0, 24 [pid 6453] <... clone resumed>, parent_tid=[6457], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6457 [pid 6453] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6453] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6457] <... set_robust_list resumed>) = 0 [pid 6457] truncate("./bus", 6 [pid 6453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6453] exit_group(0) = ? [pid 6454] <... sendfile resumed>) = ? [pid 6454] +++ exited with 0 +++ [pid 6456] <... open resumed>) = ? [pid 6457] <... truncate resumed>) = ? [pid 6456] +++ exited with 0 +++ [pid 6457] +++ exited with 0 +++ [pid 6453] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6453, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./238", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./238/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./238/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./238/binderfs") = 0 [pid 5073] umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./238/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./238/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [ 212.318457][ T27] audit: type=1804 audit(1671282435.723:806): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/238/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 212.342797][ T27] audit: type=1800 audit(1671282435.723:807): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./238") = 0 [pid 5073] mkdir("./239", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6458 ./strace-static-x86_64: Process 6458 attached [pid 6458] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6458] chdir("./239") = 0 [pid 6458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6458] setpgid(0, 0) = 0 [pid 6458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6458] write(3, "1000", 4) = 4 [pid 6458] close(3) = 0 [pid 6458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6458] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6458] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6459 attached , parent_tid=[6459], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6459 [pid 6459] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6458] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] <... set_robust_list resumed>) = 0 [pid 6458] <... futex resumed>) = 0 [pid 6458] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6459] memfd_create("syzkaller", 0) = 3 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6459] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6459] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6459] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6459] close(3) = 0 [pid 6459] mkdir("./file0", 0777) = 0 [ 212.461580][ T6459] loop4: detected capacity change from 0 to 8192 [ 212.471565][ T6459] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.484799][ T6459] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 212.494094][ T6459] REISERFS (device loop4): using ordered data mode [ 212.500682][ T6459] reiserfs: using flush barriers [ 212.507654][ T6459] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.524225][ T6459] REISERFS (device loop4): checking transaction log (loop4) [pid 6459] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6459] chdir("./file0") = 0 [pid 6459] ioctl(4, LOOP_CLR_FD) = 0 [pid 6459] close(4) = 0 [pid 6459] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] <... futex resumed>) = 0 [pid 6458] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] <... futex resumed>) = 1 [pid 6459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6459] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] <... futex resumed>) = 0 [pid 6459] <... futex resumed>) = 1 [pid 6458] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] openat(-1, "/proc/self/exe", O_RDONLY [pid 6458] <... futex resumed>) = 0 [pid 6459] <... openat resumed>) = 5 [pid 6458] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6459] sendfile(4, 5, NULL, 140737974943952 [pid 6458] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 212.567787][ T6459] REISERFS (device loop4): Using r5 hash to sort names [ 212.574904][ T6459] REISERFS (device loop4): using 3.5.x disk format [ 212.581798][ T6459] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6458] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6458] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6458] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6458] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6461 attached , parent_tid=[6461], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6461 [pid 6458] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 212.599737][ T27] audit: type=1800 audit(1671282436.003:808): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6461] open("./bus", O_RDONLY [pid 6458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6458] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6458] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6462 attached , parent_tid=[6462], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6462 [pid 6458] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6462] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6462] truncate("./bus", 6 [pid 6458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6458] exit_group(0) = ? [pid 6459] <... sendfile resumed>) = ? [pid 6461] <... open resumed>) = ? [pid 6459] +++ exited with 0 +++ [pid 6461] +++ exited with 0 +++ [pid 6462] <... truncate resumed>) = ? [pid 6462] +++ exited with 0 +++ [pid 6458] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6458, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./239", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./239/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./239/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./239/binderfs") = 0 [ 212.948594][ T27] audit: type=1804 audit(1671282436.353:809): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/239/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 212.972397][ T27] audit: type=1800 audit(1671282436.353:810): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./239/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./239/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./239/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./239") = 0 [pid 5073] mkdir("./240", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6463 ./strace-static-x86_64: Process 6463 attached [pid 6463] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6463] chdir("./240") = 0 [pid 6463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6463] setpgid(0, 0) = 0 [pid 6463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6463] write(3, "1000", 4) = 4 [pid 6463] close(3) = 0 [pid 6463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6463] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6463] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6463] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6464], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6464 ./strace-static-x86_64: Process 6464 attached [pid 6463] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6464] memfd_create("syzkaller", 0 [pid 6463] <... futex resumed>) = 0 [pid 6464] <... memfd_create resumed>) = 3 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6463] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6464] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6464] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6464] close(3) = 0 [pid 6464] mkdir("./file0", 0777) = 0 [ 213.114416][ T6464] loop4: detected capacity change from 0 to 8192 [ 213.124480][ T6464] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 213.137672][ T6464] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 213.146943][ T6464] REISERFS (device loop4): using ordered data mode [ 213.153475][ T6464] reiserfs: using flush barriers [ 213.159810][ T6464] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.176209][ T6464] REISERFS (device loop4): checking transaction log (loop4) [pid 6464] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6464] chdir("./file0") = 0 [pid 6464] ioctl(4, LOOP_CLR_FD) = 0 [pid 6464] close(4) = 0 [pid 6464] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] <... futex resumed>) = 1 [ 213.218209][ T6464] REISERFS (device loop4): Using r5 hash to sort names [ 213.225176][ T6464] REISERFS (device loop4): using 3.5.x disk format [ 213.232107][ T6464] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6464] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6464] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6464] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] <... futex resumed>) = 0 [pid 6463] <... futex resumed>) = 1 [pid 6464] openat(-1, "/proc/self/exe", O_RDONLY [pid 6463] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] <... openat resumed>) = 5 [pid 6464] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6463] <... futex resumed>) = 0 [pid 6464] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6463] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6463] <... futex resumed>) = 0 [pid 6464] sendfile(4, 5, NULL, 140737974943952 [ 213.249812][ T27] audit: type=1800 audit(1671282436.653:811): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6463] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6463] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6463] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6463] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6466 attached , parent_tid=[6466], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6466 [pid 6466] set_robust_list(0x7fe8f42d09e0, 24 [pid 6463] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6466] <... set_robust_list resumed>) = 0 [pid 6466] open("./bus", O_RDONLY [pid 6463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6463] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6463] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6463] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6467 attached [pid 6467] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6467] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6463] <... clone resumed>, parent_tid=[6467], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6467 [pid 6463] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6467] <... futex resumed>) = 0 [pid 6467] truncate("./bus", 6 [pid 6463] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6463] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6463] exit_group(0) = ? [pid 6466] <... open resumed>) = ? [pid 6464] <... sendfile resumed>) = ? [pid 6466] +++ exited with 0 +++ [pid 6464] +++ exited with 0 +++ [pid 6467] <... truncate resumed>) = ? [pid 6467] +++ exited with 0 +++ [pid 6463] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6463, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./240", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./240/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./240/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./240/binderfs") = 0 [pid 5073] umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./240/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 213.628488][ T27] audit: type=1804 audit(1671282437.033:812): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/240/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 213.652119][ T27] audit: type=1800 audit(1671282437.033:813): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./240/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./240") = 0 [pid 5073] mkdir("./241", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6468 ./strace-static-x86_64: Process 6468 attached [pid 6468] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6468] chdir("./241") = 0 [pid 6468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6468] setpgid(0, 0) = 0 [pid 6468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6468] write(3, "1000", 4) = 4 [pid 6468] close(3) = 0 [pid 6468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6468] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6468] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6468] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6469], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6469 [pid 6468] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6468] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6469 attached [pid 6469] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6469] memfd_create("syzkaller", 0) = 3 [pid 6469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6469] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6469] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6469] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6469] close(3) = 0 [pid 6469] mkdir("./file0", 0777) = 0 [ 213.789097][ T6469] loop4: detected capacity change from 0 to 8192 [ 213.799844][ T6469] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 213.813007][ T6469] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 213.822576][ T6469] REISERFS (device loop4): using ordered data mode [ 213.829452][ T6469] reiserfs: using flush barriers [ 213.835163][ T6469] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.851634][ T6469] REISERFS (device loop4): checking transaction log (loop4) [pid 6469] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6469] chdir("./file0") = 0 [pid 6469] ioctl(4, LOOP_CLR_FD) = 0 [pid 6469] close(4) = 0 [pid 6469] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6468] <... futex resumed>) = 0 [pid 6469] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6468] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 1 [pid 6469] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6468] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] <... open resumed>) = 4 [pid 6469] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6468] <... futex resumed>) = 0 [pid 6469] openat(-1, "/proc/self/exe", O_RDONLY [pid 6468] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... openat resumed>) = 5 [pid 6468] <... futex resumed>) = 0 [pid 6469] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6469] sendfile(4, 5, NULL, 140737974943952 [pid 6468] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 213.893930][ T6469] REISERFS (device loop4): Using r5 hash to sort names [ 213.900962][ T6469] REISERFS (device loop4): using 3.5.x disk format [ 213.908000][ T6469] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6468] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6468] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 213.925961][ T27] audit: type=1800 audit(1671282437.333:814): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6468] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6468] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6471 attached , parent_tid=[6471], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6471 [pid 6468] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6471] open("./bus", O_RDONLY [pid 6468] <... futex resumed>) = 0 [pid 6468] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6468] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6468] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6468] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6472 attached [pid 6472] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6472] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6468] <... clone resumed>, parent_tid=[6472], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6472 [pid 6468] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... futex resumed>) = 0 [pid 6468] <... futex resumed>) = 1 [pid 6472] truncate("./bus", 6 [pid 6468] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6468] exit_group(0) = ? [pid 6469] <... sendfile resumed>) = ? [pid 6471] <... open resumed>) = ? [pid 6469] +++ exited with 0 +++ [pid 6472] <... truncate resumed>) = ? [pid 6471] +++ exited with 0 +++ [pid 6472] +++ exited with 0 +++ [pid 6468] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6468, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./241", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./241/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./241/binderfs") = 0 [pid 5073] umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./241/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./241/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./241") = 0 [pid 5073] mkdir("./242", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6473 attached [pid 6473] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6473 [pid 6473] <... set_robust_list resumed>) = 0 [pid 6473] chdir("./242") = 0 [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6473] setpgid(0, 0) = 0 [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6473] write(3, "1000", 4) = 4 [pid 6473] close(3) = 0 [pid 6473] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6473] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6473] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6473] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6474], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6474 [pid 6473] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6474 attached [pid 6474] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6474] memfd_create("syzkaller", 0) = 3 [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6474] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6474] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6474] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6474] close(3) = 0 [pid 6474] mkdir("./file0", 0777) = 0 [ 214.357828][ T6474] loop4: detected capacity change from 0 to 8192 [ 214.368453][ T6474] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.381700][ T6474] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 214.391254][ T6474] REISERFS (device loop4): using ordered data mode [ 214.398023][ T6474] reiserfs: using flush barriers [ 214.403748][ T6474] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.420392][ T6474] REISERFS (device loop4): checking transaction log (loop4) [pid 6474] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6474] chdir("./file0") = 0 [pid 6474] ioctl(4, LOOP_CLR_FD) = 0 [pid 6474] close(4) = 0 [pid 6474] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6474] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] <... futex resumed>) = 0 [pid 6473] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] <... futex resumed>) = 0 [pid 6474] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6474] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] <... futex resumed>) = 0 [pid 6473] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] <... futex resumed>) = 1 [pid 6474] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6474] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] <... futex resumed>) = 0 [pid 6473] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] <... futex resumed>) = 1 [ 214.462854][ T6474] REISERFS (device loop4): Using r5 hash to sort names [ 214.469877][ T6474] REISERFS (device loop4): using 3.5.x disk format [ 214.476718][ T6474] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6474] sendfile(4, 5, NULL, 140737974943952 [pid 6473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6473] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6473] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6473] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6476 attached [pid 6476] set_robust_list(0x7fe8f42d09e0, 24 [pid 6473] <... clone resumed>, parent_tid=[6476], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6476 [pid 6473] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] <... set_robust_list resumed>) = 0 [pid 6473] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] open("./bus", O_RDONLY [pid 6473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6473] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6473] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6473] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6477], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6477 [pid 6473] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6477 attached [pid 6477] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6477] truncate("./bus", 6 [pid 6473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6473] exit_group(0) = ? [pid 6474] <... sendfile resumed>) = ? [pid 6476] <... open resumed>) = ? [pid 6474] +++ exited with 0 +++ [pid 6477] <... truncate resumed>) = ? [pid 6476] +++ exited with 0 +++ [pid 6477] +++ exited with 0 +++ [pid 6473] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6473, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./242", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./242/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./242/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./242/binderfs") = 0 [pid 5073] umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./242/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./242/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./242") = 0 [pid 5073] mkdir("./243", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6478 ./strace-static-x86_64: Process 6478 attached [pid 6478] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6478] chdir("./243") = 0 [pid 6478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6478] setpgid(0, 0) = 0 [pid 6478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6478] write(3, "1000", 4) = 4 [pid 6478] close(3) = 0 [pid 6478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6478] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6478] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6478] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6479 attached , parent_tid=[6479], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6479 [pid 6479] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6479] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] <... futex resumed>) = 0 [pid 6478] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6479] memfd_create("syzkaller", 0) = 3 [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6479] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6479] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6479] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6479] close(3) = 0 [pid 6479] mkdir("./file0", 0777) = 0 [ 214.965715][ T6479] loop4: detected capacity change from 0 to 8192 [ 214.975916][ T6479] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.989037][ T6479] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 214.998346][ T6479] REISERFS (device loop4): using ordered data mode [ 215.004887][ T6479] reiserfs: using flush barriers [ 215.011189][ T6479] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.027775][ T6479] REISERFS (device loop4): checking transaction log (loop4) [pid 6479] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6479] chdir("./file0") = 0 [pid 6479] ioctl(4, LOOP_CLR_FD) = 0 [pid 6479] close(4) = 0 [pid 6479] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] <... futex resumed>) = 0 [pid 6478] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = 1 [pid 6479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6478] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... open resumed>) = 4 [pid 6479] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6478] <... futex resumed>) = 0 [pid 6479] openat(-1, "/proc/self/exe", O_RDONLY [pid 6478] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... openat resumed>) = 5 [pid 6478] <... futex resumed>) = 0 [pid 6479] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] <... futex resumed>) = 0 [pid 6478] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 215.069289][ T6479] REISERFS (device loop4): Using r5 hash to sort names [ 215.076296][ T6479] REISERFS (device loop4): using 3.5.x disk format [ 215.082964][ T6479] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6479] sendfile(4, 5, NULL, 140737974943952 [pid 6478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6478] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6478] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6478] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6481], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6481 [pid 6478] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6481 attached [pid 6481] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6481] open("./bus", O_RDONLY [pid 6478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6478] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6478] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6478] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6482 attached , parent_tid=[6482], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6482 [pid 6482] set_robust_list(0x7fe8f42af9e0, 24 [pid 6478] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... set_robust_list resumed>) = 0 [pid 6482] truncate("./bus", 6 [pid 6478] <... futex resumed>) = 0 [pid 6478] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6478] exit_group(0) = ? [pid 6481] <... open resumed>) = ? [pid 6479] <... sendfile resumed>) = ? [pid 6482] <... truncate resumed>) = ? [pid 6481] +++ exited with 0 +++ [pid 6479] +++ exited with 0 +++ [pid 6482] +++ exited with 0 +++ [pid 6478] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6478, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./243", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./243/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./243/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./243/binderfs") = 0 [pid 5073] umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./243/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./243/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./243") = 0 [pid 5073] mkdir("./244", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6483 ./strace-static-x86_64: Process 6483 attached [pid 6483] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6483] chdir("./244") = 0 [pid 6483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6483] setpgid(0, 0) = 0 [pid 6483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6483] write(3, "1000", 4) = 4 [pid 6483] close(3) = 0 [pid 6483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6483] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6483] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6483] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6484], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6484 [pid 6483] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6484 attached [pid 6484] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6484] memfd_create("syzkaller", 0) = 3 [pid 6484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6484] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6484] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6484] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6484] close(3) = 0 [pid 6484] mkdir("./file0", 0777) = 0 [ 215.565678][ T6484] loop4: detected capacity change from 0 to 8192 [ 215.576098][ T6484] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.589182][ T6484] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 215.598804][ T6484] REISERFS (device loop4): using ordered data mode [ 215.605345][ T6484] reiserfs: using flush barriers [ 215.611299][ T6484] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.627891][ T6484] REISERFS (device loop4): checking transaction log (loop4) [pid 6484] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6484] chdir("./file0") = 0 [pid 6484] ioctl(4, LOOP_CLR_FD) = 0 [pid 6484] close(4) = 0 [pid 6484] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6483] <... futex resumed>) = 0 [pid 6484] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6483] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6483] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6484] <... futex resumed>) = 0 [pid 6484] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6484] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6483] <... futex resumed>) = 0 [pid 6483] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6484] <... futex resumed>) = 1 [pid 6484] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6484] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6483] <... futex resumed>) = 0 [pid 6483] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 215.665537][ T6484] REISERFS (device loop4): Using r5 hash to sort names [ 215.672489][ T6484] REISERFS (device loop4): using 3.5.x disk format [ 215.679362][ T6484] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6484] sendfile(4, 5, NULL, 140737974943952 [pid 6483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6483] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6483] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6483] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6486 attached , parent_tid=[6486], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6486 [pid 6483] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6486] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6486] open("./bus", O_RDONLY [pid 6483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6483] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6483] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6483] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6487 attached [pid 6487] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6487] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6483] <... clone resumed>, parent_tid=[6487], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6487 [pid 6483] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6483] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6487] truncate("./bus", 6 [pid 6483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6483] exit_group(0) = ? [pid 6484] <... sendfile resumed>) = ? [pid 6486] <... open resumed>) = ? [pid 6484] +++ exited with 0 +++ [pid 6487] <... truncate resumed>) = ? [pid 6486] +++ exited with 0 +++ [pid 6487] +++ exited with 0 +++ [pid 6483] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6483, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./244", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./244/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./244/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./244/binderfs") = 0 [pid 5073] umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./244/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./244/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./244") = 0 [pid 5073] mkdir("./245", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6488 ./strace-static-x86_64: Process 6488 attached [pid 6488] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6488] chdir("./245") = 0 [pid 6488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6488] setpgid(0, 0) = 0 [pid 6488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6488] write(3, "1000", 4) = 4 [pid 6488] close(3) = 0 [pid 6488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6488] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6488] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6488] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6489], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6489 [pid 6488] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6489 attached [pid 6489] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6489] memfd_create("syzkaller", 0) = 3 [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6489] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6489] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6489] close(3) = 0 [pid 6489] mkdir("./file0", 0777) = 0 [ 216.145280][ T6489] loop4: detected capacity change from 0 to 8192 [ 216.155753][ T6489] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 216.168781][ T6489] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 216.178075][ T6489] REISERFS (device loop4): using ordered data mode [ 216.184712][ T6489] reiserfs: using flush barriers [ 216.190596][ T6489] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.207479][ T6489] REISERFS (device loop4): checking transaction log (loop4) [pid 6489] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6489] chdir("./file0") = 0 [pid 6489] ioctl(4, LOOP_CLR_FD) = 0 [pid 6489] close(4) = 0 [pid 6489] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6489] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6488] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6489] <... futex resumed>) = 0 [pid 6489] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6489] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6489] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6489] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6489] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] sendfile(4, 5, NULL, 140737974943952 [pid 6488] <... futex resumed>) = 0 [ 216.250475][ T6489] REISERFS (device loop4): Using r5 hash to sort names [ 216.258171][ T6489] REISERFS (device loop4): using 3.5.x disk format [ 216.265050][ T6489] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6488] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6488] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6488] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6488] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6491], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6491 [pid 6488] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6491 attached [pid 6488] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6491] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6491] open("./bus", O_RDONLY [pid 6488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6488] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6488] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6488] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6492], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6492 [pid 6488] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6492 attached [pid 6492] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6492] truncate("./bus", 6 [pid 6488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6488] exit_group(0) = ? [pid 6491] <... open resumed>) = ? [pid 6489] <... sendfile resumed>) = ? [pid 6492] <... truncate resumed>) = ? [pid 6491] +++ exited with 0 +++ [pid 6492] +++ exited with 0 +++ [pid 6489] +++ exited with 0 +++ [pid 6488] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6488, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./245", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./245/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./245/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./245/binderfs") = 0 [pid 5073] umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./245/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./245/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./245/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./245") = 0 [pid 5073] mkdir("./246", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6493 ./strace-static-x86_64: Process 6493 attached [pid 6493] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6493] chdir("./246") = 0 [pid 6493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6493] setpgid(0, 0) = 0 [pid 6493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6493] write(3, "1000", 4) = 4 [pid 6493] close(3) = 0 [pid 6493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6493] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6493] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6493] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6494], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6494 [pid 6493] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6494 attached [pid 6494] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6494] memfd_create("syzkaller", 0) = 3 [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6494] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6494] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6494] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6494] close(3) = 0 [pid 6494] mkdir("./file0", 0777) = 0 [ 216.761096][ T6494] loop4: detected capacity change from 0 to 8192 [ 216.771513][ T6494] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 216.784738][ T6494] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 216.794007][ T6494] REISERFS (device loop4): using ordered data mode [ 216.800629][ T6494] reiserfs: using flush barriers [ 216.807072][ T6494] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.823411][ T6494] REISERFS (device loop4): checking transaction log (loop4) [pid 6494] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6494] chdir("./file0") = 0 [pid 6494] ioctl(4, LOOP_CLR_FD) = 0 [pid 6494] close(4) = 0 [pid 6494] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6494] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6494] <... futex resumed>) = 0 [pid 6493] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6494] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 6493] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6494] <... futex resumed>) = 1 [pid 6493] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6494] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6493] <... futex resumed>) = 0 [pid 6494] sendfile(4, 5, NULL, 140737974943952 [pid 6493] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 216.865201][ T6494] REISERFS (device loop4): Using r5 hash to sort names [ 216.872288][ T6494] REISERFS (device loop4): using 3.5.x disk format [ 216.879234][ T6494] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6493] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6493] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6493] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6493] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6496], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6496 ./strace-static-x86_64: Process 6496 attached [pid 6493] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6496] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6496] open("./bus", O_RDONLY [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6493] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6493] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6493] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6493] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6497 attached , parent_tid=[6497], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6497 [pid 6493] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6493] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6497] truncate("./bus", 6 [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6493] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6493] exit_group(0) = ? [pid 6494] <... sendfile resumed>) = ? [pid 6496] <... open resumed>) = ? [pid 6494] +++ exited with 0 +++ [pid 6497] <... truncate resumed>) = ? [pid 6497] +++ exited with 0 +++ [pid 6496] +++ exited with 0 +++ [pid 6493] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6493, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./246", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./246/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./246/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./246/binderfs") = 0 [ 217.219276][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 217.219294][ T27] audit: type=1804 audit(1671282440.623:830): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/246/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 217.248728][ T27] audit: type=1800 audit(1671282440.623:831): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./246/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./246/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./246") = 0 [pid 5073] mkdir("./247", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6498 ./strace-static-x86_64: Process 6498 attached [pid 6498] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6498] chdir("./247") = 0 [pid 6498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6498] setpgid(0, 0) = 0 [pid 6498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6498] write(3, "1000", 4) = 4 [pid 6498] close(3) = 0 [pid 6498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6498] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6498] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6498] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6499], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6499 [pid 6498] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6499 attached [pid 6499] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6499] memfd_create("syzkaller", 0) = 3 [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6499] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6499] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6499] close(3) = 0 [pid 6499] mkdir("./file0", 0777) = 0 [ 217.377523][ T6499] loop4: detected capacity change from 0 to 8192 [ 217.387606][ T6499] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 217.400662][ T6499] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 217.409933][ T6499] REISERFS (device loop4): using ordered data mode [ 217.416524][ T6499] reiserfs: using flush barriers [ 217.422234][ T6499] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.438885][ T6499] REISERFS (device loop4): checking transaction log (loop4) [pid 6499] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6499] chdir("./file0") = 0 [pid 6499] ioctl(4, LOOP_CLR_FD) = 0 [pid 6499] close(4) = 0 [pid 6499] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... futex resumed>) = 1 [pid 6499] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6499] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... futex resumed>) = 1 [pid 6499] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6499] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... futex resumed>) = 1 [ 217.481722][ T6499] REISERFS (device loop4): Using r5 hash to sort names [ 217.489027][ T6499] REISERFS (device loop4): using 3.5.x disk format [ 217.495978][ T6499] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 217.510524][ T27] audit: type=1800 audit(1671282440.913:832): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6499] sendfile(4, 5, NULL, 140737974943952 [pid 6498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6498] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6498] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6498] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6501 attached , parent_tid=[6501], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6501 [pid 6498] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6501] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6501] open("./bus", O_RDONLY [pid 6498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6498] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6498] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6498] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6502 attached , parent_tid=[6502], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6502 [pid 6502] set_robust_list(0x7fe8f42af9e0, 24 [pid 6498] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] <... set_robust_list resumed>) = 0 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6502] truncate("./bus", 6 [pid 6498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6498] exit_group(0) = ? [pid 6499] <... sendfile resumed>) = ? [pid 6501] <... open resumed>) = ? [pid 6499] +++ exited with 0 +++ [pid 6502] <... truncate resumed>) = ? [pid 6502] +++ exited with 0 +++ [pid 6501] +++ exited with 0 +++ [pid 6498] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6498, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./247", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./247/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./247/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./247/binderfs") = 0 [pid 5073] umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 217.858352][ T27] audit: type=1804 audit(1671282441.263:833): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/247/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 217.881531][ T27] audit: type=1800 audit(1671282441.263:834): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./247/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./247/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./247") = 0 [pid 5073] mkdir("./248", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6503 ./strace-static-x86_64: Process 6503 attached [pid 6503] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6503] chdir("./248") = 0 [pid 6503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6503] setpgid(0, 0) = 0 [pid 6503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6503] write(3, "1000", 4) = 4 [pid 6503] close(3) = 0 [pid 6503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6503] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6503] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6503] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6504], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6504 ./strace-static-x86_64: Process 6504 attached [pid 6503] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6504] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6504] memfd_create("syzkaller", 0) = 3 [pid 6504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6504] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6504] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6504] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6504] close(3) = 0 [pid 6504] mkdir("./file0", 0777) = 0 [ 218.014478][ T6504] loop4: detected capacity change from 0 to 8192 [ 218.024427][ T6504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.037486][ T6504] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 218.046752][ T6504] REISERFS (device loop4): using ordered data mode [ 218.053374][ T6504] reiserfs: using flush barriers [ 218.059437][ T6504] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.075848][ T6504] REISERFS (device loop4): checking transaction log (loop4) [pid 6504] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6504] chdir("./file0") = 0 [pid 6504] ioctl(4, LOOP_CLR_FD) = 0 [pid 6504] close(4) = 0 [pid 6504] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6504] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6503] <... futex resumed>) = 0 [pid 6503] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] <... futex resumed>) = 0 [pid 6503] <... futex resumed>) = 1 [pid 6504] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6503] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] <... open resumed>) = 4 [pid 6504] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6503] <... futex resumed>) = 0 [pid 6504] openat(-1, "/proc/self/exe", O_RDONLY [pid 6503] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] <... openat resumed>) = 5 [pid 6503] <... futex resumed>) = 0 [pid 6504] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] <... futex resumed>) = 0 [pid 6503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] sendfile(4, 5, NULL, 140737974943952 [pid 6503] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 218.112916][ T6504] REISERFS (device loop4): Using r5 hash to sort names [ 218.120183][ T6504] REISERFS (device loop4): using 3.5.x disk format [ 218.127322][ T6504] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 218.146741][ T27] audit: type=1800 audit(1671282441.553:835): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6503] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6503] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6503] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6503] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6506], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6506 [pid 6503] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6506 attached [pid 6506] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6506] open("./bus", O_RDONLY [pid 6503] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6503] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6503] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6503] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6507 attached [pid 6507] set_robust_list(0x7fe8f42af9e0, 24 [pid 6503] <... clone resumed>, parent_tid=[6507], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6507 [pid 6503] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6507] <... set_robust_list resumed>) = 0 [pid 6507] truncate("./bus", 6 [pid 6503] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6503] exit_group(0) = ? [pid 6504] <... sendfile resumed>) = ? [pid 6506] <... open resumed>) = ? [pid 6504] +++ exited with 0 +++ [pid 6507] <... truncate resumed>) = ? [pid 6506] +++ exited with 0 +++ [pid 6507] +++ exited with 0 +++ [pid 6503] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6503, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./248", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./248/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./248/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./248/binderfs") = 0 [pid 5073] umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./248/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 218.469244][ T27] audit: type=1804 audit(1671282441.873:836): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/248/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 218.492575][ T27] audit: type=1800 audit(1671282441.873:837): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./248/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./248") = 0 [pid 5073] mkdir("./249", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6508 ./strace-static-x86_64: Process 6508 attached [pid 6508] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6508] chdir("./249") = 0 [pid 6508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6508] setpgid(0, 0) = 0 [pid 6508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6508] write(3, "1000", 4) = 4 [pid 6508] close(3) = 0 [pid 6508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6508] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6508] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6508] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6509], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6509 ./strace-static-x86_64: Process 6509 attached [pid 6508] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6509] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6509] memfd_create("syzkaller", 0) = 3 [pid 6509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6509] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6509] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6509] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6509] close(3) = 0 [pid 6509] mkdir("./file0", 0777) = 0 [ 218.624803][ T6509] loop4: detected capacity change from 0 to 8192 [ 218.634561][ T6509] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.648065][ T6509] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 218.657712][ T6509] REISERFS (device loop4): using ordered data mode [ 218.664207][ T6509] reiserfs: using flush barriers [ 218.670296][ T6509] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.686558][ T6509] REISERFS (device loop4): checking transaction log (loop4) [pid 6509] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6509] chdir("./file0") = 0 [pid 6509] ioctl(4, LOOP_CLR_FD) = 0 [pid 6509] close(4) = 0 [pid 6509] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [ 218.729424][ T6509] REISERFS (device loop4): Using r5 hash to sort names [ 218.736510][ T6509] REISERFS (device loop4): using 3.5.x disk format [ 218.743443][ T6509] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6509] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6509] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = 0 [pid 6508] <... futex resumed>) = 1 [pid 6509] openat(-1, "/proc/self/exe", O_RDONLY [pid 6508] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6509] <... openat resumed>) = 5 [pid 6509] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6508] <... futex resumed>) = 0 [pid 6509] sendfile(4, 5, NULL, 140737974943952 [pid 6508] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 218.773228][ T27] audit: type=1800 audit(1671282442.173:838): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6508] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6508] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6508] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6508] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6511 attached [pid 6511] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6511] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6508] <... clone resumed>, parent_tid=[6511], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6511 [pid 6508] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] <... futex resumed>) = 0 [pid 6508] <... futex resumed>) = 1 [pid 6511] open("./bus", O_RDONLY [pid 6508] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6508] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6508] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6508] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6512], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6512 [pid 6508] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6512 attached [pid 6512] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6512] truncate("./bus", 6 [pid 6508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6508] exit_group(0) = ? [pid 6509] <... sendfile resumed>) = ? [pid 6512] <... truncate resumed>) = ? [pid 6511] <... open resumed>) = ? [pid 6512] +++ exited with 0 +++ [pid 6509] +++ exited with 0 +++ [pid 6511] +++ exited with 0 +++ [pid 6508] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6508, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./249", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./249/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./249/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./249/binderfs") = 0 [ 219.138908][ T27] audit: type=1804 audit(1671282442.543:839): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/249/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./249/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./249/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./249") = 0 [pid 5073] mkdir("./250", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6513 ./strace-static-x86_64: Process 6513 attached [pid 6513] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6513] chdir("./250") = 0 [pid 6513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6513] setpgid(0, 0) = 0 [pid 6513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6513] write(3, "1000", 4) = 4 [pid 6513] close(3) = 0 [pid 6513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6513] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6513] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6513] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6514], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6514 ./strace-static-x86_64: Process 6514 attached [pid 6513] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6514] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6514] memfd_create("syzkaller", 0) = 3 [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6514] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6514] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6514] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6514] close(3) = 0 [pid 6514] mkdir("./file0", 0777) = 0 [ 219.281453][ T6514] loop4: detected capacity change from 0 to 8192 [ 219.291902][ T6514] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.305011][ T6514] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 219.314346][ T6514] REISERFS (device loop4): using ordered data mode [ 219.320969][ T6514] reiserfs: using flush barriers [ 219.326931][ T6514] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.343651][ T6514] REISERFS (device loop4): checking transaction log (loop4) [pid 6514] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6514] chdir("./file0") = 0 [pid 6514] ioctl(4, LOOP_CLR_FD) = 0 [pid 6514] close(4) = 0 [pid 6514] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6513] <... futex resumed>) = 0 [pid 6514] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6513] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6513] <... futex resumed>) = 0 [pid 6514] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6513] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6514] <... open resumed>) = 4 [pid 6514] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6513] <... futex resumed>) = 0 [pid 6514] openat(-1, "/proc/self/exe", O_RDONLY [pid 6513] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... openat resumed>) = 5 [pid 6513] <... futex resumed>) = 0 [pid 6513] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6514] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6513] <... futex resumed>) = 0 [pid 6514] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6513] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... futex resumed>) = 0 [pid 6513] <... futex resumed>) = 1 [pid 6514] sendfile(4, 5, NULL, 140737974943952 [ 219.385909][ T6514] REISERFS (device loop4): Using r5 hash to sort names [ 219.392793][ T6514] REISERFS (device loop4): using 3.5.x disk format [ 219.399622][ T6514] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6513] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6513] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6513] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6513] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6516 attached , parent_tid=[6516], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6516 [pid 6513] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6516] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6516] open("./bus", O_RDONLY [pid 6513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6513] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6513] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6513] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6518], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6518 [pid 6513] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6518 attached [pid 6518] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6518] truncate("./bus", 6 [pid 6513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6513] exit_group(0) = ? [pid 6514] <... sendfile resumed>) = ? [pid 6516] <... open resumed>) = ? [pid 6514] +++ exited with 0 +++ [pid 6518] <... truncate resumed>) = ? [pid 6516] +++ exited with 0 +++ [pid 6518] +++ exited with 0 +++ [pid 6513] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6513, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./250", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./250/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./250/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./250/binderfs") = 0 [pid 5073] umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./250/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./250/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./250") = 0 [pid 5073] mkdir("./251", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6520 ./strace-static-x86_64: Process 6520 attached [pid 6520] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6520] chdir("./251") = 0 [pid 6520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6520] setpgid(0, 0) = 0 [pid 6520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6520] write(3, "1000", 4) = 4 [pid 6520] close(3) = 0 [pid 6520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6520] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6520] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6520] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6521], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6521 [pid 6520] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6521 attached [pid 6521] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6521] memfd_create("syzkaller", 0) = 3 [pid 6521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6521] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6521] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6521] close(3) = 0 [pid 6521] mkdir("./file0", 0777) = 0 [ 219.886025][ T6521] loop4: detected capacity change from 0 to 8192 [ 219.896621][ T6521] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.909996][ T6521] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 219.919394][ T6521] REISERFS (device loop4): using ordered data mode [ 219.925990][ T6521] reiserfs: using flush barriers [ 219.931674][ T6521] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.948163][ T6521] REISERFS (device loop4): checking transaction log (loop4) [pid 6521] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6521] chdir("./file0") = 0 [pid 6521] ioctl(4, LOOP_CLR_FD) = 0 [pid 6521] close(4) = 0 [pid 6521] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6521] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] <... futex resumed>) = 0 [pid 6520] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = 0 [pid 6520] <... futex resumed>) = 1 [pid 6521] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6520] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... open resumed>) = 4 [pid 6521] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6520] <... futex resumed>) = 0 [pid 6521] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6520] <... futex resumed>) = 0 [pid 6521] openat(-1, "/proc/self/exe", O_RDONLY [pid 6520] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] <... openat resumed>) = 5 [pid 6521] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6520] <... futex resumed>) = 0 [pid 6521] sendfile(4, 5, NULL, 140737974943952 [pid 6520] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 219.991347][ T6521] REISERFS (device loop4): Using r5 hash to sort names [ 219.998509][ T6521] REISERFS (device loop4): using 3.5.x disk format [ 220.005212][ T6521] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6520] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6520] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6520] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6520] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6523 attached , parent_tid=[6523], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6523 [pid 6523] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6523] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6520] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6523] <... futex resumed>) = 0 [pid 6523] open("./bus", O_RDONLY [pid 6520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6520] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6520] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6520] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6524 attached [pid 6524] set_robust_list(0x7fe8f42af9e0, 24 [pid 6520] <... clone resumed>, parent_tid=[6524], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6524 [pid 6520] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... set_robust_list resumed>) = 0 [pid 6520] <... futex resumed>) = 0 [pid 6520] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6524] truncate("./bus", 6 [pid 6520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6520] exit_group(0) = ? [pid 6523] <... open resumed>) = ? [pid 6521] <... sendfile resumed>) = ? [pid 6524] <... truncate resumed>) = ? [pid 6523] +++ exited with 0 +++ [pid 6524] +++ exited with 0 +++ [pid 6521] +++ exited with 0 +++ [pid 6520] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6520, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./251", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./251/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./251/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./251/binderfs") = 0 [pid 5073] umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./251/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./251/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./251") = 0 [pid 5073] mkdir("./252", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6525 ./strace-static-x86_64: Process 6525 attached [pid 6525] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6525] chdir("./252") = 0 [pid 6525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6525] setpgid(0, 0) = 0 [pid 6525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6525] write(3, "1000", 4) = 4 [pid 6525] close(3) = 0 [pid 6525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6525] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6525] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6525] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6526], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6526 [pid 6525] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6526 attached [pid 6526] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6526] memfd_create("syzkaller", 0) = 3 [pid 6526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6526] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6526] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6526] close(3) = 0 [pid 6526] mkdir("./file0", 0777) = 0 [ 220.488750][ T6526] loop4: detected capacity change from 0 to 8192 [ 220.498797][ T6526] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.511980][ T6526] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 220.521378][ T6526] REISERFS (device loop4): using ordered data mode [ 220.528084][ T6526] reiserfs: using flush barriers [ 220.533869][ T6526] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.550344][ T6526] REISERFS (device loop4): checking transaction log (loop4) [pid 6526] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6526] chdir("./file0") = 0 [pid 6526] ioctl(4, LOOP_CLR_FD) = 0 [pid 6526] close(4) = 0 [pid 6526] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... futex resumed>) = 0 [pid 6525] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] <... futex resumed>) = 1 [pid 6526] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6526] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6525] <... futex resumed>) = 0 [pid 6525] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6526] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6525] <... futex resumed>) = 0 [pid 6525] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 220.591698][ T6526] REISERFS (device loop4): Using r5 hash to sort names [ 220.598643][ T6526] REISERFS (device loop4): using 3.5.x disk format [ 220.605352][ T6526] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6526] sendfile(4, 5, NULL, 140737974943952 [pid 6525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6525] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6525] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6525] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6528 attached [pid 6528] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6525] <... clone resumed>, parent_tid=[6528], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6528 [pid 6528] open("./bus", O_RDONLY [pid 6525] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6525] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6525] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6525] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6529 attached , parent_tid=[6529], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6529 [pid 6525] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6529] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6529] truncate("./bus", 6 [pid 6525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6525] exit_group(0) = ? [pid 6526] <... sendfile resumed>) = ? [pid 6528] <... open resumed>) = ? [pid 6526] +++ exited with 0 +++ [pid 6528] +++ exited with 0 +++ [pid 6529] <... truncate resumed>) = ? [pid 6529] +++ exited with 0 +++ [pid 6525] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6525, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./252", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./252/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./252/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./252/binderfs") = 0 [pid 5073] umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./252/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./252/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./252") = 0 [pid 5073] mkdir("./253", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6530 ./strace-static-x86_64: Process 6530 attached [pid 6530] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6530] chdir("./253") = 0 [pid 6530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6530] setpgid(0, 0) = 0 [pid 6530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6530] write(3, "1000", 4) = 4 [pid 6530] close(3) = 0 [pid 6530] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6530] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6530] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6530] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6531 attached [pid 6531] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6530] <... clone resumed>, parent_tid=[6531], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6531 [pid 6531] <... set_robust_list resumed>) = 0 [pid 6530] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6531] memfd_create("syzkaller", 0) = 3 [pid 6531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6531] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6531] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6531] close(3) = 0 [pid 6531] mkdir("./file0", 0777) = 0 [ 221.094221][ T6531] loop4: detected capacity change from 0 to 8192 [ 221.103824][ T6531] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.116874][ T6531] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 221.126085][ T6531] REISERFS (device loop4): using ordered data mode [ 221.132602][ T6531] reiserfs: using flush barriers [ 221.138656][ T6531] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.155787][ T6531] REISERFS (device loop4): checking transaction log (loop4) [pid 6531] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6531] chdir("./file0") = 0 [pid 6531] ioctl(4, LOOP_CLR_FD) = 0 [pid 6531] close(4) = 0 [pid 6531] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6530] <... futex resumed>) = 0 [pid 6531] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6530] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6530] <... futex resumed>) = 0 [pid 6531] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6530] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6531] <... open resumed>) = 4 [pid 6531] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6530] <... futex resumed>) = 0 [pid 6531] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6530] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... futex resumed>) = 0 [pid 6530] <... futex resumed>) = 1 [pid 6531] openat(-1, "/proc/self/exe", O_RDONLY [pid 6530] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6531] <... openat resumed>) = 5 [pid 6531] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6530] <... futex resumed>) = 0 [pid 6531] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6530] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6530] <... futex resumed>) = 0 [pid 6531] sendfile(4, 5, NULL, 140737974943952 [ 221.205597][ T6531] REISERFS (device loop4): Using r5 hash to sort names [ 221.212521][ T6531] REISERFS (device loop4): using 3.5.x disk format [ 221.219593][ T6531] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6530] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6530] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6530] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6530] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6534], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6534 [pid 6530] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6534 attached [pid 6534] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6534] open("./bus", O_RDONLY [pid 6530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6530] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6530] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6530] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6536 attached , parent_tid=[6536], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6536 [pid 6536] set_robust_list(0x7fe8f42af9e0, 24 [pid 6530] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... set_robust_list resumed>) = 0 [pid 6530] <... futex resumed>) = 0 [pid 6530] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6536] truncate("./bus", 6 [pid 6530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6530] exit_group(0) = ? [pid 6531] <... sendfile resumed>) = ? [pid 6534] <... open resumed>) = ? [pid 6531] +++ exited with 0 +++ [pid 6536] <... truncate resumed>) = ? [pid 6534] +++ exited with 0 +++ [pid 6536] +++ exited with 0 +++ [pid 6530] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6530, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./253", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./253/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./253/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./253/binderfs") = 0 [pid 5073] umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./253/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./253/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./253") = 0 [pid 5073] mkdir("./254", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6537 attached [pid 6537] set_robust_list(0x5555558b65e0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 6537 [pid 6537] <... set_robust_list resumed>) = 0 [pid 6537] chdir("./254") = 0 [pid 6537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6537] setpgid(0, 0) = 0 [pid 6537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6537] write(3, "1000", 4) = 4 [pid 6537] close(3) = 0 [pid 6537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6537] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6537] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6537] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6538], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6538 [pid 6537] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6538 attached [pid 6538] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6538] memfd_create("syzkaller", 0) = 3 [pid 6538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6538] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6538] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6538] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6538] close(3) = 0 [pid 6538] mkdir("./file0", 0777) = 0 [ 221.704367][ T6538] loop4: detected capacity change from 0 to 8192 [ 221.714797][ T6538] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.728131][ T6538] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 221.737371][ T6538] REISERFS (device loop4): using ordered data mode [ 221.743886][ T6538] reiserfs: using flush barriers [ 221.749829][ T6538] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.766330][ T6538] REISERFS (device loop4): checking transaction log (loop4) [pid 6538] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6538] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6538] chdir("./file0") = 0 [pid 6538] ioctl(4, LOOP_CLR_FD) = 0 [pid 6538] close(4) = 0 [pid 6538] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6537] <... futex resumed>) = 0 [pid 6538] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6537] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 0 [pid 6538] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6538] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... futex resumed>) = 0 [pid 6537] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6538] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6538] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] <... futex resumed>) = 0 [pid 6537] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = 0 [pid 6537] <... futex resumed>) = 1 [pid 6538] sendfile(4, 5, NULL, 140737974943952 [ 221.803977][ T6538] REISERFS (device loop4): Using r5 hash to sort names [ 221.811043][ T6538] REISERFS (device loop4): using 3.5.x disk format [ 221.817813][ T6538] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6537] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6537] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6537] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6537] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6537] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6540], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6540 [pid 6537] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6540 attached [pid 6540] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6540] open("./bus", O_RDONLY [pid 6537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6537] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6537] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6537] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6541], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6541 ./strace-static-x86_64: Process 6541 attached [pid 6537] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6541] truncate("./bus", 6 [pid 6537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6537] exit_group(0) = ? [pid 6538] <... sendfile resumed>) = ? [pid 6541] <... truncate resumed>) = ? [pid 6540] <... open resumed>) = ? [pid 6538] +++ exited with 0 +++ [pid 6541] +++ exited with 0 +++ [pid 6540] +++ exited with 0 +++ [pid 6537] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6537, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./254", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./254/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./254/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./254/binderfs") = 0 [pid 5073] umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./254/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./254/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./254") = 0 [pid 5073] mkdir("./255", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6542 ./strace-static-x86_64: Process 6542 attached [pid 6542] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6542] chdir("./255") = 0 [pid 6542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6542] setpgid(0, 0) = 0 [pid 6542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6542] write(3, "1000", 4) = 4 [pid 6542] close(3) = 0 [pid 6542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6542] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6542] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6542] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6543], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6543 [pid 6542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6543 attached [pid 6543] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6543] memfd_create("syzkaller", 0) = 3 [pid 6543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6543] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6543] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6543] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6543] close(3) = 0 [pid 6543] mkdir("./file0", 0777) = 0 [ 222.292276][ T6543] loop4: detected capacity change from 0 to 8192 [ 222.301941][ T6543] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.315332][ T6543] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 222.324853][ T6543] REISERFS (device loop4): using ordered data mode [ 222.331506][ T6543] reiserfs: using flush barriers [ 222.337770][ T6543] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.354086][ T6543] REISERFS (device loop4): checking transaction log (loop4) [pid 6543] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6543] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6543] chdir("./file0") = 0 [pid 6543] ioctl(4, LOOP_CLR_FD) = 0 [pid 6543] close(4) = 0 [pid 6543] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6543] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] <... futex resumed>) = 0 [pid 6542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6543] <... futex resumed>) = 0 [pid 6543] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6543] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6543] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6542] <... futex resumed>) = 0 [pid 6543] openat(-1, "/proc/self/exe", O_RDONLY [pid 6542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6543] <... openat resumed>) = 5 [pid 6543] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6543] sendfile(4, 5, NULL, 140737974943952 [pid 6542] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 222.395911][ T6543] REISERFS (device loop4): Using r5 hash to sort names [ 222.402892][ T6543] REISERFS (device loop4): using 3.5.x disk format [ 222.409924][ T6543] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 222.427630][ T27] kauditd_printk_skb: 16 callbacks suppressed [pid 6542] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6542] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6542] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6542] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6545], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6545 [pid 6542] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6545 attached [pid 6545] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 222.427646][ T27] audit: type=1800 audit(1671282445.833:856): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6545] open("./bus", O_RDONLY [pid 6542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6542] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6542] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6542] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6542] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6546 attached , parent_tid=[6546], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6546 [pid 6542] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6546] truncate("./bus", 6 [pid 6542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6542] exit_group(0) = ? [pid 6543] <... sendfile resumed>) = ? [pid 6546] <... truncate resumed>) = ? [pid 6545] <... open resumed>) = ? [pid 6546] +++ exited with 0 +++ [pid 6543] +++ exited with 0 +++ [pid 6545] +++ exited with 0 +++ [pid 6542] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6542, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./255", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./255/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./255/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./255/binderfs") = 0 [pid 5073] umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./255/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 222.808646][ T27] audit: type=1804 audit(1671282446.213:857): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/255/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 222.831806][ T27] audit: type=1800 audit(1671282446.213:858): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./255/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./255") = 0 [pid 5073] mkdir("./256", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6547 ./strace-static-x86_64: Process 6547 attached [pid 6547] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6547] chdir("./256") = 0 [pid 6547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6547] setpgid(0, 0) = 0 [pid 6547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6547] write(3, "1000", 4) = 4 [pid 6547] close(3) = 0 [pid 6547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6547] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6547] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6547] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6548], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6548 [pid 6547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6548 attached [pid 6548] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6548] memfd_create("syzkaller", 0) = 3 [pid 6548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6548] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6548] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6548] close(3) = 0 [pid 6548] mkdir("./file0", 0777) = 0 [ 222.956093][ T6548] loop4: detected capacity change from 0 to 8192 [ 222.965603][ T6548] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.978791][ T6548] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 222.988091][ T6548] REISERFS (device loop4): using ordered data mode [ 222.994636][ T6548] reiserfs: using flush barriers [ 223.000837][ T6548] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.017276][ T6548] REISERFS (device loop4): checking transaction log (loop4) [pid 6548] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6548] chdir("./file0") = 0 [pid 6548] ioctl(4, LOOP_CLR_FD) = 0 [pid 6548] close(4) = 0 [pid 6548] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [pid 6548] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6548] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [pid 6548] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6548] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6547] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] <... futex resumed>) = 1 [ 223.060188][ T6548] REISERFS (device loop4): Using r5 hash to sort names [ 223.067189][ T6548] REISERFS (device loop4): using 3.5.x disk format [ 223.073963][ T6548] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6548] sendfile(4, 5, NULL, 140737974943952 [pid 6547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6547] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6547] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6551 attached , parent_tid=[6551], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6551 [pid 6551] set_robust_list(0x7fe8f42d09e0, 24 [pid 6547] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... set_robust_list resumed>) = 0 [pid 6551] open("./bus", O_RDONLY [pid 6547] <... futex resumed>) = 0 [ 223.090804][ T27] audit: type=1800 audit(1671282446.493:859): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6547] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6547] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6547] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6547] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6552 attached , parent_tid=[6552], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6552 [pid 6552] set_robust_list(0x7fe8f42af9e0, 24 [pid 6547] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6552] <... set_robust_list resumed>) = 0 [pid 6547] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6552] truncate("./bus", 6 [pid 6547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] exit_group(0) = ? [pid 6548] <... sendfile resumed>) = ? [pid 6551] <... open resumed>) = ? [pid 6548] +++ exited with 0 +++ [pid 6552] <... truncate resumed>) = ? [pid 6552] +++ exited with 0 +++ [pid 6551] +++ exited with 0 +++ [pid 6547] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6547, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./256", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./256/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./256/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./256/binderfs") = 0 [pid 5073] umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 223.449002][ T27] audit: type=1804 audit(1671282446.853:860): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/256/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 223.472430][ T27] audit: type=1800 audit(1671282446.853:861): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./256/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./256/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./256") = 0 [pid 5073] mkdir("./257", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6553 ./strace-static-x86_64: Process 6553 attached [pid 6553] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6553] chdir("./257") = 0 [pid 6553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6553] setpgid(0, 0) = 0 [pid 6553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6553] write(3, "1000", 4) = 4 [pid 6553] close(3) = 0 [pid 6553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6553] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6553] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6553] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6554], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6554 [pid 6553] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6554 attached [pid 6554] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6554] memfd_create("syzkaller", 0) = 3 [pid 6554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6554] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6554] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6554] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6554] close(3) = 0 [pid 6554] mkdir("./file0", 0777) = 0 [ 223.608903][ T6554] loop4: detected capacity change from 0 to 8192 [ 223.622988][ T6554] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 223.636547][ T6554] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 223.646091][ T6554] REISERFS (device loop4): using ordered data mode [ 223.652592][ T6554] reiserfs: using flush barriers [ 223.658407][ T6554] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.675268][ T6554] REISERFS (device loop4): checking transaction log (loop4) [pid 6554] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6554] chdir("./file0") = 0 [pid 6554] ioctl(4, LOOP_CLR_FD) = 0 [pid 6554] close(4) = 0 [pid 6554] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6554] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] <... futex resumed>) = 0 [pid 6553] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 0 [pid 6553] <... futex resumed>) = 1 [pid 6554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6553] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... open resumed>) = 4 [pid 6554] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6553] <... futex resumed>) = 0 [pid 6554] openat(-1, "/proc/self/exe", O_RDONLY [pid 6553] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... openat resumed>) = 5 [pid 6553] <... futex resumed>) = 0 [pid 6554] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6553] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... futex resumed>) = 0 [pid 6553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6554] sendfile(4, 5, NULL, 140737974943952 [pid 6553] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 223.721571][ T6554] REISERFS (device loop4): Using r5 hash to sort names [ 223.728553][ T6554] REISERFS (device loop4): using 3.5.x disk format [ 223.735281][ T6554] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6553] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 223.754427][ T27] audit: type=1800 audit(1671282447.153:862): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6553] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6553] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6553] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6557], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6557 [pid 6553] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6557 attached ) = 0 [pid 6557] set_robust_list(0x7fe8f42d09e0, 24 [pid 6553] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6557] <... set_robust_list resumed>) = 0 [pid 6557] open("./bus", O_RDONLY [pid 6553] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6553] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6553] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6553] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6558 attached [pid 6558] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6558] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] <... clone resumed>, parent_tid=[6558], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6558 [pid 6553] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6558] <... futex resumed>) = 0 [pid 6558] truncate("./bus", 6 [pid 6553] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6553] exit_group(0) = ? [pid 6554] <... sendfile resumed>) = ? [pid 6554] +++ exited with 0 +++ [pid 6557] <... open resumed>) = ? [pid 6557] +++ exited with 0 +++ [pid 6558] <... truncate resumed>) = ? [pid 6558] +++ exited with 0 +++ [pid 6553] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6553, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./257", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./257/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./257/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./257/binderfs") = 0 [pid 5073] umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./257/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 224.078261][ T27] audit: type=1804 audit(1671282447.483:863): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/257/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 224.102903][ T27] audit: type=1800 audit(1671282447.483:864): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./257/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./257") = 0 [pid 5073] mkdir("./258", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6559 ./strace-static-x86_64: Process 6559 attached [pid 6559] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6559] chdir("./258") = 0 [pid 6559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6559] setpgid(0, 0) = 0 [pid 6559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6559] write(3, "1000", 4) = 4 [pid 6559] close(3) = 0 [pid 6559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6559] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6559] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6559] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6560 attached [pid 6560] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6559] <... clone resumed>, parent_tid=[6560], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6560 [pid 6560] <... set_robust_list resumed>) = 0 [pid 6559] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6560] memfd_create("syzkaller", 0) = 3 [pid 6560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6560] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6560] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6560] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6560] close(3) = 0 [pid 6560] mkdir("./file0", 0777) = 0 [ 224.240532][ T6560] loop4: detected capacity change from 0 to 8192 [ 224.250216][ T6560] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.263264][ T6560] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 224.272551][ T6560] REISERFS (device loop4): using ordered data mode [ 224.279130][ T6560] reiserfs: using flush barriers [ 224.285091][ T6560] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.301776][ T6560] REISERFS (device loop4): checking transaction log (loop4) [pid 6560] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6560] chdir("./file0") = 0 [pid 6560] ioctl(4, LOOP_CLR_FD) = 0 [pid 6560] close(4) = 0 [pid 6560] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... futex resumed>) = 0 [pid 6559] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... futex resumed>) = 1 [pid 6560] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6560] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... futex resumed>) = 0 [pid 6559] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... futex resumed>) = 1 [pid 6560] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6560] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... futex resumed>) = 0 [pid 6559] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... futex resumed>) = 1 [ 224.338989][ T6560] REISERFS (device loop4): Using r5 hash to sort names [ 224.346200][ T6560] REISERFS (device loop4): using 3.5.x disk format [ 224.353012][ T6560] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6560] sendfile(4, 5, NULL, 140737974943952 [pid 6559] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6559] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6559] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6559] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6562 attached , parent_tid=[6562], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6562 [pid 6562] set_robust_list(0x7fe8f42d09e0, 24 [pid 6559] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6562] <... set_robust_list resumed>) = 0 [pid 6559] <... futex resumed>) = 0 [pid 6562] open("./bus", O_RDONLY [ 224.370543][ T27] audit: type=1800 audit(1671282447.773:865): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6559] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6559] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6559] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6559] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6559] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6563 attached , parent_tid=[6563], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6563 [pid 6559] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6559] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6563] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6563] truncate("./bus", 6 [pid 6559] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6559] exit_group(0) = ? [pid 6560] <... sendfile resumed>) = ? [pid 6563] <... truncate resumed>) = ? [pid 6562] <... open resumed>) = ? [pid 6560] +++ exited with 0 +++ [pid 6563] +++ exited with 0 +++ [pid 6562] +++ exited with 0 +++ [pid 6559] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6559, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./258", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./258/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./258/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./258/binderfs") = 0 [pid 5073] umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./258/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./258/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./258") = 0 [pid 5073] mkdir("./259", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6564 ./strace-static-x86_64: Process 6564 attached [pid 6564] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6564] chdir("./259") = 0 [pid 6564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6564] setpgid(0, 0) = 0 [pid 6564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6564] write(3, "1000", 4) = 4 [pid 6564] close(3) = 0 [pid 6564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6564] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6564] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6564] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6565], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6565 [pid 6564] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6565 attached [pid 6565] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6565] memfd_create("syzkaller", 0) = 3 [pid 6565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6565] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6565] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6565] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6565] close(3) = 0 [pid 6565] mkdir("./file0", 0777) = 0 [ 224.821558][ T6565] loop4: detected capacity change from 0 to 8192 [ 224.841854][ T6565] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.855090][ T6565] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 224.864362][ T6565] REISERFS (device loop4): using ordered data mode [ 224.871248][ T6565] reiserfs: using flush barriers [ 224.877190][ T6565] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.893478][ T6565] REISERFS (device loop4): checking transaction log (loop4) [pid 6565] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6565] chdir("./file0") = 0 [pid 6565] ioctl(4, LOOP_CLR_FD) = 0 [pid 6565] close(4) = 0 [pid 6565] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6564] <... futex resumed>) = 0 [pid 6565] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6564] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6564] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] <... futex resumed>) = 0 [pid 6565] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6565] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... futex resumed>) = 0 [pid 6564] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] <... futex resumed>) = 1 [pid 6565] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6565] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6565] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6564] <... futex resumed>) = 0 [pid 6564] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6564] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 224.934744][ T6565] REISERFS (device loop4): Using r5 hash to sort names [ 224.941901][ T6565] REISERFS (device loop4): using 3.5.x disk format [ 224.949121][ T6565] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6565] sendfile(4, 5, NULL, 140737974943952 [pid 6564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6564] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6564] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6564] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6567 attached , parent_tid=[6567], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6567 [pid 6564] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6567] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6567] open("./bus", O_RDONLY [pid 6564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6564] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6564] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6564] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6568 attached , parent_tid=[6568], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6568 [pid 6564] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6568] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6568] truncate("./bus", 6 [pid 6564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6564] exit_group(0) = ? [pid 6565] <... sendfile resumed>) = ? [pid 6567] <... open resumed>) = ? [pid 6565] +++ exited with 0 +++ [pid 6568] <... truncate resumed>) = ? [pid 6567] +++ exited with 0 +++ [pid 6568] +++ exited with 0 +++ [pid 6564] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6564, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./259", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./259/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./259/binderfs") = 0 [pid 5073] umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./259/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./259/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./259") = 0 [pid 5073] mkdir("./260", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6569 ./strace-static-x86_64: Process 6569 attached [pid 6569] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6569] chdir("./260") = 0 [pid 6569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6569] setpgid(0, 0) = 0 [pid 6569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6569] write(3, "1000", 4) = 4 [pid 6569] close(3) = 0 [pid 6569] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6569] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6569] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6570], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6570 [pid 6569] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6570 attached [pid 6570] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6570] memfd_create("syzkaller", 0) = 3 [pid 6570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6570] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6570] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6570] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6570] close(3) = 0 [pid 6570] mkdir("./file0", 0777) = 0 [ 225.409580][ T6570] loop4: detected capacity change from 0 to 8192 [ 225.419633][ T6570] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.432708][ T6570] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 225.442036][ T6570] REISERFS (device loop4): using ordered data mode [ 225.448642][ T6570] reiserfs: using flush barriers [ 225.454603][ T6570] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.471141][ T6570] REISERFS (device loop4): checking transaction log (loop4) [pid 6570] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6570] chdir("./file0") = 0 [pid 6570] ioctl(4, LOOP_CLR_FD) = 0 [pid 6570] close(4) = 0 [pid 6570] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... futex resumed>) = 0 [pid 6569] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6570] <... futex resumed>) = 1 [pid 6570] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6570] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... futex resumed>) = 0 [pid 6569] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6570] <... futex resumed>) = 1 [pid 6570] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6570] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... futex resumed>) = 0 [pid 6569] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6570] <... futex resumed>) = 1 [ 225.513444][ T6570] REISERFS (device loop4): Using r5 hash to sort names [ 225.520540][ T6570] REISERFS (device loop4): using 3.5.x disk format [ 225.527588][ T6570] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6570] sendfile(4, 5, NULL, 140737974943952 [pid 6569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6569] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6569] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6569] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6572 attached , parent_tid=[6572], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6572 [pid 6572] set_robust_list(0x7fe8f42d09e0, 24 [pid 6569] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... set_robust_list resumed>) = 0 [pid 6569] <... futex resumed>) = 0 [pid 6572] open("./bus", O_RDONLY [pid 6569] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6569] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6569] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6573 attached , parent_tid=[6573], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6573 [pid 6569] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6573] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6573] truncate("./bus", 6 [pid 6569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6569] exit_group(0) = ? [pid 6572] <... open resumed>) = ? [pid 6570] <... sendfile resumed>) = ? [pid 6573] <... truncate resumed>) = ? [pid 6573] +++ exited with 0 +++ [pid 6572] +++ exited with 0 +++ [pid 6570] +++ exited with 0 +++ [pid 6569] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6569, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./260", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./260/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./260/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./260/binderfs") = 0 [pid 5073] umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./260/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./260/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./260/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./260") = 0 [pid 5073] mkdir("./261", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6574 ./strace-static-x86_64: Process 6574 attached [pid 6574] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6574] chdir("./261") = 0 [pid 6574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6574] setpgid(0, 0) = 0 [pid 6574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6574] write(3, "1000", 4) = 4 [pid 6574] close(3) = 0 [pid 6574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6574] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6574] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6575], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6575 [pid 6574] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6575 attached [pid 6575] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6575] memfd_create("syzkaller", 0) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6575] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6575] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6575] close(3) = 0 [pid 6575] mkdir("./file0", 0777) = 0 [ 226.008592][ T6575] loop4: detected capacity change from 0 to 8192 [ 226.019465][ T6575] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.032715][ T6575] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 226.042455][ T6575] REISERFS (device loop4): using ordered data mode [ 226.049233][ T6575] reiserfs: using flush barriers [ 226.055116][ T6575] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.071747][ T6575] REISERFS (device loop4): checking transaction log (loop4) [pid 6575] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6575] chdir("./file0") = 0 [pid 6575] ioctl(4, LOOP_CLR_FD) = 0 [pid 6575] close(4) = 0 [pid 6575] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6575] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] <... futex resumed>) = 0 [pid 6575] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6575] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6575] openat(-1, "/proc/self/exe", O_RDONLY [pid 6574] <... futex resumed>) = 0 [pid 6575] <... openat resumed>) = 5 [pid 6574] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6575] sendfile(4, 5, NULL, 140737974943952 [pid 6574] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 226.115281][ T6575] REISERFS (device loop4): Using r5 hash to sort names [ 226.122715][ T6575] REISERFS (device loop4): using 3.5.x disk format [ 226.130140][ T6575] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6574] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6574] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6574] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6577 attached [pid 6577] set_robust_list(0x7fe8f42d09e0, 24 [pid 6574] <... clone resumed>, parent_tid=[6577], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6577 [pid 6574] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6577] <... set_robust_list resumed>) = 0 [pid 6577] open("./bus", O_RDONLY [pid 6574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6574] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6574] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6578], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6578 ./strace-static-x86_64: Process 6578 attached [pid 6574] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6578] truncate("./bus", 6 [pid 6574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6574] exit_group(0) = ? [pid 6575] <... sendfile resumed>) = ? [pid 6578] <... truncate resumed>) = ? [pid 6577] <... open resumed>) = ? [pid 6575] +++ exited with 0 +++ [pid 6578] +++ exited with 0 +++ [pid 6577] +++ exited with 0 +++ [pid 6574] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6574, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./261", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./261/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./261/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./261/binderfs") = 0 [pid 5073] umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./261/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./261/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./261") = 0 [pid 5073] mkdir("./262", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6579 ./strace-static-x86_64: Process 6579 attached [pid 6579] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6579] chdir("./262") = 0 [pid 6579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6579] setpgid(0, 0) = 0 [pid 6579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6579] write(3, "1000", 4) = 4 [pid 6579] close(3) = 0 [pid 6579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6579] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6579] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6579] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6580], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6580 [pid 6579] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6580 attached [pid 6580] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6580] memfd_create("syzkaller", 0) = 3 [pid 6580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6580] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6580] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6580] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6580] close(3) = 0 [pid 6580] mkdir("./file0", 0777) = 0 [ 226.609893][ T6580] loop4: detected capacity change from 0 to 8192 [ 226.620168][ T6580] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.633565][ T6580] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 226.643244][ T6580] REISERFS (device loop4): using ordered data mode [ 226.649871][ T6580] reiserfs: using flush barriers [ 226.656066][ T6580] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.672402][ T6580] REISERFS (device loop4): checking transaction log (loop4) [pid 6580] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6580] chdir("./file0") = 0 [pid 6580] ioctl(4, LOOP_CLR_FD) = 0 [pid 6580] close(4) = 0 [pid 6580] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6579] <... futex resumed>) = 0 [pid 6580] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6579] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... open resumed>) = 4 [pid 6579] <... futex resumed>) = 0 [pid 6580] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6580] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6580] openat(-1, "/proc/self/exe", O_RDONLY [pid 6579] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6580] <... openat resumed>) = 5 [pid 6579] <... futex resumed>) = 0 [pid 6580] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6579] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6580] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6580] sendfile(4, 5, NULL, 140737974943952 [pid 6579] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 226.713768][ T6580] REISERFS (device loop4): Using r5 hash to sort names [ 226.720782][ T6580] REISERFS (device loop4): using 3.5.x disk format [ 226.727631][ T6580] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6579] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6579] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6579] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6579] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6579] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6582], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6582 [pid 6579] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6582 attached [pid 6582] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6582] open("./bus", O_RDONLY [pid 6579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6579] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6579] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6579] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6583 attached [pid 6583] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6583] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6579] <... clone resumed>, parent_tid=[6583], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6583 [pid 6579] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] <... futex resumed>) = 0 [pid 6579] <... futex resumed>) = 1 [pid 6583] truncate("./bus", 6 [pid 6579] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6579] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6579] exit_group(0) = ? [pid 6582] <... open resumed>) = ? [pid 6580] <... sendfile resumed>) = ? [pid 6583] <... truncate resumed>) = ? [pid 6582] +++ exited with 0 +++ [pid 6580] +++ exited with 0 +++ [pid 6583] +++ exited with 0 +++ [pid 6579] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6579, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./262", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./262/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./262/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./262/binderfs") = 0 [pid 5073] umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./262/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./262/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./262") = 0 [pid 5073] mkdir("./263", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6584 ./strace-static-x86_64: Process 6584 attached [pid 6584] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6584] chdir("./263") = 0 [pid 6584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6584] setpgid(0, 0) = 0 [pid 6584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6584] write(3, "1000", 4) = 4 [pid 6584] close(3) = 0 [pid 6584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6584] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6584] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6584] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6585], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6585 [pid 6584] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6585 attached [pid 6585] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6585] memfd_create("syzkaller", 0) = 3 [pid 6585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6585] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6585] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6585] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6585] close(3) = 0 [pid 6585] mkdir("./file0", 0777) = 0 [ 227.183793][ T6585] loop4: detected capacity change from 0 to 8192 [ 227.193858][ T6585] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.206909][ T6585] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 227.216166][ T6585] REISERFS (device loop4): using ordered data mode [ 227.222690][ T6585] reiserfs: using flush barriers [ 227.228496][ T6585] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.244817][ T6585] REISERFS (device loop4): checking transaction log (loop4) [pid 6585] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6585] chdir("./file0") = 0 [pid 6585] ioctl(4, LOOP_CLR_FD) = 0 [pid 6585] close(4) = 0 [pid 6585] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] <... futex resumed>) = 0 [pid 6584] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = 1 [pid 6585] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6584] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] <... open resumed>) = 4 [pid 6585] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] <... futex resumed>) = 0 [pid 6585] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = 1 [pid 6585] openat(-1, "/proc/self/exe", O_RDONLY [pid 6584] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] <... openat resumed>) = 5 [pid 6585] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] <... futex resumed>) = 0 [pid 6585] sendfile(4, 5, NULL, 140737974943952 [pid 6584] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 227.287666][ T6585] REISERFS (device loop4): Using r5 hash to sort names [ 227.294580][ T6585] REISERFS (device loop4): using 3.5.x disk format [ 227.301383][ T6585] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6584] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6584] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6584] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6584] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6584] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6587], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6587 [pid 6584] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6587 attached [pid 6587] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6587] open("./bus", O_RDONLY [pid 6584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6584] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6584] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6584] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6584] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6588], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6588 [pid 6584] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6588 attached [pid 6588] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6588] truncate("./bus", 6 [pid 6584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6584] exit_group(0) = ? [pid 6585] <... sendfile resumed>) = ? [pid 6587] <... open resumed>) = ? [pid 6585] +++ exited with 0 +++ [pid 6588] <... truncate resumed>) = ? [pid 6588] +++ exited with 0 +++ [pid 6587] +++ exited with 0 +++ [pid 6584] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6584, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] umount2("./263", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./263/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./263/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./263/binderfs") = 0 [pid 5073] umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./263/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./263/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [ 227.678825][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 227.678841][ T27] audit: type=1804 audit(1671282451.083:881): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/263/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 227.708431][ T27] audit: type=1800 audit(1671282451.083:882): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./263/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./263") = 0 [pid 5073] mkdir("./264", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6589 ./strace-static-x86_64: Process 6589 attached [pid 6589] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6589] chdir("./264") = 0 [pid 6589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6589] setpgid(0, 0) = 0 [pid 6589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6589] write(3, "1000", 4) = 4 [pid 6589] close(3) = 0 [pid 6589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6589] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6589] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6589] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6590], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6590 [pid 6589] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6590 attached [pid 6590] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6590] memfd_create("syzkaller", 0) = 3 [pid 6590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6590] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6590] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6590] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6590] close(3) = 0 [pid 6590] mkdir("./file0", 0777) = 0 [ 227.821301][ T6590] loop4: detected capacity change from 0 to 8192 [ 227.832006][ T6590] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.845158][ T6590] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 227.854596][ T6590] REISERFS (device loop4): using ordered data mode [ 227.861160][ T6590] reiserfs: using flush barriers [ 227.867383][ T6590] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.883856][ T6590] REISERFS (device loop4): checking transaction log (loop4) [pid 6590] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6590] chdir("./file0") = 0 [pid 6590] ioctl(4, LOOP_CLR_FD) = 0 [pid 6590] close(4) = 0 [pid 6590] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] <... futex resumed>) = 0 [pid 6589] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] <... futex resumed>) = 1 [pid 6590] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6590] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] <... futex resumed>) = 0 [pid 6589] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] <... futex resumed>) = 1 [pid 6590] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6590] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] <... futex resumed>) = 0 [pid 6589] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6590] <... futex resumed>) = 1 [ 227.929280][ T6590] REISERFS (device loop4): Using r5 hash to sort names [ 227.936309][ T6590] REISERFS (device loop4): using 3.5.x disk format [ 227.943103][ T6590] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6590] sendfile(4, 5, NULL, 140737974943952 [pid 6589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6589] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6589] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6589] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6592], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6592 [ 227.961437][ T27] audit: type=1800 audit(1671282451.363:883): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 ./strace-static-x86_64: Process 6592 attached [pid 6589] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6592] open("./bus", O_RDONLY [pid 6589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6589] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6589] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6589] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6589] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6593 attached , parent_tid=[6593], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6593 [pid 6589] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6593] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6593] truncate("./bus", 6 [pid 6589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6589] exit_group(0) = ? [pid 6590] <... sendfile resumed>) = ? [pid 6592] <... open resumed>) = ? [pid 6590] +++ exited with 0 +++ [pid 6593] <... truncate resumed>) = ? [pid 6593] +++ exited with 0 +++ [pid 6592] +++ exited with 0 +++ [pid 6589] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6589, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] umount2("./264", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./264/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./264/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./264/binderfs") = 0 [pid 5073] umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./264/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./264/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./264/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./264") = 0 [ 228.299201][ T27] audit: type=1804 audit(1671282451.703:884): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/264/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 228.322601][ T27] audit: type=1800 audit(1671282451.703:885): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] mkdir("./265", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6594 ./strace-static-x86_64: Process 6594 attached [pid 6594] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6594] chdir("./265") = 0 [pid 6594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6594] setpgid(0, 0) = 0 [pid 6594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6594] write(3, "1000", 4) = 4 [pid 6594] close(3) = 0 [pid 6594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6594] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6594] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6594] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6595], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6595 [pid 6594] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6595 attached [pid 6595] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6595] memfd_create("syzkaller", 0) = 3 [pid 6595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6595] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6595] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6595] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6595] close(3) = 0 [pid 6595] mkdir("./file0", 0777) = 0 [ 228.436511][ T6595] loop4: detected capacity change from 0 to 8192 [ 228.447120][ T6595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.460611][ T6595] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 228.470324][ T6595] REISERFS (device loop4): using ordered data mode [ 228.476926][ T6595] reiserfs: using flush barriers [ 228.482860][ T6595] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.499306][ T6595] REISERFS (device loop4): checking transaction log (loop4) [pid 6595] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6595] chdir("./file0") = 0 [pid 6595] ioctl(4, LOOP_CLR_FD) = 0 [pid 6595] close(4) = 0 [pid 6595] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6594] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6595] <... futex resumed>) = 1 [pid 6595] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6595] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6594] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6595] <... futex resumed>) = 1 [pid 6595] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6595] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6594] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6595] <... futex resumed>) = 1 [pid 6595] sendfile(4, 5, NULL, 140737974943952 [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 228.536928][ T6595] REISERFS (device loop4): Using r5 hash to sort names [ 228.543955][ T6595] REISERFS (device loop4): using 3.5.x disk format [ 228.551084][ T6595] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 228.565657][ T27] audit: type=1800 audit(1671282451.973:886): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6594] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6594] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6594] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6597 attached [pid 6597] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6597] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6594] <... clone resumed>, parent_tid=[6597], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6597 [pid 6594] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6597] <... futex resumed>) = 0 [pid 6597] open("./bus", O_RDONLY [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6594] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6594] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6594] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6598 attached [pid 6598] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6598] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6594] <... clone resumed>, parent_tid=[6598], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6598 [pid 6594] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] <... futex resumed>) = 0 [pid 6598] truncate("./bus", 6 [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6594] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6594] exit_group(0) = ? [pid 6595] <... sendfile resumed>) = ? [pid 6597] <... open resumed>) = ? [pid 6595] +++ exited with 0 +++ [pid 6598] <... truncate resumed>) = ? [pid 6598] +++ exited with 0 +++ [pid 6597] +++ exited with 0 +++ [pid 6594] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6594, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./265", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./265/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./265/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./265/binderfs") = 0 [pid 5073] umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 228.908408][ T27] audit: type=1804 audit(1671282452.313:887): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/265/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 228.932248][ T27] audit: type=1800 audit(1671282452.313:888): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./265/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./265/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./265") = 0 [pid 5073] mkdir("./266", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6599 ./strace-static-x86_64: Process 6599 attached [pid 6599] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6599] chdir("./266") = 0 [pid 6599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6599] setpgid(0, 0) = 0 [pid 6599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6599] write(3, "1000", 4) = 4 [pid 6599] close(3) = 0 [pid 6599] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6599] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6599] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6599] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6600 attached , parent_tid=[6600], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6600 [pid 6600] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6600] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6600] memfd_create("syzkaller", 0 [pid 6599] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6600] <... memfd_create resumed>) = 3 [pid 6600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6600] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6600] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6600] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6600] close(3) = 0 [pid 6600] mkdir("./file0", 0777) = 0 [ 229.065009][ T6600] loop4: detected capacity change from 0 to 8192 [ 229.074758][ T6600] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 229.087929][ T6600] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 229.097509][ T6600] REISERFS (device loop4): using ordered data mode [ 229.104233][ T6600] reiserfs: using flush barriers [ 229.110261][ T6600] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.127542][ T6600] REISERFS (device loop4): checking transaction log (loop4) [pid 6600] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6600] chdir("./file0") = 0 [pid 6600] ioctl(4, LOOP_CLR_FD) = 0 [pid 6600] close(4) = 0 [pid 6600] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6600] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] <... futex resumed>) = 0 [pid 6599] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... futex resumed>) = 0 [pid 6599] <... futex resumed>) = 1 [pid 6600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 229.171190][ T6600] REISERFS (device loop4): Using r5 hash to sort names [ 229.178173][ T6600] REISERFS (device loop4): using 3.5.x disk format [ 229.184867][ T6600] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6599] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6600] <... open resumed>) = 4 [pid 6600] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6600] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6599] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... futex resumed>) = 0 [pid 6599] <... futex resumed>) = 1 [pid 6600] openat(-1, "/proc/self/exe", O_RDONLY [pid 6599] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6600] <... openat resumed>) = 5 [pid 6600] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6599] <... futex resumed>) = 0 [pid 6600] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6599] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 229.202933][ T27] audit: type=1800 audit(1671282452.603:889): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6600] sendfile(4, 5, NULL, 140737974943952 [pid 6599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6599] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6599] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6599] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6602 attached , parent_tid=[6602], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6602 [pid 6599] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6599] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6602] open("./bus", O_RDONLY [pid 6599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6599] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6599] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6599] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6603 attached , parent_tid=[6603], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6603 [pid 6603] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6603] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6599] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6603] <... futex resumed>) = 0 [pid 6603] truncate("./bus", 6 [pid 6599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6599] exit_group(0) = ? [pid 6600] <... sendfile resumed>) = ? [pid 6602] <... open resumed>) = ? [pid 6600] +++ exited with 0 +++ [pid 6602] +++ exited with 0 +++ [pid 6603] <... truncate resumed>) = ? [pid 6603] +++ exited with 0 +++ [pid 6599] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6599, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./266", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./266/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./266/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./266/binderfs") = 0 [pid 5073] umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 229.588832][ T27] audit: type=1804 audit(1671282452.993:890): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/266/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./266/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./266/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./266") = 0 [pid 5073] mkdir("./267", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6604 ./strace-static-x86_64: Process 6604 attached [pid 6604] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6604] chdir("./267") = 0 [pid 6604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6604] setpgid(0, 0) = 0 [pid 6604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6604] write(3, "1000", 4) = 4 [pid 6604] close(3) = 0 [pid 6604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6604] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6604] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6604] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6605], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6605 [pid 6604] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6605 attached [pid 6605] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6605] memfd_create("syzkaller", 0) = 3 [pid 6605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6605] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6605] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6605] close(3) = 0 [pid 6605] mkdir("./file0", 0777) = 0 [ 229.721187][ T6605] loop4: detected capacity change from 0 to 8192 [ 229.730936][ T6605] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 229.744685][ T6605] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 229.753995][ T6605] REISERFS (device loop4): using ordered data mode [ 229.760571][ T6605] reiserfs: using flush barriers [ 229.766510][ T6605] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.782957][ T6605] REISERFS (device loop4): checking transaction log (loop4) [pid 6605] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6605] chdir("./file0") = 0 [pid 6605] ioctl(4, LOOP_CLR_FD) = 0 [pid 6605] close(4) = 0 [pid 6605] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6604] <... futex resumed>) = 0 [pid 6605] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6604] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... open resumed>) = 4 [pid 6604] <... futex resumed>) = 0 [pid 6605] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... futex resumed>) = 0 [pid 6604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6605] openat(-1, "/proc/self/exe", O_RDONLY [pid 6604] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... openat resumed>) = 5 [pid 6604] <... futex resumed>) = 0 [pid 6605] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... futex resumed>) = 0 [pid 6604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6605] sendfile(4, 5, NULL, 140737974943952 [pid 6604] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 229.824709][ T6605] REISERFS (device loop4): Using r5 hash to sort names [ 229.831735][ T6605] REISERFS (device loop4): using 3.5.x disk format [ 229.838656][ T6605] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6604] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6604] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6604] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6604] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6607], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6607 ./strace-static-x86_64: Process 6607 attached [pid 6604] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6604] <... futex resumed>) = 0 [pid 6607] open("./bus", O_RDONLY [pid 6604] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6604] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6604] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6604] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6608 attached , parent_tid=[6608], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6608 [pid 6604] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6608] truncate("./bus", 6 [pid 6604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6604] exit_group(0) = ? [pid 6605] <... sendfile resumed>) = ? [pid 6607] <... open resumed>) = ? [pid 6605] +++ exited with 0 +++ [pid 6607] +++ exited with 0 +++ [pid 6608] <... truncate resumed>) = ? [pid 6608] +++ exited with 0 +++ [pid 6604] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6604, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./267", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./267/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./267/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./267/binderfs") = 0 [pid 5073] umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./267/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./267/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./267") = 0 [pid 5073] mkdir("./268", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6609 ./strace-static-x86_64: Process 6609 attached [pid 6609] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6609] chdir("./268") = 0 [pid 6609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6609] setpgid(0, 0) = 0 [pid 6609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6609] write(3, "1000", 4) = 4 [pid 6609] close(3) = 0 [pid 6609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6609] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6609] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6609] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6610], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6610 [pid 6609] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6609] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6610 attached [pid 6610] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6610] memfd_create("syzkaller", 0) = 3 [pid 6610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6610] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6610] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6610] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6610] close(3) = 0 [pid 6610] mkdir("./file0", 0777) = 0 [ 230.297201][ T6610] loop4: detected capacity change from 0 to 8192 [ 230.307824][ T6610] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 230.320913][ T6610] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 230.330177][ T6610] REISERFS (device loop4): using ordered data mode [ 230.336790][ T6610] reiserfs: using flush barriers [ 230.343449][ T6610] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 230.360066][ T6610] REISERFS (device loop4): checking transaction log (loop4) [pid 6610] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6610] chdir("./file0") = 0 [pid 6610] ioctl(4, LOOP_CLR_FD) = 0 [pid 6610] close(4) = 0 [pid 6610] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6609] <... futex resumed>) = 0 [pid 6610] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6609] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6609] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] <... futex resumed>) = 0 [pid 6610] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6610] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6609] <... futex resumed>) = 0 [pid 6609] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6609] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] <... futex resumed>) = 1 [pid 6610] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6610] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6610] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6609] <... futex resumed>) = 0 [pid 6609] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6609] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] <... futex resumed>) = 0 [ 230.403216][ T6610] REISERFS (device loop4): Using r5 hash to sort names [ 230.410515][ T6610] REISERFS (device loop4): using 3.5.x disk format [ 230.417938][ T6610] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6610] sendfile(4, 5, NULL, 140737974943952 [pid 6609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6609] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6609] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6609] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6612 attached , parent_tid=[6612], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6612 [pid 6612] set_robust_list(0x7fe8f42d09e0, 24 [pid 6609] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6609] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6612] <... set_robust_list resumed>) = 0 [pid 6612] open("./bus", O_RDONLY [pid 6609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6609] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6609] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6609] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6613 attached , parent_tid=[6613], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6613 [pid 6609] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] set_robust_list(0x7fe8f42af9e0, 24 [pid 6609] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... set_robust_list resumed>) = 0 [pid 6613] truncate("./bus", 6 [pid 6609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6609] exit_group(0) = ? [pid 6612] <... open resumed>) = ? [pid 6610] <... sendfile resumed>) = ? [pid 6613] <... truncate resumed>) = ? [pid 6612] +++ exited with 0 +++ [pid 6610] +++ exited with 0 +++ [pid 6613] +++ exited with 0 +++ [pid 6609] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6609, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./268", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./268/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./268/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./268/binderfs") = 0 [pid 5073] umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./268/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./268/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./268") = 0 [pid 5073] mkdir("./269", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6614 ./strace-static-x86_64: Process 6614 attached [pid 6614] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6614] chdir("./269") = 0 [pid 6614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6614] setpgid(0, 0) = 0 [pid 6614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6614] write(3, "1000", 4) = 4 [pid 6614] close(3) = 0 [pid 6614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6614] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6614] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6614] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6615], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6615 [pid 6614] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6615 attached [pid 6615] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6615] memfd_create("syzkaller", 0) = 3 [pid 6615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6615] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6615] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6615] close(3) = 0 [pid 6615] mkdir("./file0", 0777) = 0 [ 230.916641][ T6615] loop4: detected capacity change from 0 to 8192 [ 230.926555][ T6615] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 230.940043][ T6615] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 230.949400][ T6615] REISERFS (device loop4): using ordered data mode [ 230.956098][ T6615] reiserfs: using flush barriers [ 230.962169][ T6615] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 230.979626][ T6615] REISERFS (device loop4): checking transaction log (loop4) [pid 6615] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6615] chdir("./file0") = 0 [pid 6615] ioctl(4, LOOP_CLR_FD) = 0 [pid 6615] close(4) = 0 [pid 6615] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6615] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] <... futex resumed>) = 0 [pid 6614] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6614] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6615] <... futex resumed>) = 0 [pid 6615] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6615] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = 0 [pid 6614] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6615] <... futex resumed>) = 1 [pid 6615] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6615] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6615] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] <... futex resumed>) = 0 [pid 6614] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6615] <... futex resumed>) = 0 [pid 6614] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 231.023379][ T6615] REISERFS (device loop4): Using r5 hash to sort names [ 231.030521][ T6615] REISERFS (device loop4): using 3.5.x disk format [ 231.037414][ T6615] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6615] sendfile(4, 5, NULL, 140737974943952 [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6614] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6614] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6614] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6617], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6617 ./strace-static-x86_64: Process 6617 attached [pid 6614] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6617] open("./bus", O_RDONLY [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6614] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6614] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6614] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6618 attached , parent_tid=[6618], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6618 [pid 6618] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6618] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6614] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6618] <... futex resumed>) = 0 [pid 6618] truncate("./bus", 6 [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6614] exit_group(0) = ? [pid 6615] <... sendfile resumed>) = ? [pid 6617] <... open resumed>) = ? [pid 6615] +++ exited with 0 +++ [pid 6618] <... truncate resumed>) = ? [pid 6617] +++ exited with 0 +++ [pid 6618] +++ exited with 0 +++ [pid 6614] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6614, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./269", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./269/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./269/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./269/binderfs") = 0 [pid 5073] umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./269/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./269/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./269") = 0 [pid 5073] mkdir("./270", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6619 ./strace-static-x86_64: Process 6619 attached [pid 6619] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6619] chdir("./270") = 0 [pid 6619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6619] setpgid(0, 0) = 0 [pid 6619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6619] write(3, "1000", 4) = 4 [pid 6619] close(3) = 0 [pid 6619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6619] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6619] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6619] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6620 attached , parent_tid=[6620], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6620 [pid 6619] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6620] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6620] memfd_create("syzkaller", 0) = 3 [pid 6620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6620] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6620] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6620] close(3) = 0 [pid 6620] mkdir("./file0", 0777) = 0 [ 231.515518][ T6620] loop4: detected capacity change from 0 to 8192 [ 231.527165][ T6620] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.540796][ T6620] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 231.550602][ T6620] REISERFS (device loop4): using ordered data mode [ 231.557415][ T6620] reiserfs: using flush barriers [ 231.563564][ T6620] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.581286][ T6620] REISERFS (device loop4): checking transaction log (loop4) [pid 6620] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6620] chdir("./file0") = 0 [pid 6620] ioctl(4, LOOP_CLR_FD) = 0 [pid 6620] close(4) = 0 [pid 6620] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6619] <... futex resumed>) = 0 [pid 6620] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6619] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... open resumed>) = 4 [pid 6619] <... futex resumed>) = 0 [pid 6620] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... futex resumed>) = 0 [pid 6619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] openat(-1, "/proc/self/exe", O_RDONLY [pid 6619] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... openat resumed>) = 5 [pid 6619] <... futex resumed>) = 0 [pid 6620] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... futex resumed>) = 0 [pid 6619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] sendfile(4, 5, NULL, 140737974943952 [pid 6619] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 231.625101][ T6620] REISERFS (device loop4): Using r5 hash to sort names [ 231.632111][ T6620] REISERFS (device loop4): using 3.5.x disk format [ 231.638970][ T6620] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6619] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6619] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6619] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6619] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6622 attached , parent_tid=[6622], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6622 [pid 6622] set_robust_list(0x7fe8f42d09e0, 24 [pid 6619] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... set_robust_list resumed>) = 0 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6622] open("./bus", O_RDONLY [pid 6619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6619] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6619] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6619] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6623 attached , parent_tid=[6623], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6623 [pid 6619] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] set_robust_list(0x7fe8f42af9e0, 24 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6623] <... set_robust_list resumed>) = 0 [pid 6623] truncate("./bus", 6 [pid 6619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6619] exit_group(0) = ? [pid 6620] <... sendfile resumed>) = ? [pid 6622] <... open resumed>) = ? [pid 6620] +++ exited with 0 +++ [pid 6623] <... truncate resumed>) = ? [pid 6622] +++ exited with 0 +++ [pid 6623] +++ exited with 0 +++ [pid 6619] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6619, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./270", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./270/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./270/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./270/binderfs") = 0 [pid 5073] umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./270/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./270/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./270") = 0 [pid 5073] mkdir("./271", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6624 attached , child_tidptr=0x5555558b65d0) = 6624 [pid 6624] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6624] chdir("./271") = 0 [pid 6624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6624] setpgid(0, 0) = 0 [pid 6624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6624] write(3, "1000", 4) = 4 [pid 6624] close(3) = 0 [pid 6624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6624] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6624] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6624] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6625], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6625 [pid 6624] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6624] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6625 attached [pid 6625] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6625] memfd_create("syzkaller", 0) = 3 [pid 6625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6625] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6625] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6625] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6625] close(3) = 0 [pid 6625] mkdir("./file0", 0777) = 0 [ 232.077311][ T6625] loop4: detected capacity change from 0 to 8192 [ 232.087333][ T6625] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.100362][ T6625] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 232.109610][ T6625] REISERFS (device loop4): using ordered data mode [ 232.116190][ T6625] reiserfs: using flush barriers [ 232.121810][ T6625] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.138856][ T6625] REISERFS (device loop4): checking transaction log (loop4) [pid 6625] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6625] chdir("./file0") = 0 [pid 6625] ioctl(4, LOOP_CLR_FD) = 0 [pid 6625] close(4) = 0 [pid 6625] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6625] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] <... futex resumed>) = 0 [pid 6624] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] <... futex resumed>) = 0 [pid 6624] <... futex resumed>) = 1 [pid 6625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6624] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6625] <... open resumed>) = 4 [pid 6625] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6624] <... futex resumed>) = 0 [pid 6624] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] openat(-1, "/proc/self/exe", O_RDONLY [pid 6624] <... futex resumed>) = 0 [pid 6625] <... openat resumed>) = 5 [pid 6624] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6625] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6624] <... futex resumed>) = 0 [pid 6624] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] sendfile(4, 5, NULL, 140737974943952 [ 232.181403][ T6625] REISERFS (device loop4): Using r5 hash to sort names [ 232.188591][ T6625] REISERFS (device loop4): using 3.5.x disk format [ 232.195337][ T6625] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6624] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6624] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6624] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6624] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6627 attached [pid 6627] set_robust_list(0x7fe8f42d09e0, 24 [pid 6624] <... clone resumed>, parent_tid=[6627], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6627 [pid 6627] <... set_robust_list resumed>) = 0 [pid 6624] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6624] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6627] open("./bus", O_RDONLY [pid 6624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6624] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6624] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6624] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6628 attached [pid 6628] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6628] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] <... clone resumed>, parent_tid=[6628], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6628 [pid 6624] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6624] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6628] truncate("./bus", 6 [pid 6624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6624] exit_group(0) = ? [pid 6625] <... sendfile resumed>) = ? [pid 6627] <... open resumed>) = ? [pid 6625] +++ exited with 0 +++ [pid 6628] <... truncate resumed>) = ? [pid 6627] +++ exited with 0 +++ [pid 6628] +++ exited with 0 +++ [pid 6624] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6624, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./271", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./271/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./271/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./271/binderfs") = 0 [pid 5073] umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./271/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./271/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./271") = 0 [pid 5073] mkdir("./272", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6629 ./strace-static-x86_64: Process 6629 attached [pid 6629] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6629] chdir("./272") = 0 [pid 6629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6629] setpgid(0, 0) = 0 [pid 6629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6629] write(3, "1000", 4) = 4 [pid 6629] close(3) = 0 [pid 6629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6629] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6629] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6629] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6630 attached , parent_tid=[6630], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6630 [pid 6630] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6629] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6630] <... set_robust_list resumed>) = 0 [pid 6630] memfd_create("syzkaller", 0) = 3 [pid 6630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6630] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6630] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6630] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6630] close(3) = 0 [pid 6630] mkdir("./file0", 0777) = 0 [ 232.694934][ T6630] loop4: detected capacity change from 0 to 8192 [ 232.705593][ T6630] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.718636][ T6630] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 232.727984][ T6630] REISERFS (device loop4): using ordered data mode [ 232.734530][ T6630] reiserfs: using flush barriers [ 232.740728][ T6630] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.757096][ T6630] REISERFS (device loop4): checking transaction log (loop4) [pid 6630] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6630] chdir("./file0") = 0 [pid 6630] ioctl(4, LOOP_CLR_FD) = 0 [pid 6630] close(4) = 0 [pid 6630] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6629] <... futex resumed>) = 0 [pid 6630] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... futex resumed>) = 0 [pid 6629] <... futex resumed>) = 1 [pid 6630] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 232.800235][ T6630] REISERFS (device loop4): Using r5 hash to sort names [ 232.807230][ T6630] REISERFS (device loop4): using 3.5.x disk format [ 232.814069][ T6630] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 232.835977][ T27] kauditd_printk_skb: 16 callbacks suppressed [pid 6629] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... open resumed>) = 4 [pid 6630] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6630] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6629] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... futex resumed>) = 0 [pid 6629] <... futex resumed>) = 1 [pid 6630] openat(-1, "/proc/self/exe", O_RDONLY [pid 6629] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... openat resumed>) = 5 [pid 6630] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6630] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] <... futex resumed>) = 0 [pid 6629] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... futex resumed>) = 0 [pid 6629] <... futex resumed>) = 1 [pid 6630] sendfile(4, 5, NULL, 140737974943952 [ 232.835992][ T27] audit: type=1800 audit(1671282456.243:907): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6629] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6629] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6629] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6629] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6632], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6632 [pid 6629] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6632 attached [pid 6632] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6632] open("./bus", O_RDONLY [pid 6629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6629] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6629] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6629] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6629] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6633], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6633 [pid 6629] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6633 attached [pid 6633] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6633] truncate("./bus", 6 [pid 6629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6629] exit_group(0) = ? [pid 6632] <... open resumed>) = ? [pid 6630] <... sendfile resumed>) = ? [pid 6632] +++ exited with 0 +++ [pid 6633] <... truncate resumed>) = ? [pid 6633] +++ exited with 0 +++ [pid 6630] +++ exited with 0 +++ [pid 6629] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6629, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./272", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./272/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./272/binderfs") = 0 [pid 5073] umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 233.238501][ T27] audit: type=1804 audit(1671282456.643:908): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/272/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 233.262182][ T27] audit: type=1800 audit(1671282456.643:909): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./272/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./272/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./272/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./272") = 0 [pid 5073] mkdir("./273", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6634 ./strace-static-x86_64: Process 6634 attached [pid 6634] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6634] chdir("./273") = 0 [pid 6634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6634] setpgid(0, 0) = 0 [pid 6634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6634] write(3, "1000", 4) = 4 [pid 6634] close(3) = 0 [pid 6634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6634] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6634] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6634] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6635 attached , parent_tid=[6635], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6635 [pid 6634] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6635] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6635] memfd_create("syzkaller", 0) = 3 [pid 6635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6635] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6635] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6635] close(3) = 0 [pid 6635] mkdir("./file0", 0777) = 0 [ 233.395004][ T6635] loop4: detected capacity change from 0 to 8192 [ 233.404931][ T6635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.418048][ T6635] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 233.427500][ T6635] REISERFS (device loop4): using ordered data mode [ 233.434208][ T6635] reiserfs: using flush barriers [ 233.440188][ T6635] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.456448][ T6635] REISERFS (device loop4): checking transaction log (loop4) [pid 6635] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6635] chdir("./file0") = 0 [pid 6635] ioctl(4, LOOP_CLR_FD) = 0 [pid 6635] close(4) = 0 [pid 6635] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6635] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] <... futex resumed>) = 0 [pid 6634] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6635] <... futex resumed>) = 0 [ 233.493431][ T6635] REISERFS (device loop4): Using r5 hash to sort names [ 233.500570][ T6635] REISERFS (device loop4): using 3.5.x disk format [ 233.507469][ T6635] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6635] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6635] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6635] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 6635] openat(-1, "/proc/self/exe", O_RDONLY [pid 6634] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6635] <... openat resumed>) = 5 [pid 6635] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6635] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 6635] sendfile(4, 5, NULL, 140737974943952 [ 233.525698][ T27] audit: type=1800 audit(1671282456.933:910): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6634] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6634] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6634] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6634] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6637], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6637 [pid 6634] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6637 attached [pid 6637] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6637] open("./bus", O_RDONLY [pid 6634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6634] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6634] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6634] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6638 attached , parent_tid=[6638], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6638 [pid 6638] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6638] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6638] <... futex resumed>) = 0 [pid 6638] truncate("./bus", 6 [pid 6634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6634] exit_group(0) = ? [pid 6635] <... sendfile resumed>) = ? [pid 6638] <... truncate resumed>) = ? [pid 6637] <... open resumed>) = ? [pid 6638] +++ exited with 0 +++ [pid 6635] +++ exited with 0 +++ [pid 6637] +++ exited with 0 +++ [pid 6634] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6634, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./273", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./273/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./273/binderfs") = 0 [pid 5073] umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 233.898491][ T27] audit: type=1804 audit(1671282457.303:911): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/273/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 233.921656][ T27] audit: type=1800 audit(1671282457.303:912): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./273/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./273/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./273") = 0 [pid 5073] mkdir("./274", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6639 ./strace-static-x86_64: Process 6639 attached [pid 6639] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6639] chdir("./274") = 0 [pid 6639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6639] setpgid(0, 0) = 0 [pid 6639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6639] write(3, "1000", 4) = 4 [pid 6639] close(3) = 0 [pid 6639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6639] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6639] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6639] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6640], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6640 [pid 6639] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6640 attached [pid 6640] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6640] memfd_create("syzkaller", 0) = 3 [pid 6640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6640] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6640] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6640] close(3) = 0 [pid 6640] mkdir("./file0", 0777) = 0 [ 234.052080][ T6640] loop4: detected capacity change from 0 to 8192 [ 234.062395][ T6640] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.075880][ T6640] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 234.085240][ T6640] REISERFS (device loop4): using ordered data mode [ 234.091840][ T6640] reiserfs: using flush barriers [ 234.098161][ T6640] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.114712][ T6640] REISERFS (device loop4): checking transaction log (loop4) [pid 6640] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6640] chdir("./file0") = 0 [pid 6640] ioctl(4, LOOP_CLR_FD) = 0 [pid 6640] close(4) = 0 [pid 6640] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6640] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6639] <... futex resumed>) = 0 [pid 6639] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6639] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] <... futex resumed>) = 0 [pid 6640] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6640] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... futex resumed>) = 0 [pid 6639] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] <... futex resumed>) = 1 [pid 6640] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6640] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... futex resumed>) = 0 [pid 6639] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] <... futex resumed>) = 1 [ 234.152671][ T6640] REISERFS (device loop4): Using r5 hash to sort names [ 234.159720][ T6640] REISERFS (device loop4): using 3.5.x disk format [ 234.166679][ T6640] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6640] sendfile(4, 5, NULL, 140737974943952 [pid 6639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6639] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6639] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6639] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6642], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6642 ./strace-static-x86_64: Process 6642 attached [pid 6639] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 234.185488][ T27] audit: type=1800 audit(1671282457.583:913): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6642] open("./bus", O_RDONLY [pid 6639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6639] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6639] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6639] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6643 attached , parent_tid=[6643], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6643 [pid 6643] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6643] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6639] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6639] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6643] <... futex resumed>) = 0 [pid 6643] truncate("./bus", 6 [pid 6639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6639] exit_group(0) = ? [pid 6643] <... truncate resumed>) = ? [pid 6642] <... open resumed>) = ? [pid 6640] <... sendfile resumed>) = ? [pid 6643] +++ exited with 0 +++ [pid 6642] +++ exited with 0 +++ [pid 6640] +++ exited with 0 +++ [pid 6639] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6639, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./274", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./274/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./274/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./274/binderfs") = 0 [pid 5073] umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./274/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 234.538053][ T27] audit: type=1804 audit(1671282457.943:914): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/274/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 234.561458][ T27] audit: type=1800 audit(1671282457.943:915): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./274/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./274") = 0 [pid 5073] mkdir("./275", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6644 attached , child_tidptr=0x5555558b65d0) = 6644 [pid 6644] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6644] chdir("./275") = 0 [pid 6644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6644] setpgid(0, 0) = 0 [pid 6644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6644] write(3, "1000", 4) = 4 [pid 6644] close(3) = 0 [pid 6644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6644] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6644] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6644] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6645 attached , parent_tid=[6645], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6645 [pid 6644] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6644] <... futex resumed>) = 0 [pid 6645] <... set_robust_list resumed>) = 0 [pid 6645] memfd_create("syzkaller", 0 [pid 6644] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6645] <... memfd_create resumed>) = 3 [pid 6645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6645] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6645] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6645] close(3) = 0 [pid 6645] mkdir("./file0", 0777) = 0 [ 234.691762][ T6645] loop4: detected capacity change from 0 to 8192 [ 234.701883][ T6645] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.715003][ T6645] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 234.724564][ T6645] REISERFS (device loop4): using ordered data mode [ 234.731184][ T6645] reiserfs: using flush barriers [ 234.737080][ T6645] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.753373][ T6645] REISERFS (device loop4): checking transaction log (loop4) [pid 6645] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6645] chdir("./file0") = 0 [pid 6645] ioctl(4, LOOP_CLR_FD) = 0 [pid 6645] close(4) = 0 [pid 6645] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = 0 [pid 6644] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6645] <... futex resumed>) = 1 [ 234.790133][ T6645] REISERFS (device loop4): Using r5 hash to sort names [ 234.797305][ T6645] REISERFS (device loop4): using 3.5.x disk format [ 234.804348][ T6645] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6645] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6645] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = 0 [pid 6644] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6645] <... futex resumed>) = 1 [pid 6645] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6645] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... futex resumed>) = 0 [pid 6644] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6645] <... futex resumed>) = 1 [ 234.821398][ T27] audit: type=1800 audit(1671282458.223:916): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6645] sendfile(4, 5, NULL, 140737974943952 [pid 6644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6644] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6644] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6644] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6644] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6647 attached [pid 6647] set_robust_list(0x7fe8f42d09e0, 24 [pid 6644] <... clone resumed>, parent_tid=[6647], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6647 [pid 6647] <... set_robust_list resumed>) = 0 [pid 6644] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6647] open("./bus", O_RDONLY [pid 6644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6644] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6644] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6644] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6648], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6648 [pid 6644] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6644] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6648 attached [pid 6648] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6648] truncate("./bus", 6 [pid 6644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6644] exit_group(0) = ? [pid 6645] <... sendfile resumed>) = ? [pid 6647] <... open resumed>) = ? [pid 6645] +++ exited with 0 +++ [pid 6647] +++ exited with 0 +++ [pid 6648] <... truncate resumed>) = ? [pid 6648] +++ exited with 0 +++ [pid 6644] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6644, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./275", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./275/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./275/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./275/binderfs") = 0 [pid 5073] umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./275/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./275/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./275") = 0 [pid 5073] mkdir("./276", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6649 ./strace-static-x86_64: Process 6649 attached [pid 6649] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6649] chdir("./276") = 0 [pid 6649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6649] setpgid(0, 0) = 0 [pid 6649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6649] write(3, "1000", 4) = 4 [pid 6649] close(3) = 0 [pid 6649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6649] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6649] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6649] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6650], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6650 [pid 6649] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6650 attached [pid 6650] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6650] memfd_create("syzkaller", 0) = 3 [pid 6650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6650] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6650] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6650] close(3) = 0 [pid 6650] mkdir("./file0", 0777) = 0 [ 235.292306][ T6650] loop4: detected capacity change from 0 to 8192 [ 235.302253][ T6650] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 235.315255][ T6650] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 235.324575][ T6650] REISERFS (device loop4): using ordered data mode [ 235.331158][ T6650] reiserfs: using flush barriers [ 235.337171][ T6650] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.353408][ T6650] REISERFS (device loop4): checking transaction log (loop4) [pid 6650] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6650] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6650] chdir("./file0") = 0 [pid 6650] ioctl(4, LOOP_CLR_FD) = 0 [pid 6650] close(4) = 0 [pid 6650] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6650] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... futex resumed>) = 0 [pid 6649] <... futex resumed>) = 1 [pid 6650] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6649] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... open resumed>) = 4 [pid 6650] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6649] <... futex resumed>) = 0 [pid 6650] openat(-1, "/proc/self/exe", O_RDONLY [pid 6649] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... openat resumed>) = 5 [pid 6649] <... futex resumed>) = 0 [pid 6650] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... futex resumed>) = 0 [pid 6649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6650] sendfile(4, 5, NULL, 140737974943952 [pid 6649] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 235.395241][ T6650] REISERFS (device loop4): Using r5 hash to sort names [ 235.402255][ T6650] REISERFS (device loop4): using 3.5.x disk format [ 235.409303][ T6650] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6649] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6649] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6649] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6649] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6649] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6652], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6652 [pid 6649] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6652 attached [pid 6652] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6652] open("./bus", O_RDONLY [pid 6649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6649] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6649] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6649] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6653 attached , parent_tid=[6653], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6653 [pid 6649] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6653] truncate("./bus", 6 [pid 6649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6649] exit_group(0) = ? [pid 6650] <... sendfile resumed>) = ? [pid 6653] <... truncate resumed>) = ? [pid 6652] <... open resumed>) = ? [pid 6650] +++ exited with 0 +++ [pid 6653] +++ exited with 0 +++ [pid 6652] +++ exited with 0 +++ [pid 6649] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6649, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./276", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./276/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./276/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./276/binderfs") = 0 [pid 5073] umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./276/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./276/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./276") = 0 [pid 5073] mkdir("./277", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6654 ./strace-static-x86_64: Process 6654 attached [pid 6654] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6654] chdir("./277") = 0 [pid 6654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6654] setpgid(0, 0) = 0 [pid 6654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6654] write(3, "1000", 4) = 4 [pid 6654] close(3) = 0 [pid 6654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6654] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6654] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6654] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6655], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6655 [pid 6654] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6655 attached [pid 6655] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6655] memfd_create("syzkaller", 0) = 3 [pid 6655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6655] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6655] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6655] close(3) = 0 [pid 6655] mkdir("./file0", 0777) = 0 [ 235.868959][ T6655] loop4: detected capacity change from 0 to 8192 [ 235.879389][ T6655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 235.892587][ T6655] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 235.901884][ T6655] REISERFS (device loop4): using ordered data mode [ 235.908495][ T6655] reiserfs: using flush barriers [ 235.914276][ T6655] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.931179][ T6655] REISERFS (device loop4): checking transaction log (loop4) [pid 6655] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6655] chdir("./file0") = 0 [pid 6655] ioctl(4, LOOP_CLR_FD) = 0 [pid 6655] close(4) = 0 [pid 6655] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] <... futex resumed>) = 0 [pid 6654] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] <... futex resumed>) = 1 [pid 6655] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6655] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] <... futex resumed>) = 0 [pid 6654] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] <... futex resumed>) = 1 [pid 6655] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6655] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] <... futex resumed>) = 0 [pid 6654] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] <... futex resumed>) = 1 [ 235.968121][ T6655] REISERFS (device loop4): Using r5 hash to sort names [ 235.975319][ T6655] REISERFS (device loop4): using 3.5.x disk format [ 235.982182][ T6655] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6655] sendfile(4, 5, NULL, 140737974943952 [pid 6654] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6654] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6654] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6654] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6654] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6657 attached , parent_tid=[6657], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6657 [pid 6654] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6657] set_robust_list(0x7fe8f42d09e0, 24 [pid 6654] <... futex resumed>) = 0 [pid 6654] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6657] <... set_robust_list resumed>) = 0 [pid 6657] open("./bus", O_RDONLY [pid 6654] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6654] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6654] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6654] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6658 attached , parent_tid=[6658], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6658 [pid 6658] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6654] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] truncate("./bus", 6 [pid 6654] <... futex resumed>) = 0 [pid 6654] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6654] exit_group(0) = ? [pid 6655] <... sendfile resumed>) = ? [pid 6658] <... truncate resumed>) = ? [pid 6657] <... open resumed>) = ? [pid 6655] +++ exited with 0 +++ [pid 6658] +++ exited with 0 +++ [pid 6657] +++ exited with 0 +++ [pid 6654] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6654, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./277", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./277/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./277/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./277/binderfs") = 0 [pid 5073] umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./277/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./277/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./277") = 0 [pid 5073] mkdir("./278", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6659 ./strace-static-x86_64: Process 6659 attached [pid 6659] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6659] chdir("./278") = 0 [pid 6659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6659] setpgid(0, 0) = 0 [pid 6659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6659] write(3, "1000", 4) = 4 [pid 6659] close(3) = 0 [pid 6659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6659] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6659] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6659] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6660], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6660 [pid 6659] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6660 attached [pid 6660] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6660] memfd_create("syzkaller", 0) = 3 [pid 6660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6660] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6660] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6660] close(3) = 0 [pid 6660] mkdir("./file0", 0777) = 0 [ 236.451835][ T6660] loop4: detected capacity change from 0 to 8192 [ 236.461923][ T6660] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 236.474965][ T6660] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 236.484192][ T6660] REISERFS (device loop4): using ordered data mode [ 236.491178][ T6660] reiserfs: using flush barriers [ 236.497126][ T6660] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 236.513749][ T6660] REISERFS (device loop4): checking transaction log (loop4) [pid 6660] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6660] chdir("./file0") = 0 [pid 6660] ioctl(4, LOOP_CLR_FD) = 0 [pid 6660] close(4) = 0 [pid 6660] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6660] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] <... futex resumed>) = 0 [pid 6659] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] <... futex resumed>) = 0 [pid 6659] <... futex resumed>) = 1 [pid 6660] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6659] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6660] <... open resumed>) = 4 [pid 6660] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6659] <... futex resumed>) = 0 [pid 6660] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6659] <... futex resumed>) = 0 [pid 6660] openat(-1, "/proc/self/exe", O_RDONLY [pid 6659] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6660] <... openat resumed>) = 5 [pid 6660] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6660] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6659] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] <... futex resumed>) = 0 [pid 6659] <... futex resumed>) = 1 [pid 6660] sendfile(4, 5, NULL, 140737974943952 [ 236.555985][ T6660] REISERFS (device loop4): Using r5 hash to sort names [ 236.563228][ T6660] REISERFS (device loop4): using 3.5.x disk format [ 236.570226][ T6660] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6659] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6659] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6659] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6659] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6662 attached , parent_tid=[6662], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6662 [pid 6662] set_robust_list(0x7fe8f42d09e0, 24 [pid 6659] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6662] <... set_robust_list resumed>) = 0 [pid 6662] open("./bus", O_RDONLY [pid 6659] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6659] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6659] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6659] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6659] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6663 attached , parent_tid=[6663], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6663 [pid 6659] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6663] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6663] truncate("./bus", 6 [pid 6659] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6659] exit_group(0) = ? [pid 6660] <... sendfile resumed>) = ? [pid 6663] <... truncate resumed>) = ? [pid 6662] <... open resumed>) = ? [pid 6660] +++ exited with 0 +++ [pid 6663] +++ exited with 0 +++ [pid 6662] +++ exited with 0 +++ [pid 6659] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6659, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./278", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./278/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./278/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./278/binderfs") = 0 [pid 5073] umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./278/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./278/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./278/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./278") = 0 [pid 5073] mkdir("./279", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6664 ./strace-static-x86_64: Process 6664 attached [pid 6664] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6664] chdir("./279") = 0 [pid 6664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6664] setpgid(0, 0) = 0 [pid 6664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6664] write(3, "1000", 4) = 4 [pid 6664] close(3) = 0 [pid 6664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6664] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6664] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6664] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6665], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6665 [pid 6664] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6665 attached [pid 6665] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6665] memfd_create("syzkaller", 0) = 3 [pid 6665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6665] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6665] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6665] close(3) = 0 [pid 6665] mkdir("./file0", 0777) = 0 [ 237.033554][ T6665] loop4: detected capacity change from 0 to 8192 [ 237.044047][ T6665] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 237.057179][ T6665] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 237.066395][ T6665] REISERFS (device loop4): using ordered data mode [ 237.072900][ T6665] reiserfs: using flush barriers [ 237.078867][ T6665] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.095496][ T6665] REISERFS (device loop4): checking transaction log (loop4) [pid 6665] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6665] chdir("./file0") = 0 [pid 6665] ioctl(4, LOOP_CLR_FD) = 0 [pid 6665] close(4) = 0 [pid 6665] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6665] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6664] <... futex resumed>) = 0 [pid 6664] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6664] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] <... futex resumed>) = 0 [pid 6665] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6665] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] <... futex resumed>) = 0 [pid 6664] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] <... futex resumed>) = 1 [pid 6665] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6665] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6665] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6664] <... futex resumed>) = 0 [pid 6664] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6664] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] <... futex resumed>) = 0 [ 237.133276][ T6665] REISERFS (device loop4): Using r5 hash to sort names [ 237.140294][ T6665] REISERFS (device loop4): using 3.5.x disk format [ 237.147113][ T6665] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6665] sendfile(4, 5, NULL, 140737974943952 [pid 6664] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6664] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6664] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6664] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6667], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6667 [pid 6664] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6667 attached [pid 6664] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6667] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6667] open("./bus", O_RDONLY [pid 6664] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6664] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6664] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6664] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6668 attached , parent_tid=[6668], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6668 [pid 6664] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6664] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6668] truncate("./bus", 6 [pid 6664] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6664] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6664] exit_group(0) = ? [pid 6665] <... sendfile resumed>) = ? [pid 6667] <... open resumed>) = ? [pid 6665] +++ exited with 0 +++ [pid 6668] <... truncate resumed>) = ? [pid 6667] +++ exited with 0 +++ [pid 6668] +++ exited with 0 +++ [pid 6664] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6664, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./279", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./279/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./279/binderfs") = 0 [pid 5073] umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./279/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./279/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./279") = 0 [pid 5073] mkdir("./280", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6669 ./strace-static-x86_64: Process 6669 attached [pid 6669] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6669] chdir("./280") = 0 [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6669] setpgid(0, 0) = 0 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6669] write(3, "1000", 4) = 4 [pid 6669] close(3) = 0 [pid 6669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6669] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6669] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6670 attached , parent_tid=[6670], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6670 [pid 6670] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6669] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6670] memfd_create("syzkaller", 0 [pid 6669] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6670] <... memfd_create resumed>) = 3 [pid 6670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6670] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6670] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6670] close(3) = 0 [pid 6670] mkdir("./file0", 0777) = 0 [ 237.648697][ T6670] loop4: detected capacity change from 0 to 8192 [ 237.658898][ T6670] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 237.671946][ T6670] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 237.681276][ T6670] REISERFS (device loop4): using ordered data mode [ 237.687818][ T6670] reiserfs: using flush barriers [ 237.693586][ T6670] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.710161][ T6670] REISERFS (device loop4): checking transaction log (loop4) [pid 6670] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6670] chdir("./file0") = 0 [pid 6670] ioctl(4, LOOP_CLR_FD) = 0 [pid 6670] close(4) = 0 [pid 6670] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6670] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6669] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] <... open resumed>) = 4 [pid 6669] <... futex resumed>) = 0 [pid 6670] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6670] <... futex resumed>) = 0 [pid 6669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6670] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6669] <... futex resumed>) = 0 [pid 6670] openat(-1, "/proc/self/exe", O_RDONLY [pid 6669] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6670] <... openat resumed>) = 5 [pid 6670] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6670] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6669] <... futex resumed>) = 0 [pid 6670] sendfile(4, 5, NULL, 140737974943952 [ 237.752954][ T6670] REISERFS (device loop4): Using r5 hash to sort names [ 237.759999][ T6670] REISERFS (device loop4): using 3.5.x disk format [ 237.766835][ T6670] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6669] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6669] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6672], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6672 [pid 6669] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6672 attached [pid 6672] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6672] open("./bus", O_RDONLY [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6669] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6673 attached , parent_tid=[6673], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6673 [pid 6669] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6673] set_robust_list(0x7fe8f42af9e0, 24 [pid 6669] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6673] <... set_robust_list resumed>) = 0 [pid 6673] truncate("./bus", 6 [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6669] exit_group(0) = ? [pid 6672] <... open resumed>) = ? [pid 6670] <... sendfile resumed>) = ? [pid 6672] +++ exited with 0 +++ [pid 6673] <... truncate resumed>) = ? [pid 6673] +++ exited with 0 +++ [pid 6670] +++ exited with 0 +++ [pid 6669] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6669, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./280", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./280/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./280/binderfs") = 0 [pid 5073] umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./280/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [ 238.118483][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 238.118499][ T27] audit: type=1804 audit(1671282461.523:932): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/280/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 238.147823][ T27] audit: type=1800 audit(1671282461.523:933): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./280/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./280") = 0 [pid 5073] mkdir("./281", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6674 ./strace-static-x86_64: Process 6674 attached [pid 6674] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6674] chdir("./281") = 0 [pid 6674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6674] setpgid(0, 0) = 0 [pid 6674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6674] write(3, "1000", 4) = 4 [pid 6674] close(3) = 0 [pid 6674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6674] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6674] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6674] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6675], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6675 ./strace-static-x86_64: Process 6675 attached [pid 6674] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6675] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6675] memfd_create("syzkaller", 0) = 3 [pid 6675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6675] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6675] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6675] close(3) = 0 [pid 6675] mkdir("./file0", 0777) = 0 [ 238.264315][ T6675] loop4: detected capacity change from 0 to 8192 [ 238.274225][ T6675] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.287287][ T6675] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 238.296583][ T6675] REISERFS (device loop4): using ordered data mode [ 238.303095][ T6675] reiserfs: using flush barriers [ 238.309204][ T6675] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.325678][ T6675] REISERFS (device loop4): checking transaction log (loop4) [pid 6675] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6675] chdir("./file0") = 0 [pid 6675] ioctl(4, LOOP_CLR_FD) = 0 [pid 6675] close(4) = 0 [pid 6675] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6675] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6674] <... futex resumed>) = 0 [pid 6674] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6674] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6675] <... futex resumed>) = 0 [pid 6675] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6675] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] <... futex resumed>) = 0 [pid 6674] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] <... futex resumed>) = 1 [pid 6674] <... futex resumed>) = 0 [pid 6675] openat(-1, "/proc/self/exe", O_RDONLY [pid 6674] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6675] <... openat resumed>) = 5 [pid 6675] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6674] <... futex resumed>) = 0 [pid 6675] sendfile(4, 5, NULL, 140737974943952 [pid 6674] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 238.369206][ T6675] REISERFS (device loop4): Using r5 hash to sort names [ 238.376254][ T6675] REISERFS (device loop4): using 3.5.x disk format [ 238.382961][ T6675] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6674] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6674] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6674] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6674] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6677 attached , parent_tid=[6677], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6677 [pid 6674] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6677] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 238.404356][ T27] audit: type=1800 audit(1671282461.803:934): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6677] open("./bus", O_RDONLY [pid 6674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6674] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6674] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6674] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6674] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6678], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6678 [pid 6674] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6678 attached [pid 6678] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6678] truncate("./bus", 6 [pid 6674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6674] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6674] exit_group(0) = ? [pid 6675] <... sendfile resumed>) = ? [pid 6677] <... open resumed>) = ? [pid 6675] +++ exited with 0 +++ [pid 6678] <... truncate resumed>) = ? [pid 6678] +++ exited with 0 +++ [pid 6677] +++ exited with 0 +++ [pid 6674] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6674, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./281", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./281/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./281/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./281/binderfs") = 0 [ 238.738527][ T27] audit: type=1804 audit(1671282462.143:935): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/281/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 238.761756][ T27] audit: type=1800 audit(1671282462.143:936): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./281/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./281/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./281/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./281") = 0 [pid 5073] mkdir("./282", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6679 ./strace-static-x86_64: Process 6679 attached [pid 6679] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6679] chdir("./282") = 0 [pid 6679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6679] setpgid(0, 0) = 0 [pid 6679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6679] write(3, "1000", 4) = 4 [pid 6679] close(3) = 0 [pid 6679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6679] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6679] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6679] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6680], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6680 [pid 6679] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6680 attached [pid 6680] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6680] memfd_create("syzkaller", 0) = 3 [pid 6680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6680] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6680] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6680] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6680] close(3) = 0 [pid 6680] mkdir("./file0", 0777) = 0 [ 238.888870][ T6680] loop4: detected capacity change from 0 to 8192 [ 238.899046][ T6680] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.912164][ T6680] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 238.921851][ T6680] REISERFS (device loop4): using ordered data mode [ 238.928796][ T6680] reiserfs: using flush barriers [ 238.934518][ T6680] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.951014][ T6680] REISERFS (device loop4): checking transaction log (loop4) [pid 6680] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6680] chdir("./file0") = 0 [pid 6680] ioctl(4, LOOP_CLR_FD) = 0 [pid 6680] close(4) = 0 [pid 6680] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6680] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6679] <... futex resumed>) = 0 [pid 6679] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6679] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] <... futex resumed>) = 0 [pid 6680] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6680] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... futex resumed>) = 0 [pid 6679] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] <... futex resumed>) = 1 [pid 6680] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6680] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6679] <... futex resumed>) = 0 [pid 6680] sendfile(4, 5, NULL, 140737974943952 [pid 6679] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 238.996169][ T6680] REISERFS (device loop4): Using r5 hash to sort names [ 239.003096][ T6680] REISERFS (device loop4): using 3.5.x disk format [ 239.009934][ T6680] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 239.029312][ T27] audit: type=1800 audit(1671282462.433:937): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6679] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6679] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6679] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6679] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6682], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6682 ./strace-static-x86_64: Process 6682 attached [pid 6679] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6682] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6682] open("./bus", O_RDONLY [pid 6679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6679] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6679] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6679] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6683 attached [pid 6683] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6679] <... clone resumed>, parent_tid=[6683], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6683 [pid 6683] truncate("./bus", 6 [pid 6679] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6683] <... truncate resumed>) = 0 [pid 6682] <... open resumed>) = 6 [pid 6683] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... futex resumed>) = 0 [pid 6682] <... futex resumed>) = 0 [pid 6682] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6683] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6679] exit_group(0 [pid 6682] <... futex resumed>) = ? [pid 6679] <... exit_group resumed>) = ? [pid 6682] +++ exited with 0 +++ [pid 6683] <... futex resumed>) = ? [pid 6683] +++ exited with 0 +++ [pid 6680] <... sendfile resumed>) = ? [pid 6680] +++ exited with 0 +++ [pid 6679] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6679, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./282", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./282/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./282/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./282/binderfs") = 0 [ 239.349613][ T27] audit: type=1804 audit(1671282462.753:938): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/282/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./282/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./282/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./282") = 0 [pid 5073] mkdir("./283", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6684 ./strace-static-x86_64: Process 6684 attached [pid 6684] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6684] chdir("./283") = 0 [pid 6684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6684] setpgid(0, 0) = 0 [pid 6684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6684] write(3, "1000", 4) = 4 [pid 6684] close(3) = 0 [pid 6684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6684] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6684] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6684] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6685], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6685 [pid 6684] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6685 attached [pid 6685] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6685] memfd_create("syzkaller", 0) = 3 [pid 6685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6685] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6685] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6685] close(3) = 0 [pid 6685] mkdir("./file0", 0777) = 0 [ 239.503816][ T6685] loop4: detected capacity change from 0 to 8192 [ 239.514050][ T6685] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 239.527311][ T6685] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 239.536755][ T6685] REISERFS (device loop4): using ordered data mode [ 239.543292][ T6685] reiserfs: using flush barriers [ 239.549491][ T6685] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.565849][ T6685] REISERFS (device loop4): checking transaction log (loop4) [pid 6685] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6685] chdir("./file0") = 0 [pid 6685] ioctl(4, LOOP_CLR_FD) = 0 [pid 6685] close(4) = 0 [pid 6685] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... futex resumed>) = 0 [pid 6684] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6685] <... futex resumed>) = 1 [pid 6685] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6685] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... futex resumed>) = 0 [pid 6684] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6685] <... futex resumed>) = 1 [pid 6685] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6685] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... futex resumed>) = 0 [pid 6684] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6685] <... futex resumed>) = 1 [ 239.609218][ T6685] REISERFS (device loop4): Using r5 hash to sort names [ 239.616320][ T6685] REISERFS (device loop4): using 3.5.x disk format [ 239.623070][ T6685] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6685] sendfile(4, 5, NULL, 140737974943952 [pid 6684] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6684] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6684] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6684] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6684] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6687], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6687 [pid 6684] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6687 attached [pid 6687] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 239.641419][ T27] audit: type=1800 audit(1671282463.043:939): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6687] open("./bus", O_RDONLY [pid 6684] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6684] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6684] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6684] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6684] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6688], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6688 [pid 6684] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6688 attached [pid 6688] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6688] truncate("./bus", 6 [pid 6684] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6684] exit_group(0) = ? [pid 6685] <... sendfile resumed>) = ? [pid 6687] <... open resumed>) = ? [pid 6685] +++ exited with 0 +++ [pid 6688] <... truncate resumed>) = ? [pid 6687] +++ exited with 0 +++ [pid 6688] +++ exited with 0 +++ [pid 6684] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6684, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./283", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./283/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./283/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./283/binderfs") = 0 [pid 5073] umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 239.988491][ T27] audit: type=1804 audit(1671282463.393:940): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/283/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 240.013096][ T27] audit: type=1800 audit(1671282463.393:941): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./283/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./283/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./283/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./283") = 0 [pid 5073] mkdir("./284", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6689 ./strace-static-x86_64: Process 6689 attached [pid 6689] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6689] chdir("./284") = 0 [pid 6689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6689] setpgid(0, 0) = 0 [pid 6689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6689] write(3, "1000", 4) = 4 [pid 6689] close(3) = 0 [pid 6689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6689] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6689] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6689] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6690 attached [pid 6690] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6689] <... clone resumed>, parent_tid=[6690], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6690 [pid 6690] <... set_robust_list resumed>) = 0 [pid 6689] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6690] memfd_create("syzkaller", 0) = 3 [pid 6690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6690] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6690] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6690] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6690] close(3) = 0 [pid 6690] mkdir("./file0", 0777) = 0 [ 240.144029][ T6690] loop4: detected capacity change from 0 to 8192 [ 240.154076][ T6690] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.167278][ T6690] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 240.176575][ T6690] REISERFS (device loop4): using ordered data mode [ 240.183095][ T6690] reiserfs: using flush barriers [ 240.189137][ T6690] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.205757][ T6690] REISERFS (device loop4): checking transaction log (loop4) [pid 6690] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6690] chdir("./file0") = 0 [pid 6690] ioctl(4, LOOP_CLR_FD) = 0 [pid 6690] close(4) = 0 [pid 6690] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 6689] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6690] <... futex resumed>) = 1 [pid 6690] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6690] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 6689] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6690] <... futex resumed>) = 1 [pid 6690] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6690] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 6689] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6690] <... futex resumed>) = 1 [ 240.248918][ T6690] REISERFS (device loop4): Using r5 hash to sort names [ 240.256019][ T6690] REISERFS (device loop4): using 3.5.x disk format [ 240.262732][ T6690] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6690] sendfile(4, 5, NULL, 140737974943952 [pid 6689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6689] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6689] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6692 attached , parent_tid=[6692], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6692 [pid 6689] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6692] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6692] open("./bus", O_RDONLY [pid 6689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6689] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6689] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6693], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6693 [pid 6689] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6693 attached [pid 6693] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6693] truncate("./bus", 6 [pid 6689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] exit_group(0) = ? [pid 6690] <... sendfile resumed>) = ? [pid 6690] +++ exited with 0 +++ [pid 6692] <... open resumed>) = ? [pid 6692] +++ exited with 0 +++ [pid 6693] <... truncate resumed>) = ? [pid 6693] +++ exited with 0 +++ [pid 6689] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6689, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./284", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./284/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./284/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./284/binderfs") = 0 [pid 5073] umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./284/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./284/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./284") = 0 [pid 5073] mkdir("./285", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6694 ./strace-static-x86_64: Process 6694 attached [pid 6694] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6694] chdir("./285") = 0 [pid 6694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6694] setpgid(0, 0) = 0 [pid 6694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6694] write(3, "1000", 4) = 4 [pid 6694] close(3) = 0 [pid 6694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6694] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6694] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6694] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6695 attached [pid 6695] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6694] <... clone resumed>, parent_tid=[6695], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6695 [pid 6695] <... set_robust_list resumed>) = 0 [pid 6695] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6694] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6694] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 0 [pid 6695] memfd_create("syzkaller", 0) = 3 [pid 6695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6695] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6695] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6695] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6695] close(3) = 0 [pid 6695] mkdir("./file0", 0777) = 0 [ 240.749587][ T6695] loop4: detected capacity change from 0 to 8192 [ 240.759214][ T6695] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.772227][ T6695] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 240.781456][ T6695] REISERFS (device loop4): using ordered data mode [ 240.788032][ T6695] reiserfs: using flush barriers [ 240.793768][ T6695] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.810320][ T6695] REISERFS (device loop4): checking transaction log (loop4) [pid 6695] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6695] chdir("./file0") = 0 [pid 6695] ioctl(4, LOOP_CLR_FD) = 0 [pid 6695] close(4) = 0 [pid 6695] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [pid 6695] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6695] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [pid 6695] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6695] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6695] <... futex resumed>) = 1 [ 240.848250][ T6695] REISERFS (device loop4): Using r5 hash to sort names [ 240.855166][ T6695] REISERFS (device loop4): using 3.5.x disk format [ 240.862016][ T6695] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6695] sendfile(4, 5, NULL, 140737974943952 [pid 6694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6694] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6694] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6694] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6694] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6697], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6697 [pid 6694] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6697 attached [pid 6697] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6697] open("./bus", O_RDONLY [pid 6694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6694] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6694] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6694] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6694] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6698 attached [pid 6698] set_robust_list(0x7fe8f42af9e0, 24 [pid 6694] <... clone resumed>, parent_tid=[6698], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6698 [pid 6698] <... set_robust_list resumed>) = 0 [pid 6694] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] truncate("./bus", 6 [pid 6694] <... futex resumed>) = 0 [pid 6694] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6694] exit_group(0) = ? [pid 6695] <... sendfile resumed>) = ? [pid 6697] <... open resumed>) = ? [pid 6695] +++ exited with 0 +++ [pid 6698] <... truncate resumed>) = ? [pid 6697] +++ exited with 0 +++ [pid 6698] +++ exited with 0 +++ [pid 6694] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6694, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./285", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./285/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./285/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./285/binderfs") = 0 [pid 5073] umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./285/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./285/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./285") = 0 [pid 5073] mkdir("./286", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6699 ./strace-static-x86_64: Process 6699 attached [pid 6699] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6699] chdir("./286") = 0 [pid 6699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6699] setpgid(0, 0) = 0 [pid 6699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6699] write(3, "1000", 4) = 4 [pid 6699] close(3) = 0 [pid 6699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6699] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6699] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6699] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6700], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6700 [pid 6699] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6699] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6700 attached [pid 6700] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6700] memfd_create("syzkaller", 0) = 3 [pid 6700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6700] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6700] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6700] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6700] close(3) = 0 [pid 6700] mkdir("./file0", 0777) = 0 [ 241.349751][ T6700] loop4: detected capacity change from 0 to 8192 [ 241.359664][ T6700] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.372675][ T6700] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 241.381896][ T6700] REISERFS (device loop4): using ordered data mode [ 241.388454][ T6700] reiserfs: using flush barriers [ 241.394164][ T6700] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.410546][ T6700] REISERFS (device loop4): checking transaction log (loop4) [pid 6700] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6700] chdir("./file0") = 0 [pid 6700] ioctl(4, LOOP_CLR_FD) = 0 [pid 6700] close(4) = 0 [pid 6700] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] <... futex resumed>) = 0 [pid 6699] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6699] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6700] <... futex resumed>) = 0 [pid 6700] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6700] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6699] <... futex resumed>) = 0 [pid 6699] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6699] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6700] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6700] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6699] <... futex resumed>) = 0 [pid 6700] sendfile(4, 5, NULL, 140737974943952 [pid 6699] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 241.448009][ T6700] REISERFS (device loop4): Using r5 hash to sort names [ 241.454912][ T6700] REISERFS (device loop4): using 3.5.x disk format [ 241.461789][ T6700] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6699] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6699] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6699] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6699] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6699] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6702], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6702 [pid 6699] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6699] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6702 attached [pid 6702] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6702] open("./bus", O_RDONLY [pid 6699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6699] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6699] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6699] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6703 attached [pid 6703] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6703] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] <... clone resumed>, parent_tid=[6703], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6703 [pid 6699] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... futex resumed>) = 0 [pid 6699] <... futex resumed>) = 1 [pid 6703] truncate("./bus", 6 [pid 6699] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6699] exit_group(0) = ? [pid 6700] <... sendfile resumed>) = ? [pid 6703] <... truncate resumed>) = ? [pid 6702] <... open resumed>) = ? [pid 6700] +++ exited with 0 +++ [pid 6703] +++ exited with 0 +++ [pid 6702] +++ exited with 0 +++ [pid 6699] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6699, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./286", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./286/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./286/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./286/binderfs") = 0 [pid 5073] umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./286/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./286/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./286") = 0 [pid 5073] mkdir("./287", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6704 ./strace-static-x86_64: Process 6704 attached [pid 6704] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6704] chdir("./287") = 0 [pid 6704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6704] setpgid(0, 0) = 0 [pid 6704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6704] write(3, "1000", 4) = 4 [pid 6704] close(3) = 0 [pid 6704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6704] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6704] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6704] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6705 attached , parent_tid=[6705], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6705 [pid 6705] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6704] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6705] memfd_create("syzkaller", 0 [pid 6704] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6705] <... memfd_create resumed>) = 3 [pid 6705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6705] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6705] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6705] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6705] close(3) = 0 [pid 6705] mkdir("./file0", 0777) = 0 [ 241.970858][ T6705] loop4: detected capacity change from 0 to 8192 [ 241.980368][ T6705] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.993664][ T6705] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 242.002936][ T6705] REISERFS (device loop4): using ordered data mode [ 242.009517][ T6705] reiserfs: using flush barriers [ 242.015218][ T6705] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.031721][ T6705] REISERFS (device loop4): checking transaction log (loop4) [pid 6705] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6705] chdir("./file0") = 0 [pid 6705] ioctl(4, LOOP_CLR_FD) = 0 [pid 6705] close(4) = 0 [pid 6705] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6704] <... futex resumed>) = 0 [pid 6705] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6704] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... open resumed>) = 4 [pid 6704] <... futex resumed>) = 0 [pid 6705] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6705] <... futex resumed>) = 0 [pid 6704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6705] openat(-1, "/proc/self/exe", O_RDONLY [pid 6704] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... openat resumed>) = 5 [pid 6704] <... futex resumed>) = 0 [pid 6705] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6705] <... futex resumed>) = 0 [pid 6704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6705] sendfile(4, 5, NULL, 140737974943952 [pid 6704] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 242.073107][ T6705] REISERFS (device loop4): Using r5 hash to sort names [ 242.080047][ T6705] REISERFS (device loop4): using 3.5.x disk format [ 242.086872][ T6705] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6704] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6704] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6704] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6704] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6704] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6707], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6707 [pid 6704] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6707 attached [pid 6707] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6707] open("./bus", O_RDONLY [pid 6704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6704] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6704] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6704] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6708 attached , parent_tid=[6708], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6708 [pid 6704] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6708] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6708] truncate("./bus", 6 [pid 6704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6704] exit_group(0) = ? [pid 6705] <... sendfile resumed>) = ? [pid 6707] <... open resumed>) = ? [pid 6705] +++ exited with 0 +++ [pid 6708] <... truncate resumed>) = ? [pid 6707] +++ exited with 0 +++ [pid 6708] +++ exited with 0 +++ [pid 6704] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6704, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./287", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./287/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./287/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./287/binderfs") = 0 [pid 5073] umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./287/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./287/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./287/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./287") = 0 [pid 5073] mkdir("./288", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6709 ./strace-static-x86_64: Process 6709 attached [pid 6709] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6709] chdir("./288") = 0 [pid 6709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6709] setpgid(0, 0) = 0 [pid 6709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6709] write(3, "1000", 4) = 4 [pid 6709] close(3) = 0 [pid 6709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6709] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6709] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6709] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6710], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6710 [pid 6709] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6710 attached [pid 6710] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6710] memfd_create("syzkaller", 0) = 3 [pid 6710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6710] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6710] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6710] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6710] close(3) = 0 [pid 6710] mkdir("./file0", 0777) = 0 [ 242.565674][ T6710] loop4: detected capacity change from 0 to 8192 [ 242.575738][ T6710] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 242.588809][ T6710] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 242.598215][ T6710] REISERFS (device loop4): using ordered data mode [ 242.604764][ T6710] reiserfs: using flush barriers [ 242.610627][ T6710] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.627334][ T6710] REISERFS (device loop4): checking transaction log (loop4) [pid 6710] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6710] chdir("./file0") = 0 [pid 6710] ioctl(4, LOOP_CLR_FD) = 0 [pid 6710] close(4) = 0 [pid 6710] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6709] <... futex resumed>) = 0 [pid 6710] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6709] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6710] <... open resumed>) = 4 [pid 6709] <... futex resumed>) = 0 [pid 6710] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6709] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6710] <... futex resumed>) = 0 [pid 6709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6710] openat(-1, "/proc/self/exe", O_RDONLY [pid 6709] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6710] <... openat resumed>) = 5 [pid 6709] <... futex resumed>) = 0 [pid 6710] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6709] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6710] <... futex resumed>) = 0 [pid 6709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6710] sendfile(4, 5, NULL, 140737974943952 [pid 6709] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 242.670440][ T6710] REISERFS (device loop4): Using r5 hash to sort names [ 242.677620][ T6710] REISERFS (device loop4): using 3.5.x disk format [ 242.684531][ T6710] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6709] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6709] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6709] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6709] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6712], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6712 [pid 6709] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6712 attached [pid 6712] set_robust_list(0x7fe8f42d09e0, 24 [pid 6709] <... futex resumed>) = 0 [pid 6712] <... set_robust_list resumed>) = 0 [pid 6709] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6712] open("./bus", O_RDONLY [pid 6709] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6709] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6709] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6709] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6713 attached , parent_tid=[6713], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6713 [pid 6709] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6713] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6713] truncate("./bus", 6 [pid 6709] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6709] exit_group(0) = ? [pid 6712] <... open resumed>) = ? [pid 6710] <... sendfile resumed>) = ? [pid 6713] <... truncate resumed>) = ? [pid 6713] +++ exited with 0 +++ [pid 6712] +++ exited with 0 +++ [pid 6710] +++ exited with 0 +++ [pid 6709] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6709, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./288", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./288/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./288/binderfs") = 0 [pid 5073] umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./288/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./288/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./288") = 0 [pid 5073] mkdir("./289", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6714 ./strace-static-x86_64: Process 6714 attached [pid 6714] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6714] chdir("./289") = 0 [pid 6714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6714] setpgid(0, 0) = 0 [pid 6714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6714] write(3, "1000", 4) = 4 [pid 6714] close(3) = 0 [pid 6714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6714] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6714] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6714] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6715], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6715 [pid 6714] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6715 attached [pid 6715] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6715] memfd_create("syzkaller", 0) = 3 [pid 6715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6715] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6715] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6715] close(3) = 0 [pid 6715] mkdir("./file0", 0777) = 0 [ 243.200983][ T6715] loop4: detected capacity change from 0 to 8192 [ 243.210838][ T6715] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.223959][ T6715] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 243.233350][ T6715] REISERFS (device loop4): using ordered data mode [ 243.239998][ T6715] reiserfs: using flush barriers [ 243.245722][ T6715] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.262082][ T6715] REISERFS (device loop4): checking transaction log (loop4) [pid 6715] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6715] chdir("./file0") = 0 [pid 6715] ioctl(4, LOOP_CLR_FD) = 0 [pid 6715] close(4) = 0 [pid 6715] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] <... futex resumed>) = 0 [pid 6714] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] <... futex resumed>) = 1 [pid 6715] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6715] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] <... futex resumed>) = 0 [pid 6714] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] <... futex resumed>) = 1 [pid 6715] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6715] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] <... futex resumed>) = 0 [pid 6714] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] <... futex resumed>) = 1 [ 243.300444][ T6715] REISERFS (device loop4): Using r5 hash to sort names [ 243.307571][ T6715] REISERFS (device loop4): using 3.5.x disk format [ 243.314455][ T6715] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 243.331615][ T27] kauditd_printk_skb: 15 callbacks suppressed [pid 6715] sendfile(4, 5, NULL, 140737974943952 [pid 6714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6714] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6714] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6714] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6714] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6717], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6717 [pid 6714] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6717 attached [pid 6717] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 243.331628][ T27] audit: type=1800 audit(1671282466.733:957): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6717] open("./bus", O_RDONLY [pid 6714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6714] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6714] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6714] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6718 attached , parent_tid=[6718], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6718 [pid 6718] set_robust_list(0x7fe8f42af9e0, 24 [pid 6714] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... set_robust_list resumed>) = 0 [pid 6714] <... futex resumed>) = 0 [pid 6714] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6718] truncate("./bus", 6 [pid 6714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6714] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6714] exit_group(0) = ? [pid 6715] <... sendfile resumed>) = ? [pid 6717] <... open resumed>) = ? [pid 6715] +++ exited with 0 +++ [pid 6718] <... truncate resumed>) = ? [pid 6718] +++ exited with 0 +++ [pid 6717] +++ exited with 0 +++ [pid 6714] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6714, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./289", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./289/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./289/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./289/binderfs") = 0 [pid 5073] umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./289/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./289/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./289") = 0 [pid 5073] mkdir("./290", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 243.669081][ T27] audit: type=1804 audit(1671282467.073:958): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/289/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 243.692336][ T27] audit: type=1800 audit(1671282467.073:959): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6719 ./strace-static-x86_64: Process 6719 attached [pid 6719] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6719] chdir("./290") = 0 [pid 6719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6719] setpgid(0, 0) = 0 [pid 6719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6719] write(3, "1000", 4) = 4 [pid 6719] close(3) = 0 [pid 6719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6719] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6719] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6719] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6720], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6720 [pid 6719] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6720 attached [pid 6720] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6720] memfd_create("syzkaller", 0) = 3 [pid 6720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6720] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6720] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6720] close(3) = 0 [pid 6720] mkdir("./file0", 0777) = 0 [ 243.802496][ T6720] loop4: detected capacity change from 0 to 8192 [ 243.812606][ T6720] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.825659][ T6720] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 243.834888][ T6720] REISERFS (device loop4): using ordered data mode [ 243.841473][ T6720] reiserfs: using flush barriers [ 243.847224][ T6720] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.863640][ T6720] REISERFS (device loop4): checking transaction log (loop4) [pid 6720] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6720] chdir("./file0") = 0 [pid 6720] ioctl(4, LOOP_CLR_FD) = 0 [pid 6720] close(4) = 0 [pid 6720] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... futex resumed>) = 0 [pid 6719] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6720] <... futex resumed>) = 1 [pid 6720] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6720] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... futex resumed>) = 0 [pid 6719] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6720] <... futex resumed>) = 1 [pid 6720] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6720] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... futex resumed>) = 0 [pid 6719] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6720] <... futex resumed>) = 1 [ 243.901148][ T6720] REISERFS (device loop4): Using r5 hash to sort names [ 243.908256][ T6720] REISERFS (device loop4): using 3.5.x disk format [ 243.914960][ T6720] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6720] sendfile(4, 5, NULL, 140737974943952 [pid 6719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6719] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6719] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6719] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6722], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6722 [pid 6719] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6722 attached [pid 6722] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 243.932023][ T27] audit: type=1800 audit(1671282467.333:960): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6722] open("./bus", O_RDONLY [pid 6719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6719] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6719] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6719] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6723 attached [pid 6723] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6723] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6719] <... clone resumed>, parent_tid=[6723], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6723 [pid 6719] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6723] <... futex resumed>) = 0 [pid 6719] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6723] truncate("./bus", 6 [pid 6719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6719] exit_group(0) = ? [pid 6720] <... sendfile resumed>) = ? [pid 6720] +++ exited with 0 +++ [pid 6722] <... open resumed>) = ? [pid 6722] +++ exited with 0 +++ [pid 6723] <... truncate resumed>) = ? [pid 6723] +++ exited with 0 +++ [pid 6719] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6719, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./290", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./290/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./290/binderfs") = 0 [pid 5073] umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./290/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 244.288334][ T27] audit: type=1804 audit(1671282467.693:961): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/290/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 244.311680][ T27] audit: type=1800 audit(1671282467.693:962): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./290/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./290") = 0 [pid 5073] mkdir("./291", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6724 ./strace-static-x86_64: Process 6724 attached [pid 6724] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6724] chdir("./291") = 0 [pid 6724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6724] setpgid(0, 0) = 0 [pid 6724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6724] write(3, "1000", 4) = 4 [pid 6724] close(3) = 0 [pid 6724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6724] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6724] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6724] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6725 attached , parent_tid=[6725], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6725 [pid 6725] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6724] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] <... set_robust_list resumed>) = 0 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6725] memfd_create("syzkaller", 0) = 3 [pid 6725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6725] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6725] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6725] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6725] close(3) = 0 [pid 6725] mkdir("./file0", 0777) = 0 [ 244.440766][ T6725] loop4: detected capacity change from 0 to 8192 [ 244.450347][ T6725] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.463519][ T6725] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 244.472764][ T6725] REISERFS (device loop4): using ordered data mode [ 244.479415][ T6725] reiserfs: using flush barriers [ 244.485403][ T6725] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.501763][ T6725] REISERFS (device loop4): checking transaction log (loop4) [pid 6725] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6725] chdir("./file0") = 0 [pid 6725] ioctl(4, LOOP_CLR_FD) = 0 [pid 6725] close(4) = 0 [pid 6725] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [pid 6725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6725] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [pid 6725] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6725] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6724] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] <... futex resumed>) = 1 [ 244.543656][ T6725] REISERFS (device loop4): Using r5 hash to sort names [ 244.550831][ T6725] REISERFS (device loop4): using 3.5.x disk format [ 244.558072][ T6725] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6725] sendfile(4, 5, NULL, 140737974943952 [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 244.573559][ T27] audit: type=1800 audit(1671282467.973:963): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6724] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6724] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6724] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6727], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6727 [pid 6724] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6727 attached [pid 6727] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6727] open("./bus", O_RDONLY [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6724] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6724] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6724] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6728], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6728 [pid 6724] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6728 attached [pid 6728] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6728] truncate("./bus", 6 [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6724] exit_group(0) = ? [pid 6725] <... sendfile resumed>) = ? [pid 6727] <... open resumed>) = ? [pid 6725] +++ exited with 0 +++ [pid 6727] +++ exited with 0 +++ [pid 6728] <... truncate resumed>) = ? [pid 6728] +++ exited with 0 +++ [pid 6724] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6724, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./291", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./291/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./291/binderfs") = 0 [pid 5073] umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./291/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 244.948432][ T27] audit: type=1804 audit(1671282468.353:964): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/291/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 244.971617][ T27] audit: type=1800 audit(1671282468.353:965): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./291/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./291") = 0 [pid 5073] mkdir("./292", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6729 ./strace-static-x86_64: Process 6729 attached [pid 6729] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6729] chdir("./292") = 0 [pid 6729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6729] setpgid(0, 0) = 0 [pid 6729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6729] write(3, "1000", 4) = 4 [pid 6729] close(3) = 0 [pid 6729] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6729] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6729] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6729] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6730], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6730 [pid 6729] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6729] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6730 attached [pid 6730] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6730] memfd_create("syzkaller", 0) = 3 [pid 6730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6730] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6730] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6730] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6730] close(3) = 0 [pid 6730] mkdir("./file0", 0777) = 0 [ 245.096166][ T6730] loop4: detected capacity change from 0 to 8192 [ 245.106979][ T6730] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.120007][ T6730] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 245.129285][ T6730] REISERFS (device loop4): using ordered data mode [ 245.135860][ T6730] reiserfs: using flush barriers [ 245.141466][ T6730] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.157910][ T6730] REISERFS (device loop4): checking transaction log (loop4) [pid 6730] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6730] chdir("./file0") = 0 [pid 6730] ioctl(4, LOOP_CLR_FD) = 0 [pid 6730] close(4) = 0 [pid 6730] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6729] <... futex resumed>) = 0 [pid 6730] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6729] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6729] <... futex resumed>) = 0 [pid 6730] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6729] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6730] <... open resumed>) = 4 [pid 6730] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6729] <... futex resumed>) = 0 [pid 6730] openat(-1, "/proc/self/exe", O_RDONLY [pid 6729] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... openat resumed>) = 5 [pid 6729] <... futex resumed>) = 0 [pid 6730] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6730] <... futex resumed>) = 0 [pid 6729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6730] sendfile(4, 5, NULL, 140737974943952 [pid 6729] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 245.199858][ T6730] REISERFS (device loop4): Using r5 hash to sort names [ 245.206873][ T6730] REISERFS (device loop4): using 3.5.x disk format [ 245.213517][ T6730] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6729] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 245.231820][ T27] audit: type=1800 audit(1671282468.633:966): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6729] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6729] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6729] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6732], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6732 [pid 6729] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6729] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6732 attached [pid 6732] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6732] open("./bus", O_RDONLY [pid 6729] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6729] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6729] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6729] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6733 attached [pid 6733] set_robust_list(0x7fe8f42af9e0, 24 [pid 6729] <... clone resumed>, parent_tid=[6733], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6733 [pid 6733] <... set_robust_list resumed>) = 0 [pid 6729] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] truncate("./bus", 6 [pid 6729] <... futex resumed>) = 0 [pid 6729] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6729] exit_group(0) = ? [pid 6730] <... sendfile resumed>) = ? [pid 6733] <... truncate resumed>) = ? [pid 6732] <... open resumed>) = ? [pid 6730] +++ exited with 0 +++ [pid 6733] +++ exited with 0 +++ [pid 6732] +++ exited with 0 +++ [pid 6729] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6729, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] umount2("./292", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./292/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./292/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./292/binderfs") = 0 [pid 5073] umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./292/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./292/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./292") = 0 [pid 5073] mkdir("./293", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6734 ./strace-static-x86_64: Process 6734 attached [pid 6734] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6734] chdir("./293") = 0 [pid 6734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6734] setpgid(0, 0) = 0 [pid 6734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6734] write(3, "1000", 4) = 4 [pid 6734] close(3) = 0 [pid 6734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6734] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6734] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6734] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6735], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6735 [pid 6734] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6735 attached [pid 6735] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6735] memfd_create("syzkaller", 0) = 3 [pid 6735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6735] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6735] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6735] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6735] close(3) = 0 [pid 6735] mkdir("./file0", 0777) = 0 [ 245.689834][ T6735] loop4: detected capacity change from 0 to 8192 [ 245.699211][ T6735] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.712286][ T6735] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 245.721488][ T6735] REISERFS (device loop4): using ordered data mode [ 245.728101][ T6735] reiserfs: using flush barriers [ 245.733876][ T6735] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.750338][ T6735] REISERFS (device loop4): checking transaction log (loop4) [pid 6735] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6735] chdir("./file0") = 0 [pid 6735] ioctl(4, LOOP_CLR_FD) = 0 [pid 6735] close(4) = 0 [pid 6735] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6734] <... futex resumed>) = 0 [pid 6734] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] <... futex resumed>) = 1 [pid 6735] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6735] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6734] <... futex resumed>) = 0 [pid 6734] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] <... futex resumed>) = 1 [pid 6735] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6735] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6734] <... futex resumed>) = 0 [pid 6734] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] <... futex resumed>) = 1 [ 245.787806][ T6735] REISERFS (device loop4): Using r5 hash to sort names [ 245.794734][ T6735] REISERFS (device loop4): using 3.5.x disk format [ 245.801673][ T6735] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6735] sendfile(4, 5, NULL, 140737974943952 [pid 6734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6734] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6734] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6734] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6734] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6737 attached , parent_tid=[6737], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6737 [pid 6734] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6737] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6737] open("./bus", O_RDONLY [pid 6734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6734] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6734] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6734] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6738 attached , parent_tid=[6738], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6738 [pid 6738] set_robust_list(0x7fe8f42af9e0, 24 [pid 6734] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6738] <... set_robust_list resumed>) = 0 [pid 6738] truncate("./bus", 6 [pid 6734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6734] exit_group(0) = ? [pid 6735] <... sendfile resumed>) = ? [pid 6738] <... truncate resumed>) = ? [pid 6737] <... open resumed>) = ? [pid 6735] +++ exited with 0 +++ [pid 6738] +++ exited with 0 +++ [pid 6737] +++ exited with 0 +++ [pid 6734] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6734, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./293", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./293/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./293/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./293/binderfs") = 0 [pid 5073] umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./293/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./293/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./293") = 0 [pid 5073] mkdir("./294", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6739 ./strace-static-x86_64: Process 6739 attached [pid 6739] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6739] chdir("./294") = 0 [pid 6739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6739] setpgid(0, 0) = 0 [pid 6739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6739] write(3, "1000", 4) = 4 [pid 6739] close(3) = 0 [pid 6739] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6739] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6739] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6739] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6740 attached [pid 6740] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6739] <... clone resumed>, parent_tid=[6740], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6740 [pid 6740] <... set_robust_list resumed>) = 0 [pid 6740] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6739] <... futex resumed>) = 0 [pid 6739] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6740] memfd_create("syzkaller", 0) = 3 [pid 6740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6740] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6740] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6740] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6740] close(3) = 0 [pid 6740] mkdir("./file0", 0777) = 0 [ 246.252019][ T6740] loop4: detected capacity change from 0 to 8192 [ 246.261809][ T6740] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.275248][ T6740] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 246.284933][ T6740] REISERFS (device loop4): using ordered data mode [ 246.291622][ T6740] reiserfs: using flush barriers [ 246.297770][ T6740] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.314238][ T6740] REISERFS (device loop4): checking transaction log (loop4) [pid 6740] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6740] chdir("./file0") = 0 [pid 6740] ioctl(4, LOOP_CLR_FD) = 0 [pid 6740] close(4) = 0 [pid 6740] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6739] <... futex resumed>) = 0 [pid 6740] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] <... futex resumed>) = 0 [pid 6739] <... futex resumed>) = 1 [pid 6740] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6739] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6740] <... open resumed>) = 4 [pid 6740] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6739] <... futex resumed>) = 0 [pid 6740] openat(-1, "/proc/self/exe", O_RDONLY [pid 6739] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] <... openat resumed>) = 5 [pid 6739] <... futex resumed>) = 0 [pid 6740] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6739] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6740] <... futex resumed>) = 0 [pid 6739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6740] sendfile(4, 5, NULL, 140737974943952 [pid 6739] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 246.351271][ T6740] REISERFS (device loop4): Using r5 hash to sort names [ 246.358208][ T6740] REISERFS (device loop4): using 3.5.x disk format [ 246.365028][ T6740] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6739] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6739] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6739] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6739] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6742 attached [pid 6742] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6742] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] <... clone resumed>, parent_tid=[6742], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6742 [pid 6739] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] <... futex resumed>) = 0 [pid 6739] <... futex resumed>) = 1 [pid 6742] open("./bus", O_RDONLY [pid 6739] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6739] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6739] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6739] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6743 attached , parent_tid=[6743], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6743 [pid 6739] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6743] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6743] truncate("./bus", 6 [pid 6739] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6739] exit_group(0) = ? [pid 6740] <... sendfile resumed>) = ? [pid 6742] <... open resumed>) = ? [pid 6740] +++ exited with 0 +++ [pid 6743] <... truncate resumed>) = ? [pid 6742] +++ exited with 0 +++ [pid 6743] +++ exited with 0 +++ [pid 6739] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6739, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./294", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./294/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./294/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./294/binderfs") = 0 [pid 5073] umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./294/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./294/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./294") = 0 [pid 5073] mkdir("./295", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6744 ./strace-static-x86_64: Process 6744 attached [pid 6744] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6744] chdir("./295") = 0 [pid 6744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6744] setpgid(0, 0) = 0 [pid 6744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6744] write(3, "1000", 4) = 4 [pid 6744] close(3) = 0 [pid 6744] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6744] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6744] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6744] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6745], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6745 [pid 6744] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6745 attached [pid 6745] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6745] memfd_create("syzkaller", 0) = 3 [pid 6745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6745] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6745] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6745] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6745] close(3) = 0 [pid 6745] mkdir("./file0", 0777) = 0 [ 246.832123][ T6745] loop4: detected capacity change from 0 to 8192 [ 246.842060][ T6745] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.855373][ T6745] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 246.864610][ T6745] REISERFS (device loop4): using ordered data mode [ 246.871275][ T6745] reiserfs: using flush barriers [ 246.877281][ T6745] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.894108][ T6745] REISERFS (device loop4): checking transaction log (loop4) [pid 6745] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6745] chdir("./file0") = 0 [pid 6745] ioctl(4, LOOP_CLR_FD) = 0 [pid 6745] close(4) = 0 [pid 6745] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6744] <... futex resumed>) = 0 [pid 6745] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6744] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6744] <... futex resumed>) = 0 [pid 6745] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6744] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6745] <... open resumed>) = 4 [pid 6745] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6744] <... futex resumed>) = 0 [pid 6745] openat(-1, "/proc/self/exe", O_RDONLY [pid 6744] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... openat resumed>) = 5 [pid 6744] <... futex resumed>) = 0 [pid 6745] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6745] <... futex resumed>) = 0 [pid 6744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6745] sendfile(4, 5, NULL, 140737974943952 [pid 6744] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 246.931178][ T6745] REISERFS (device loop4): Using r5 hash to sort names [ 246.938120][ T6745] REISERFS (device loop4): using 3.5.x disk format [ 246.944897][ T6745] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6744] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6744] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6744] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6744] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6744] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6747 attached , parent_tid=[6747], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6747 [pid 6747] set_robust_list(0x7fe8f42d09e0, 24 [pid 6744] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] <... set_robust_list resumed>) = 0 [pid 6744] <... futex resumed>) = 0 [pid 6744] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6747] open("./bus", O_RDONLY [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6744] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6744] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6744] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6748], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6748 [pid 6744] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6748 attached [pid 6748] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6748] truncate("./bus", 6 [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6744] exit_group(0) = ? [pid 6747] <... open resumed>) = ? [pid 6745] <... sendfile resumed>) = ? [pid 6748] <... truncate resumed>) = ? [pid 6747] +++ exited with 0 +++ [pid 6745] +++ exited with 0 +++ [pid 6748] +++ exited with 0 +++ [pid 6744] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6744, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./295", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./295/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./295/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./295/binderfs") = 0 [pid 5073] umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./295/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./295/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./295/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./295") = 0 [pid 5073] mkdir("./296", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6749 ./strace-static-x86_64: Process 6749 attached [pid 6749] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6749] chdir("./296") = 0 [pid 6749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6749] setpgid(0, 0) = 0 [pid 6749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6749] write(3, "1000", 4) = 4 [pid 6749] close(3) = 0 [pid 6749] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6749] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6749] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6749] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6750], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6750 [pid 6749] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6750 attached [pid 6750] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6750] memfd_create("syzkaller", 0) = 3 [pid 6750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6750] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6750] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6750] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6750] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6750] close(3) = 0 [pid 6750] mkdir("./file0", 0777) = 0 [ 247.446277][ T6750] loop4: detected capacity change from 0 to 8192 [ 247.456658][ T6750] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 247.469708][ T6750] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 247.479531][ T6750] REISERFS (device loop4): using ordered data mode [ 247.486586][ T6750] reiserfs: using flush barriers [ 247.492471][ T6750] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.508936][ T6750] REISERFS (device loop4): checking transaction log (loop4) [pid 6750] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6750] chdir("./file0") = 0 [pid 6750] ioctl(4, LOOP_CLR_FD) = 0 [pid 6750] close(4) = 0 [pid 6750] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6749] <... futex resumed>) = 0 [pid 6750] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6749] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6750] <... open resumed>) = 4 [pid 6749] <... futex resumed>) = 0 [pid 6750] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6750] <... futex resumed>) = 0 [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6750] openat(-1, "/proc/self/exe", O_RDONLY [pid 6749] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6750] <... openat resumed>) = 5 [pid 6749] <... futex resumed>) = 0 [pid 6750] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6750] <... futex resumed>) = 0 [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6750] sendfile(4, 5, NULL, 140737974943952 [pid 6749] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 247.550671][ T6750] REISERFS (device loop4): Using r5 hash to sort names [ 247.557687][ T6750] REISERFS (device loop4): using 3.5.x disk format [ 247.564506][ T6750] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6749] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6749] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6749] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6749] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6749] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6752], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6752 [pid 6749] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6752 attached [pid 6752] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6752] open("./bus", O_RDONLY [pid 6749] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6749] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6749] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6749] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6753], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6753 [pid 6749] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6753 attached [pid 6753] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6753] truncate("./bus", 6 [pid 6749] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6749] exit_group(0) = ? [pid 6752] <... open resumed>) = ? [pid 6750] <... sendfile resumed>) = ? [pid 6752] +++ exited with 0 +++ [pid 6753] <... truncate resumed>) = ? [pid 6750] +++ exited with 0 +++ [pid 6753] +++ exited with 0 +++ [pid 6749] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6749, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./296", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./296/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./296/binderfs") = 0 [pid 5073] umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./296/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./296/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./296") = 0 [pid 5073] mkdir("./297", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6754 ./strace-static-x86_64: Process 6754 attached [pid 6754] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6754] chdir("./297") = 0 [pid 6754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6754] setpgid(0, 0) = 0 [pid 6754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6754] write(3, "1000", 4) = 4 [pid 6754] close(3) = 0 [pid 6754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6754] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6754] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6754] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6755 attached [pid 6755] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6754] <... clone resumed>, parent_tid=[6755], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6755 [pid 6755] <... set_robust_list resumed>) = 0 [pid 6754] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6755] memfd_create("syzkaller", 0) = 3 [pid 6755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6755] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6755] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6755] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6755] close(3) = 0 [pid 6755] mkdir("./file0", 0777) = 0 [ 248.087113][ T6755] loop4: detected capacity change from 0 to 8192 [ 248.097322][ T6755] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.110413][ T6755] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 248.119700][ T6755] REISERFS (device loop4): using ordered data mode [ 248.126378][ T6755] reiserfs: using flush barriers [ 248.132267][ T6755] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.148742][ T6755] REISERFS (device loop4): checking transaction log (loop4) [pid 6755] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6755] chdir("./file0") = 0 [pid 6755] ioctl(4, LOOP_CLR_FD) = 0 [pid 6755] close(4) = 0 [pid 6755] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] <... futex resumed>) = 1 [pid 6755] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6755] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] <... futex resumed>) = 1 [pid 6755] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6755] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] <... futex resumed>) = 1 [ 248.186600][ T6755] REISERFS (device loop4): Using r5 hash to sort names [ 248.193552][ T6755] REISERFS (device loop4): using 3.5.x disk format [ 248.200537][ T6755] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6755] sendfile(4, 5, NULL, 140737974943952 [pid 6754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6754] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6754] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6754] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6757 attached [pid 6757] set_robust_list(0x7fe8f42d09e0, 24 [pid 6754] <... clone resumed>, parent_tid=[6757], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6757 [pid 6754] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6757] <... set_robust_list resumed>) = 0 [pid 6754] <... futex resumed>) = 0 [pid 6754] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6757] open("./bus", O_RDONLY [pid 6754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6754] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6754] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6754] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6758], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6758 [pid 6754] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6758 attached [pid 6758] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6758] truncate("./bus", 6 [pid 6754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6754] exit_group(0) = ? [pid 6755] <... sendfile resumed>) = ? [pid 6757] <... open resumed>) = ? [pid 6755] +++ exited with 0 +++ [pid 6758] <... truncate resumed>) = ? [pid 6758] +++ exited with 0 +++ [pid 6757] +++ exited with 0 +++ [pid 6754] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6754, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./297", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./297/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./297/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./297/binderfs") = 0 [pid 5073] umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./297/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 248.558194][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 248.558209][ T27] audit: type=1804 audit(1671282471.963:982): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/297/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 248.587943][ T27] audit: type=1800 audit(1671282471.963:983): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./297/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./297") = 0 [pid 5073] mkdir("./298", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6759 ./strace-static-x86_64: Process 6759 attached [pid 6759] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6759] chdir("./298") = 0 [pid 6759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6759] setpgid(0, 0) = 0 [pid 6759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6759] write(3, "1000", 4) = 4 [pid 6759] close(3) = 0 [pid 6759] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6759] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6759] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6759] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6760 attached [pid 6760] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6759] <... clone resumed>, parent_tid=[6760], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6760 [pid 6759] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6760] <... set_robust_list resumed>) = 0 [pid 6760] memfd_create("syzkaller", 0) = 3 [pid 6760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6760] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6760] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6760] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6760] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6760] close(3) = 0 [pid 6760] mkdir("./file0", 0777) = 0 [ 248.711973][ T6760] loop4: detected capacity change from 0 to 8192 [ 248.723031][ T6760] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.736441][ T6760] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 248.745816][ T6760] REISERFS (device loop4): using ordered data mode [ 248.752375][ T6760] reiserfs: using flush barriers [ 248.758947][ T6760] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.775312][ T6760] REISERFS (device loop4): checking transaction log (loop4) [pid 6760] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6760] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6760] chdir("./file0") = 0 [pid 6760] ioctl(4, LOOP_CLR_FD) = 0 [pid 6760] close(4) = 0 [pid 6760] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6759] <... futex resumed>) = 0 [pid 6759] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6760] <... futex resumed>) = 1 [pid 6760] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6760] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6759] <... futex resumed>) = 0 [pid 6759] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6760] <... futex resumed>) = 1 [pid 6760] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6760] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6759] <... futex resumed>) = 0 [pid 6760] <... futex resumed>) = 1 [pid 6760] sendfile(4, 5, NULL, 140737974943952 [pid 6759] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 248.819599][ T6760] REISERFS (device loop4): Using r5 hash to sort names [ 248.826717][ T6760] REISERFS (device loop4): using 3.5.x disk format [ 248.833604][ T6760] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 248.852188][ T27] audit: type=1800 audit(1671282472.253:984): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6759] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6759] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6759] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6759] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6762], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6762 [pid 6759] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6762 attached [pid 6762] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6762] open("./bus", O_RDONLY [pid 6759] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6759] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6759] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6759] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6763 attached [pid 6763] set_robust_list(0x7fe8f42af9e0, 24 [pid 6759] <... clone resumed>, parent_tid=[6763], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6763 [pid 6763] <... set_robust_list resumed>) = 0 [pid 6759] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] truncate("./bus", 6 [pid 6759] <... futex resumed>) = 0 [pid 6759] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6759] exit_group(0) = ? [pid 6760] <... sendfile resumed>) = ? [pid 6760] +++ exited with 0 +++ [pid 6762] <... open resumed>) = ? [pid 6763] <... truncate resumed>) = ? [pid 6762] +++ exited with 0 +++ [pid 6763] +++ exited with 0 +++ [pid 6759] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6759, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./298", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./298/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./298/binderfs") = 0 [ 249.199074][ T27] audit: type=1804 audit(1671282472.603:985): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/298/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 249.222602][ T27] audit: type=1800 audit(1671282472.603:986): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./298/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./298/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./298") = 0 [pid 5073] mkdir("./299", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6764 ./strace-static-x86_64: Process 6764 attached [pid 6764] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6764] chdir("./299") = 0 [pid 6764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6764] setpgid(0, 0) = 0 [pid 6764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6764] write(3, "1000", 4) = 4 [pid 6764] close(3) = 0 [pid 6764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6764] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6764] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6765], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6765 [pid 6764] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6765 attached [pid 6765] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6765] memfd_create("syzkaller", 0) = 3 [pid 6765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6765] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6765] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6765] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6765] close(3) = 0 [pid 6765] mkdir("./file0", 0777) = 0 [ 249.360741][ T6765] loop4: detected capacity change from 0 to 8192 [ 249.370817][ T6765] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 249.384297][ T6765] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 249.394022][ T6765] REISERFS (device loop4): using ordered data mode [ 249.400718][ T6765] reiserfs: using flush barriers [ 249.406783][ T6765] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.423376][ T6765] REISERFS (device loop4): checking transaction log (loop4) [pid 6765] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6765] chdir("./file0") = 0 [pid 6765] ioctl(4, LOOP_CLR_FD) = 0 [pid 6765] close(4) = 0 [pid 6765] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... futex resumed>) = 0 [pid 6764] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6765] <... futex resumed>) = 1 [pid 6765] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6765] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6764] <... futex resumed>) = 0 [pid 6764] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6765] openat(-1, "/proc/self/exe", O_RDONLY [pid 6764] <... futex resumed>) = 0 [pid 6765] <... openat resumed>) = 5 [pid 6764] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6765] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6764] <... futex resumed>) = 0 [pid 6764] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6765] sendfile(4, 5, NULL, 140737974943952 [pid 6764] <... futex resumed>) = 0 [ 249.466630][ T6765] REISERFS (device loop4): Using r5 hash to sort names [ 249.473596][ T6765] REISERFS (device loop4): using 3.5.x disk format [ 249.480656][ T6765] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 249.495139][ T27] audit: type=1800 audit(1671282472.893:987): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6764] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6764] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6764] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6764] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6767], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6767 [pid 6764] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6767 attached [pid 6767] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6767] open("./bus", O_RDONLY [pid 6764] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6764] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6764] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6768], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6768 [pid 6764] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6768 attached [pid 6768] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6768] truncate("./bus", 6 [pid 6764] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6764] exit_group(0) = ? [pid 6765] <... sendfile resumed>) = ? [pid 6767] <... open resumed>) = ? [pid 6765] +++ exited with 0 +++ [pid 6767] +++ exited with 0 +++ [pid 6768] <... truncate resumed>) = ? [pid 6768] +++ exited with 0 +++ [pid 6764] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6764, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./299", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./299/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./299/binderfs") = 0 [pid 5073] umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 249.848567][ T27] audit: type=1804 audit(1671282473.253:988): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/299/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 249.871818][ T27] audit: type=1800 audit(1671282473.253:989): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./299/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./299/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./299") = 0 [pid 5073] mkdir("./300", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6769 ./strace-static-x86_64: Process 6769 attached [pid 6769] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6769] chdir("./300") = 0 [pid 6769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6769] setpgid(0, 0) = 0 [pid 6769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6769] write(3, "1000", 4) = 4 [pid 6769] close(3) = 0 [pid 6769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6769] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6769] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6769] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6770], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6770 [pid 6769] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6770 attached [pid 6770] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6770] memfd_create("syzkaller", 0) = 3 [pid 6770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6770] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6770] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6770] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6770] close(3) = 0 [pid 6770] mkdir("./file0", 0777) = 0 [ 249.998407][ T6770] loop4: detected capacity change from 0 to 8192 [ 250.008985][ T6770] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 250.022112][ T6770] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 250.031409][ T6770] REISERFS (device loop4): using ordered data mode [ 250.037971][ T6770] reiserfs: using flush barriers [ 250.043613][ T6770] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 250.060169][ T6770] REISERFS (device loop4): checking transaction log (loop4) [pid 6770] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6770] chdir("./file0") = 0 [pid 6770] ioctl(4, LOOP_CLR_FD) = 0 [pid 6770] close(4) = 0 [pid 6770] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6770] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6769] <... futex resumed>) = 0 [pid 6769] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6769] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = 0 [pid 6770] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6770] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... futex resumed>) = 0 [pid 6769] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = 1 [pid 6770] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6770] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... futex resumed>) = 0 [pid 6769] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6770] <... futex resumed>) = 1 [ 250.103006][ T6770] REISERFS (device loop4): Using r5 hash to sort names [ 250.110091][ T6770] REISERFS (device loop4): using 3.5.x disk format [ 250.117001][ T6770] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6770] sendfile(4, 5, NULL, 140737974943952 [pid 6769] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6769] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 250.134645][ T27] audit: type=1800 audit(1671282473.533:990): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6769] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6769] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6772 attached [pid 6772] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6772] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6769] <... clone resumed>, parent_tid=[6772], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6772 [pid 6769] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] <... futex resumed>) = 0 [pid 6769] <... futex resumed>) = 1 [pid 6772] open("./bus", O_RDONLY [pid 6769] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6769] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6769] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6769] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6769] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6773], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6773 ./strace-static-x86_64: Process 6773 attached [pid 6769] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6773] set_robust_list(0x7fe8f42af9e0, 24 [pid 6769] <... futex resumed>) = 0 [pid 6773] <... set_robust_list resumed>) = 0 [pid 6769] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] truncate("./bus", 6 [pid 6769] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6769] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6769] exit_group(0) = ? [pid 6770] <... sendfile resumed>) = ? [pid 6772] <... open resumed>) = ? [pid 6770] +++ exited with 0 +++ [pid 6773] <... truncate resumed>) = ? [pid 6773] +++ exited with 0 +++ [pid 6772] +++ exited with 0 +++ [pid 6769] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6769, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./300", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./300/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./300/binderfs") = 0 [pid 5073] umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 250.469018][ T27] audit: type=1804 audit(1671282473.873:991): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/300/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./300/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./300/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./300/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./300") = 0 [pid 5073] mkdir("./301", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6774 ./strace-static-x86_64: Process 6774 attached [pid 6774] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6774] chdir("./301") = 0 [pid 6774] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6774] setpgid(0, 0) = 0 [pid 6774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6774] write(3, "1000", 4) = 4 [pid 6774] close(3) = 0 [pid 6774] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6774] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6774] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6774] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6775], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6775 [pid 6774] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6774] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6775 attached [pid 6775] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6775] memfd_create("syzkaller", 0) = 3 [pid 6775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6775] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6775] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6775] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6775] close(3) = 0 [pid 6775] mkdir("./file0", 0777) = 0 [ 250.601312][ T6775] loop4: detected capacity change from 0 to 8192 [ 250.611986][ T6775] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 250.625090][ T6775] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 250.634750][ T6775] REISERFS (device loop4): using ordered data mode [ 250.641389][ T6775] reiserfs: using flush barriers [ 250.647373][ T6775] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 250.664605][ T6775] REISERFS (device loop4): checking transaction log (loop4) [pid 6775] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6775] chdir("./file0") = 0 [pid 6775] ioctl(4, LOOP_CLR_FD) = 0 [pid 6775] close(4) = 0 [pid 6775] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6774] <... futex resumed>) = 0 [pid 6775] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6774] <... futex resumed>) = 0 [pid 6775] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6774] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6775] <... open resumed>) = 4 [pid 6775] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6774] <... futex resumed>) = 0 [pid 6775] openat(-1, "/proc/self/exe", O_RDONLY [pid 6774] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] <... openat resumed>) = 5 [pid 6774] <... futex resumed>) = 0 [pid 6775] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6775] <... futex resumed>) = 0 [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6775] sendfile(4, 5, NULL, 140737974943952 [pid 6774] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 250.706745][ T6775] REISERFS (device loop4): Using r5 hash to sort names [ 250.713946][ T6775] REISERFS (device loop4): using 3.5.x disk format [ 250.720882][ T6775] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6774] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6774] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6774] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6774] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6774] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6777 attached , parent_tid=[6777], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6777 [pid 6774] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6777] set_robust_list(0x7fe8f42d09e0, 24 [pid 6774] <... futex resumed>) = 0 [pid 6777] <... set_robust_list resumed>) = 0 [pid 6774] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6777] open("./bus", O_RDONLY [pid 6774] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6774] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6774] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6774] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6774] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6778], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6778 [pid 6774] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6774] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6778 attached [pid 6778] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6778] truncate("./bus", 6 [pid 6774] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6774] exit_group(0) = ? [pid 6775] <... sendfile resumed>) = ? [pid 6777] <... open resumed>) = ? [pid 6778] <... truncate resumed>) = ? [pid 6775] +++ exited with 0 +++ [pid 6777] +++ exited with 0 +++ [pid 6778] +++ exited with 0 +++ [pid 6774] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6774, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./301", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./301/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./301/binderfs") = 0 [pid 5073] umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./301/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./301/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./301") = 0 [pid 5073] mkdir("./302", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6779 ./strace-static-x86_64: Process 6779 attached [pid 6779] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6779] chdir("./302") = 0 [pid 6779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6779] setpgid(0, 0) = 0 [pid 6779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6779] write(3, "1000", 4) = 4 [pid 6779] close(3) = 0 [pid 6779] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6779] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6779] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6779] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6780], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6780 [pid 6779] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6780 attached [pid 6780] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6780] memfd_create("syzkaller", 0) = 3 [pid 6780] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6780] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6780] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6780] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6780] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6780] close(3) = 0 [pid 6780] mkdir("./file0", 0777) = 0 [ 251.210076][ T6780] loop4: detected capacity change from 0 to 8192 [ 251.220560][ T6780] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.234012][ T6780] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 251.243403][ T6780] REISERFS (device loop4): using ordered data mode [ 251.249988][ T6780] reiserfs: using flush barriers [ 251.256340][ T6780] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.272646][ T6780] REISERFS (device loop4): checking transaction log (loop4) [pid 6780] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6780] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6780] chdir("./file0") = 0 [pid 6780] ioctl(4, LOOP_CLR_FD) = 0 [pid 6780] close(4) = 0 [pid 6780] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6780] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6779] <... futex resumed>) = 0 [pid 6779] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6780] <... futex resumed>) = 0 [pid 6779] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6780] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6780] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6780] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6779] <... futex resumed>) = 0 [pid 6779] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6780] <... futex resumed>) = 0 [pid 6780] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6779] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6780] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6779] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] <... futex resumed>) = 0 [pid 6779] <... futex resumed>) = 0 [pid 6779] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 251.315214][ T6780] REISERFS (device loop4): Using r5 hash to sort names [ 251.322302][ T6780] REISERFS (device loop4): using 3.5.x disk format [ 251.329120][ T6780] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6780] sendfile(4, 5, NULL, 140737974943952 [pid 6779] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6779] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6779] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6779] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6782 attached , parent_tid=[6782], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6782 [pid 6782] set_robust_list(0x7fe8f42d09e0, 24 [pid 6779] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] <... set_robust_list resumed>) = 0 [pid 6779] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6782] open("./bus", O_RDONLY [pid 6779] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6779] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6779] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6779] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6783 attached , parent_tid=[6783], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6783 [pid 6779] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6783] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6783] truncate("./bus", 6 [pid 6779] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6779] exit_group(0) = ? [pid 6780] <... sendfile resumed>) = ? [pid 6780] +++ exited with 0 +++ [pid 6782] <... open resumed>) = ? [pid 6782] +++ exited with 0 +++ [pid 6783] <... truncate resumed>) = ? [pid 6783] +++ exited with 0 +++ [pid 6779] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6779, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./302", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./302/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./302/binderfs") = 0 [pid 5073] umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./302/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./302/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./302") = 0 [pid 5073] mkdir("./303", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6784 ./strace-static-x86_64: Process 6784 attached [pid 6784] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6784] chdir("./303") = 0 [pid 6784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6784] setpgid(0, 0) = 0 [pid 6784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6784] write(3, "1000", 4) = 4 [pid 6784] close(3) = 0 [pid 6784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6784] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6784] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6784] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6785], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6785 [pid 6784] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6785 attached [pid 6785] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6785] memfd_create("syzkaller", 0) = 3 [pid 6785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6785] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6785] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6785] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6785] close(3) = 0 [pid 6785] mkdir("./file0", 0777) = 0 [ 251.834988][ T6785] loop4: detected capacity change from 0 to 8192 [ 251.845116][ T6785] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.858122][ T6785] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 251.867361][ T6785] REISERFS (device loop4): using ordered data mode [ 251.873871][ T6785] reiserfs: using flush barriers [ 251.879543][ T6785] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.896414][ T6785] REISERFS (device loop4): checking transaction log (loop4) [pid 6785] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6785] chdir("./file0") = 0 [pid 6785] ioctl(4, LOOP_CLR_FD) = 0 [pid 6785] close(4) = 0 [pid 6785] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = 0 [pid 6784] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6785] <... futex resumed>) = 1 [pid 6785] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6785] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = 0 [pid 6784] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6785] <... futex resumed>) = 1 [pid 6785] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6785] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = 0 [pid 6784] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6785] <... futex resumed>) = 1 [ 251.933055][ T6785] REISERFS (device loop4): Using r5 hash to sort names [ 251.940177][ T6785] REISERFS (device loop4): using 3.5.x disk format [ 251.947216][ T6785] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6785] sendfile(4, 5, NULL, 140737974943952 [pid 6784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6784] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6784] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6784] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6787], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6787 [pid 6784] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6787 attached [pid 6787] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6787] open("./bus", O_RDONLY [pid 6784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6784] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6784] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6784] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6788 attached , parent_tid=[6788], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6788 [pid 6784] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6784] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6788] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6788] truncate("./bus", 6 [pid 6784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6784] exit_group(0) = ? [pid 6787] <... open resumed>) = ? [pid 6785] <... sendfile resumed>) = ? [pid 6788] <... truncate resumed>) = ? [pid 6787] +++ exited with 0 +++ [pid 6788] +++ exited with 0 +++ [pid 6785] +++ exited with 0 +++ [pid 6784] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6784, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./303", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./303/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./303/binderfs") = 0 [pid 5073] umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./303/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./303/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./303") = 0 [pid 5073] mkdir("./304", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6789 ./strace-static-x86_64: Process 6789 attached [pid 6789] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6789] chdir("./304") = 0 [pid 6789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6789] setpgid(0, 0) = 0 [pid 6789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6789] write(3, "1000", 4) = 4 [pid 6789] close(3) = 0 [pid 6789] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6789] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6789] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6789] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6790 attached , parent_tid=[6790], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6790 [pid 6790] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6789] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] <... set_robust_list resumed>) = 0 [pid 6789] <... futex resumed>) = 0 [pid 6790] memfd_create("syzkaller", 0) = 3 [pid 6789] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6790] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6790] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6790] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6790] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6790] close(3) = 0 [pid 6790] mkdir("./file0", 0777) = 0 [ 252.415274][ T6790] loop4: detected capacity change from 0 to 8192 [ 252.425368][ T6790] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.438530][ T6790] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 252.448117][ T6790] REISERFS (device loop4): using ordered data mode [ 252.454632][ T6790] reiserfs: using flush barriers [ 252.460881][ T6790] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.477221][ T6790] REISERFS (device loop4): checking transaction log (loop4) [pid 6790] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6790] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6790] chdir("./file0") = 0 [pid 6790] ioctl(4, LOOP_CLR_FD) = 0 [pid 6790] close(4) = 0 [pid 6790] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6789] <... futex resumed>) = 0 [pid 6789] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6790] <... futex resumed>) = 1 [pid 6790] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6790] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6789] <... futex resumed>) = 0 [pid 6789] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6790] <... futex resumed>) = 1 [pid 6790] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6790] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6789] <... futex resumed>) = 0 [pid 6789] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6790] <... futex resumed>) = 1 [ 252.515191][ T6790] REISERFS (device loop4): Using r5 hash to sort names [ 252.522366][ T6790] REISERFS (device loop4): using 3.5.x disk format [ 252.529354][ T6790] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6790] sendfile(4, 5, NULL, 140737974943952 [pid 6789] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6789] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6789] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6789] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6789] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6792 attached , parent_tid=[6792], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6792 [pid 6789] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6792] set_robust_list(0x7fe8f42d09e0, 24 [pid 6789] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6792] <... set_robust_list resumed>) = 0 [pid 6792] open("./bus", O_RDONLY [pid 6789] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6789] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6789] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6789] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6793], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6793 ./strace-static-x86_64: Process 6793 attached [pid 6789] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6793] set_robust_list(0x7fe8f42af9e0, 24 [pid 6789] <... futex resumed>) = 0 [pid 6793] <... set_robust_list resumed>) = 0 [pid 6789] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6793] truncate("./bus", 6 [pid 6789] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6789] exit_group(0) = ? [pid 6792] <... open resumed>) = ? [pid 6790] <... sendfile resumed>) = ? [pid 6793] <... truncate resumed>) = ? [pid 6792] +++ exited with 0 +++ [pid 6793] +++ exited with 0 +++ [pid 6790] +++ exited with 0 +++ [pid 6789] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6789, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./304", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./304/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./304/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./304/binderfs") = 0 [pid 5073] umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./304/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./304/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./304") = 0 [pid 5073] mkdir("./305", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6794 attached , child_tidptr=0x5555558b65d0) = 6794 [pid 6794] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6794] chdir("./305") = 0 [pid 6794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6794] setpgid(0, 0) = 0 [pid 6794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6794] write(3, "1000", 4) = 4 [pid 6794] close(3) = 0 [pid 6794] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6794] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6794] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6794] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6795 attached , parent_tid=[6795], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6795 [pid 6795] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6794] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6795] <... set_robust_list resumed>) = 0 [pid 6795] memfd_create("syzkaller", 0) = 3 [pid 6795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6795] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6795] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6795] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6795] close(3) = 0 [pid 6795] mkdir("./file0", 0777) = 0 [ 252.987216][ T6795] loop4: detected capacity change from 0 to 8192 [ 252.998555][ T6795] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 253.011591][ T6795] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 253.020901][ T6795] REISERFS (device loop4): using ordered data mode [ 253.027469][ T6795] reiserfs: using flush barriers [ 253.033402][ T6795] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.049909][ T6795] REISERFS (device loop4): checking transaction log (loop4) [pid 6795] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6795] chdir("./file0") = 0 [pid 6795] ioctl(4, LOOP_CLR_FD) = 0 [pid 6795] close(4) = 0 [pid 6795] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] <... futex resumed>) = 0 [pid 6794] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6795] <... futex resumed>) = 1 [pid 6795] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6795] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] <... futex resumed>) = 0 [pid 6794] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6795] <... futex resumed>) = 1 [pid 6795] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6795] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6795] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6794] <... futex resumed>) = 0 [pid 6794] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] <... futex resumed>) = 0 [pid 6794] <... futex resumed>) = 1 [pid 6794] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 253.088415][ T6795] REISERFS (device loop4): Using r5 hash to sort names [ 253.095355][ T6795] REISERFS (device loop4): using 3.5.x disk format [ 253.102212][ T6795] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6795] sendfile(4, 5, NULL, 140737974943952 [pid 6794] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6794] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6794] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6794] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6797 attached , parent_tid=[6797], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6797 [pid 6794] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6797] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6797] open("./bus", O_RDONLY [pid 6794] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6794] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6794] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6794] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6798 attached , parent_tid=[6798], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6798 [pid 6798] set_robust_list(0x7fe8f42af9e0, 24 [pid 6794] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6798] <... set_robust_list resumed>) = 0 [pid 6794] <... futex resumed>) = 0 [pid 6798] truncate("./bus", 6 [pid 6794] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6794] exit_group(0) = ? [pid 6797] <... open resumed>) = ? [pid 6795] <... sendfile resumed>) = ? [pid 6798] <... truncate resumed>) = ? [pid 6797] +++ exited with 0 +++ [pid 6795] +++ exited with 0 +++ [pid 6798] +++ exited with 0 +++ [pid 6794] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6794, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./305", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./305/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./305/binderfs") = 0 [pid 5073] umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./305/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./305/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./305") = 0 [pid 5073] mkdir("./306", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6799 ./strace-static-x86_64: Process 6799 attached [pid 6799] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6799] chdir("./306") = 0 [pid 6799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6799] setpgid(0, 0) = 0 [pid 6799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6799] write(3, "1000", 4) = 4 [pid 6799] close(3) = 0 [pid 6799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6799] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6799] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6799] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6800], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6800 [pid 6799] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6800 attached [pid 6800] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6800] memfd_create("syzkaller", 0) = 3 [pid 6800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6800] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6800] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6800] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6800] close(3) = 0 [pid 6800] mkdir("./file0", 0777) = 0 [ 253.586034][ T6800] loop4: detected capacity change from 0 to 8192 [ 253.595697][ T6800] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 253.608875][ T6800] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 253.618213][ T6800] REISERFS (device loop4): using ordered data mode [ 253.624756][ T6800] reiserfs: using flush barriers [ 253.630648][ T6800] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.647059][ T6800] REISERFS (device loop4): checking transaction log (loop4) [pid 6800] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6800] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6800] chdir("./file0") = 0 [pid 6800] ioctl(4, LOOP_CLR_FD) = 0 [pid 6800] close(4) = 0 [pid 6800] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] <... futex resumed>) = 0 [pid 6799] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6800] <... futex resumed>) = 1 [ 253.684471][ T6800] REISERFS (device loop4): Using r5 hash to sort names [ 253.691505][ T6800] REISERFS (device loop4): using 3.5.x disk format [ 253.698446][ T6800] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 253.711722][ T27] kauditd_printk_skb: 16 callbacks suppressed [pid 6800] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6800] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6799] <... futex resumed>) = 0 [pid 6800] openat(-1, "/proc/self/exe", O_RDONLY [pid 6799] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... openat resumed>) = 5 [pid 6799] <... futex resumed>) = 0 [pid 6800] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6800] <... futex resumed>) = 0 [pid 6799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6800] sendfile(4, 5, NULL, 140737974943952 [pid 6799] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 253.711738][ T27] audit: type=1800 audit(1671282477.113:1008): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6799] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6799] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6799] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6799] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6802 attached , parent_tid=[6802], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6802 [pid 6799] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6802] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6802] open("./bus", O_RDONLY [pid 6799] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6799] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6799] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6799] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6803 attached [pid 6803] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6803] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] <... clone resumed>, parent_tid=[6803], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6803 [pid 6799] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6803] <... futex resumed>) = 0 [pid 6799] <... futex resumed>) = 1 [pid 6803] truncate("./bus", 6 [pid 6799] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6799] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6799] exit_group(0) = ? [pid 6802] <... open resumed>) = ? [pid 6800] <... sendfile resumed>) = ? [pid 6802] +++ exited with 0 +++ [pid 6803] <... truncate resumed>) = ? [pid 6803] +++ exited with 0 +++ [pid 6800] +++ exited with 0 +++ [pid 6799] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6799, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./306", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./306/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./306/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./306/binderfs") = 0 [pid 5073] umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./306/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 254.058159][ T27] audit: type=1804 audit(1671282477.463:1009): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/306/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 254.081395][ T27] audit: type=1800 audit(1671282477.463:1010): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./306/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./306/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./306") = 0 [pid 5073] mkdir("./307", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6804 ./strace-static-x86_64: Process 6804 attached [pid 6804] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6804] chdir("./307") = 0 [pid 6804] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6804] setpgid(0, 0) = 0 [pid 6804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6804] write(3, "1000", 4) = 4 [pid 6804] close(3) = 0 [pid 6804] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6804] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6804] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6804] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6805], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6805 [pid 6804] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6805 attached [pid 6805] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6805] memfd_create("syzkaller", 0) = 3 [pid 6805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6805] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6805] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6805] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6805] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6805] close(3) = 0 [pid 6805] mkdir("./file0", 0777) = 0 [ 254.202558][ T6805] loop4: detected capacity change from 0 to 8192 [ 254.212654][ T6805] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.226024][ T6805] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 254.235196][ T6805] REISERFS (device loop4): using ordered data mode [ 254.241740][ T6805] reiserfs: using flush barriers [ 254.247601][ T6805] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.264036][ T6805] REISERFS (device loop4): checking transaction log (loop4) [pid 6805] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6805] chdir("./file0") = 0 [pid 6805] ioctl(4, LOOP_CLR_FD) = 0 [pid 6805] close(4) = 0 [pid 6805] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6804] <... futex resumed>) = 0 [pid 6805] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6804] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6804] <... futex resumed>) = 0 [pid 6805] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6804] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6805] <... open resumed>) = 4 [pid 6805] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6804] <... futex resumed>) = 0 [pid 6805] openat(-1, "/proc/self/exe", O_RDONLY [pid 6804] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... openat resumed>) = 5 [pid 6804] <... futex resumed>) = 0 [pid 6805] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6805] <... futex resumed>) = 0 [pid 6804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6805] sendfile(4, 5, NULL, 140737974943952 [pid 6804] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 254.301861][ T6805] REISERFS (device loop4): Using r5 hash to sort names [ 254.308838][ T6805] REISERFS (device loop4): using 3.5.x disk format [ 254.315677][ T6805] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6804] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6804] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [ 254.334319][ T27] audit: type=1800 audit(1671282477.733:1011): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6804] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6804] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6807], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6807 [pid 6804] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6807 attached [pid 6807] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6807] open("./bus", O_RDONLY [pid 6804] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6804] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6804] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6804] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6808], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6808 [pid 6804] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6808 attached [pid 6808] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6808] truncate("./bus", 6 [pid 6804] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6804] exit_group(0) = ? [pid 6805] <... sendfile resumed>) = ? [pid 6808] <... truncate resumed>) = ? [pid 6807] <... open resumed>) = ? [pid 6805] +++ exited with 0 +++ [pid 6808] +++ exited with 0 +++ [pid 6807] +++ exited with 0 +++ [pid 6804] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6804, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./307", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./307/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./307/binderfs") = 0 [pid 5073] umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./307/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./307/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./307") = 0 [pid 5073] mkdir("./308", 0777) = 0 [ 254.668916][ T27] audit: type=1804 audit(1671282478.073:1012): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/307/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 254.692165][ T27] audit: type=1800 audit(1671282478.073:1013): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6809 ./strace-static-x86_64: Process 6809 attached [pid 6809] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6809] chdir("./308") = 0 [pid 6809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6809] setpgid(0, 0) = 0 [pid 6809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6809] write(3, "1000", 4) = 4 [pid 6809] close(3) = 0 [pid 6809] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6809] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6809] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6809] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6810 attached , parent_tid=[6810], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6810 [pid 6809] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6810] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6810] memfd_create("syzkaller", 0) = 3 [pid 6810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6810] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6810] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6810] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6810] close(3) = 0 [pid 6810] mkdir("./file0", 0777) = 0 [ 254.808386][ T6810] loop4: detected capacity change from 0 to 8192 [ 254.818269][ T6810] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.831345][ T6810] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 254.840720][ T6810] REISERFS (device loop4): using ordered data mode [ 254.847385][ T6810] reiserfs: using flush barriers [ 254.853476][ T6810] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.870101][ T6810] REISERFS (device loop4): checking transaction log (loop4) [pid 6810] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6810] chdir("./file0") = 0 [pid 6810] ioctl(4, LOOP_CLR_FD) = 0 [pid 6810] close(4) = 0 [pid 6810] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6809] <... futex resumed>) = 0 [pid 6810] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6809] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] <... open resumed>) = 4 [pid 6809] <... futex resumed>) = 0 [pid 6810] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6809] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6810] <... futex resumed>) = 0 [pid 6809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6810] openat(-1, "/proc/self/exe", O_RDONLY [pid 6809] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] <... openat resumed>) = 5 [pid 6809] <... futex resumed>) = 0 [pid 6810] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6809] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6810] <... futex resumed>) = 0 [pid 6809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6810] sendfile(4, 5, NULL, 140737974943952 [pid 6809] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 254.912286][ T6810] REISERFS (device loop4): Using r5 hash to sort names [ 254.919288][ T6810] REISERFS (device loop4): using 3.5.x disk format [ 254.926203][ T6810] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6809] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6809] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6809] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6809] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6812 attached [pid 6812] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6809] <... clone resumed>, parent_tid=[6812], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6812 [pid 6809] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 254.942748][ T27] audit: type=1800 audit(1671282478.343:1014): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6812] open("./bus", O_RDONLY [pid 6809] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6809] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6809] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6809] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6813], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6813 [pid 6809] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6813 attached [pid 6813] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6813] truncate("./bus", 6 [pid 6809] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6809] exit_group(0) = ? [pid 6813] <... truncate resumed>) = ? [pid 6812] <... open resumed>) = ? [pid 6810] <... sendfile resumed>) = ? [pid 6813] +++ exited with 0 +++ [pid 6812] +++ exited with 0 +++ [pid 6810] +++ exited with 0 +++ [pid 6809] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6809, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./308", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./308/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./308/binderfs") = 0 [ 255.288459][ T27] audit: type=1804 audit(1671282478.693:1015): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/308/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./308/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./308/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./308") = 0 [pid 5073] mkdir("./309", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6814 ./strace-static-x86_64: Process 6814 attached [pid 6814] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6814] chdir("./309") = 0 [pid 6814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6814] setpgid(0, 0) = 0 [pid 6814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6814] write(3, "1000", 4) = 4 [ 255.327676][ T27] audit: type=1800 audit(1671282478.693:1016): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6814] close(3) = 0 [pid 6814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6814] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6814] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6814] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6815 attached , parent_tid=[6815], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6815 [pid 6814] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6815] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6815] memfd_create("syzkaller", 0) = 3 [pid 6815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6815] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6815] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6815] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6815] close(3) = 0 [pid 6815] mkdir("./file0", 0777) = 0 [ 255.445076][ T6815] loop4: detected capacity change from 0 to 8192 [ 255.454783][ T6815] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 255.468117][ T6815] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 255.477393][ T6815] REISERFS (device loop4): using ordered data mode [ 255.483909][ T6815] reiserfs: using flush barriers [ 255.489894][ T6815] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 255.506277][ T6815] REISERFS (device loop4): checking transaction log (loop4) [pid 6815] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6815] chdir("./file0") = 0 [pid 6815] ioctl(4, LOOP_CLR_FD) = 0 [pid 6815] close(4) = 0 [pid 6815] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6815] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] <... futex resumed>) = 0 [pid 6814] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6814] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6815] <... futex resumed>) = 0 [ 255.548577][ T6815] REISERFS (device loop4): Using r5 hash to sort names [ 255.555717][ T6815] REISERFS (device loop4): using 3.5.x disk format [ 255.562414][ T6815] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6815] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6815] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6815] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] <... futex resumed>) = 0 [pid 6814] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6815] <... futex resumed>) = 0 [pid 6814] <... futex resumed>) = 1 [pid 6815] openat(-1, "/proc/self/exe", O_RDONLY [pid 6814] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6815] <... openat resumed>) = 5 [pid 6815] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6815] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] <... futex resumed>) = 0 [pid 6814] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6815] <... futex resumed>) = 0 [pid 6814] <... futex resumed>) = 1 [pid 6815] sendfile(4, 5, NULL, 140737974943952 [ 255.580289][ T27] audit: type=1800 audit(1671282478.983:1017): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6814] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6814] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6814] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6814] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6817 attached [pid 6817] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6817] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6814] <... clone resumed>, parent_tid=[6817], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6817 [pid 6814] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6817] <... futex resumed>) = 0 [pid 6817] open("./bus", O_RDONLY [pid 6814] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6814] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6814] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6814] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6814] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6818 attached , parent_tid=[6818], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6818 [pid 6814] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6814] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6818] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6818] truncate("./bus", 6 [pid 6814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6814] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6814] exit_group(0) = ? [pid 6815] <... sendfile resumed>) = ? [pid 6815] +++ exited with 0 +++ [pid 6817] <... open resumed>) = ? [pid 6817] +++ exited with 0 +++ [pid 6818] <... truncate resumed>) = ? [pid 6818] +++ exited with 0 +++ [pid 6814] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6814, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./309", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./309/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./309/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./309/binderfs") = 0 [pid 5073] umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./309/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./309/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./309/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./309") = 0 [pid 5073] mkdir("./310", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6819 ./strace-static-x86_64: Process 6819 attached [pid 6819] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6819] chdir("./310") = 0 [pid 6819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6819] setpgid(0, 0) = 0 [pid 6819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6819] write(3, "1000", 4) = 4 [pid 6819] close(3) = 0 [pid 6819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6819] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6819] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6819] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6820 attached [pid 6820] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6819] <... clone resumed>, parent_tid=[6820], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6820 [pid 6820] <... set_robust_list resumed>) = 0 [pid 6820] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6819] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6820] <... futex resumed>) = 0 [pid 6819] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6820] memfd_create("syzkaller", 0) = 3 [pid 6820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6820] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6820] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6820] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6820] close(3) = 0 [pid 6820] mkdir("./file0", 0777) = 0 [ 256.103873][ T6820] loop4: detected capacity change from 0 to 8192 [ 256.114051][ T6820] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 256.127137][ T6820] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 256.136512][ T6820] REISERFS (device loop4): using ordered data mode [ 256.143074][ T6820] reiserfs: using flush barriers [ 256.149776][ T6820] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.166327][ T6820] REISERFS (device loop4): checking transaction log (loop4) [pid 6820] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6820] chdir("./file0") = 0 [pid 6820] ioctl(4, LOOP_CLR_FD) = 0 [pid 6820] close(4) = 0 [pid 6820] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... futex resumed>) = 0 [pid 6819] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6820] <... futex resumed>) = 1 [pid 6820] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6820] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... futex resumed>) = 0 [pid 6819] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6820] <... futex resumed>) = 1 [pid 6820] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6820] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... futex resumed>) = 0 [pid 6819] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6820] <... futex resumed>) = 1 [ 256.209476][ T6820] REISERFS (device loop4): Using r5 hash to sort names [ 256.216544][ T6820] REISERFS (device loop4): using 3.5.x disk format [ 256.223211][ T6820] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6820] sendfile(4, 5, NULL, 140737974943952 [pid 6819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6819] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6819] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6819] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6822], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6822 ./strace-static-x86_64: Process 6822 attached [pid 6819] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6822] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6822] open("./bus", O_RDONLY [pid 6819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6819] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6819] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6819] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6823 attached , parent_tid=[6823], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6823 [pid 6819] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6823] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6823] truncate("./bus", 6 [pid 6819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6819] exit_group(0) = ? [pid 6820] <... sendfile resumed>) = ? [pid 6822] <... open resumed>) = ? [pid 6820] +++ exited with 0 +++ [pid 6823] <... truncate resumed>) = ? [pid 6822] +++ exited with 0 +++ [pid 6823] +++ exited with 0 +++ [pid 6819] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6819, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./310", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./310/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./310/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./310/binderfs") = 0 [pid 5073] umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./310/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./310/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./310/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./310") = 0 [pid 5073] mkdir("./311", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6824 ./strace-static-x86_64: Process 6824 attached [pid 6824] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6824] chdir("./311") = 0 [pid 6824] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6824] setpgid(0, 0) = 0 [pid 6824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6824] write(3, "1000", 4) = 4 [pid 6824] close(3) = 0 [pid 6824] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6824] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6824] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6824] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6825 attached [pid 6825] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6824] <... clone resumed>, parent_tid=[6825], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6825 [pid 6825] <... set_robust_list resumed>) = 0 [pid 6825] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6824] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6824] <... futex resumed>) = 0 [pid 6824] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6825] memfd_create("syzkaller", 0) = 3 [pid 6825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6825] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6825] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6825] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6825] close(3) = 0 [pid 6825] mkdir("./file0", 0777) = 0 [ 256.687613][ T6825] loop4: detected capacity change from 0 to 8192 [ 256.698194][ T6825] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 256.711260][ T6825] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 256.720554][ T6825] REISERFS (device loop4): using ordered data mode [ 256.727171][ T6825] reiserfs: using flush barriers [ 256.733312][ T6825] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.749803][ T6825] REISERFS (device loop4): checking transaction log (loop4) [pid 6825] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6825] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6825] chdir("./file0") = 0 [pid 6825] ioctl(4, LOOP_CLR_FD) = 0 [pid 6825] close(4) = 0 [pid 6825] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] <... futex resumed>) = 0 [pid 6824] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6825] <... futex resumed>) = 1 [pid 6825] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6825] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] <... futex resumed>) = 0 [pid 6824] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6825] <... futex resumed>) = 1 [pid 6825] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6825] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] <... futex resumed>) = 0 [pid 6824] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6825] <... futex resumed>) = 1 [ 256.791920][ T6825] REISERFS (device loop4): Using r5 hash to sort names [ 256.798982][ T6825] REISERFS (device loop4): using 3.5.x disk format [ 256.806008][ T6825] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6825] sendfile(4, 5, NULL, 140737974943952 [pid 6824] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6824] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6824] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6824] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6827 attached , parent_tid=[6827], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6827 [pid 6827] set_robust_list(0x7fe8f42d09e0, 24 [pid 6824] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6827] <... set_robust_list resumed>) = 0 [pid 6827] open("./bus", O_RDONLY [pid 6824] <... futex resumed>) = 0 [pid 6824] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6824] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6824] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6824] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6828 attached , parent_tid=[6828], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6828 [pid 6824] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6828] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6828] truncate("./bus", 6 [pid 6824] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6824] exit_group(0) = ? [pid 6825] <... sendfile resumed>) = ? [pid 6828] <... truncate resumed>) = ? [pid 6827] <... open resumed>) = ? [pid 6825] +++ exited with 0 +++ [pid 6828] +++ exited with 0 +++ [pid 6827] +++ exited with 0 +++ [pid 6824] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6824, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./311", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./311/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./311/binderfs") = 0 [pid 5073] umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./311/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./311/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./311/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./311") = 0 [pid 5073] mkdir("./312", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6829 ./strace-static-x86_64: Process 6829 attached [pid 6829] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6829] chdir("./312") = 0 [pid 6829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6829] setpgid(0, 0) = 0 [pid 6829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6829] write(3, "1000", 4) = 4 [pid 6829] close(3) = 0 [pid 6829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6829] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6829] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6829] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6830], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6830 [pid 6829] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6830 attached [pid 6830] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6830] memfd_create("syzkaller", 0) = 3 [pid 6830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6830] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6830] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6830] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6830] close(3) = 0 [pid 6830] mkdir("./file0", 0777) = 0 [ 257.260728][ T6830] loop4: detected capacity change from 0 to 8192 [ 257.270753][ T6830] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 257.284216][ T6830] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 257.294108][ T6830] REISERFS (device loop4): using ordered data mode [ 257.300846][ T6830] reiserfs: using flush barriers [ 257.306829][ T6830] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 257.323835][ T6830] REISERFS (device loop4): checking transaction log (loop4) [pid 6830] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6830] chdir("./file0") = 0 [pid 6830] ioctl(4, LOOP_CLR_FD) = 0 [pid 6830] close(4) = 0 [pid 6830] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6830] <... futex resumed>) = 1 [pid 6830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6830] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6830] <... futex resumed>) = 1 [pid 6830] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6830] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6829] <... futex resumed>) = 0 [pid 6830] sendfile(4, 5, NULL, 140737974943952 [pid 6829] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 257.367376][ T6830] REISERFS (device loop4): Using r5 hash to sort names [ 257.374334][ T6830] REISERFS (device loop4): using 3.5.x disk format [ 257.381580][ T6830] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6829] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6829] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6829] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6829] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6829] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6832 attached , parent_tid=[6832], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6832 [pid 6829] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6832] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6832] open("./bus", O_RDONLY [pid 6829] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6829] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6829] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6829] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6829] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6833 attached , parent_tid=[6833], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6833 [pid 6833] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6829] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] truncate("./bus", 6 [pid 6829] <... futex resumed>) = 0 [pid 6829] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6829] exit_group(0) = ? [pid 6830] <... sendfile resumed>) = ? [pid 6833] <... truncate resumed>) = ? [pid 6832] <... open resumed>) = ? [pid 6830] +++ exited with 0 +++ [pid 6833] +++ exited with 0 +++ [pid 6832] +++ exited with 0 +++ [pid 6829] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6829, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./312", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./312/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./312/binderfs") = 0 [pid 5073] umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./312/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./312/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./312/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./312") = 0 [pid 5073] mkdir("./313", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6834 ./strace-static-x86_64: Process 6834 attached [pid 6834] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6834] chdir("./313") = 0 [pid 6834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6834] setpgid(0, 0) = 0 [pid 6834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6834] write(3, "1000", 4) = 4 [pid 6834] close(3) = 0 [pid 6834] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6834] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6834] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6834] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6835], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6835 [pid 6834] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6834] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6835 attached [pid 6835] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6835] memfd_create("syzkaller", 0) = 3 [pid 6835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6835] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6835] close(3) = 0 [pid 6835] mkdir("./file0", 0777) = 0 [ 257.836837][ T6835] loop4: detected capacity change from 0 to 8192 [ 257.846965][ T6835] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 257.860314][ T6835] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 257.869966][ T6835] REISERFS (device loop4): using ordered data mode [ 257.876686][ T6835] reiserfs: using flush barriers [ 257.882545][ T6835] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 257.899136][ T6835] REISERFS (device loop4): checking transaction log (loop4) [pid 6835] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6835] chdir("./file0") = 0 [pid 6835] ioctl(4, LOOP_CLR_FD) = 0 [pid 6835] close(4) = 0 [pid 6835] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6835] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6834] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... open resumed>) = 4 [pid 6834] <... futex resumed>) = 0 [pid 6835] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6835] <... futex resumed>) = 0 [pid 6834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6835] openat(-1, "/proc/self/exe", O_RDONLY [pid 6834] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... openat resumed>) = 5 [pid 6834] <... futex resumed>) = 0 [pid 6835] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6835] <... futex resumed>) = 0 [pid 6834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6835] sendfile(4, 5, NULL, 140737974943952 [pid 6834] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 257.941195][ T6835] REISERFS (device loop4): Using r5 hash to sort names [ 257.948183][ T6835] REISERFS (device loop4): using 3.5.x disk format [ 257.955004][ T6835] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6834] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6834] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6834] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6834] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6837 attached , parent_tid=[6837], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6837 [pid 6837] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6837] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6834] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6834] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6837] <... futex resumed>) = 0 [pid 6837] open("./bus", O_RDONLY [pid 6834] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6834] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6834] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6834] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6838], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6838 [pid 6834] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6834] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6838 attached [pid 6838] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6838] truncate("./bus", 6 [pid 6834] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6834] exit_group(0) = ? [pid 6835] <... sendfile resumed>) = ? [pid 6837] <... open resumed>) = ? [pid 6835] +++ exited with 0 +++ [pid 6838] <... truncate resumed>) = ? [pid 6837] +++ exited with 0 +++ [pid 6838] +++ exited with 0 +++ [pid 6834] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6834, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./313", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./313/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./313/binderfs") = 0 [pid 5073] umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./313/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./313/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./313/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./313") = 0 [pid 5073] mkdir("./314", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6839 ./strace-static-x86_64: Process 6839 attached [pid 6839] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6839] chdir("./314") = 0 [pid 6839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6839] setpgid(0, 0) = 0 [pid 6839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6839] write(3, "1000", 4) = 4 [pid 6839] close(3) = 0 [pid 6839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6839] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6839] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6839] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6840], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6840 [pid 6839] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6840 attached [pid 6840] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6840] memfd_create("syzkaller", 0) = 3 [pid 6840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6840] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6840] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6840] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6840] close(3) = 0 [pid 6840] mkdir("./file0", 0777) = 0 [ 258.443982][ T6840] loop4: detected capacity change from 0 to 8192 [ 258.454024][ T6840] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.467340][ T6840] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 258.476799][ T6840] REISERFS (device loop4): using ordered data mode [ 258.483329][ T6840] reiserfs: using flush barriers [ 258.489973][ T6840] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.506583][ T6840] REISERFS (device loop4): checking transaction log (loop4) [pid 6840] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6840] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6840] chdir("./file0") = 0 [pid 6840] ioctl(4, LOOP_CLR_FD) = 0 [pid 6840] close(4) = 0 [pid 6840] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6840] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6839] <... futex resumed>) = 0 [pid 6839] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] <... futex resumed>) = 0 [pid 6839] <... futex resumed>) = 1 [pid 6840] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6839] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6840] <... open resumed>) = 4 [pid 6840] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6839] <... futex resumed>) = 0 [pid 6839] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] openat(-1, "/proc/self/exe", O_RDONLY [pid 6839] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6840] <... openat resumed>) = 5 [pid 6840] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6839] <... futex resumed>) = 0 [pid 6840] sendfile(4, 5, NULL, 140737974943952 [pid 6839] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 258.549678][ T6840] REISERFS (device loop4): Using r5 hash to sort names [ 258.556721][ T6840] REISERFS (device loop4): using 3.5.x disk format [ 258.563622][ T6840] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6839] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6839] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6839] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6839] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6839] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6842], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6842 [pid 6839] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6842 attached [pid 6842] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6842] open("./bus", O_RDONLY [pid 6839] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6839] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6839] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6839] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6843 attached , parent_tid=[6843], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6843 [pid 6839] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6843] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6843] truncate("./bus", 6 [pid 6839] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6839] exit_group(0) = ? [pid 6842] <... open resumed>) = ? [pid 6842] +++ exited with 0 +++ [pid 6843] <... truncate resumed>) = ? [pid 6843] +++ exited with 0 +++ [pid 6840] <... sendfile resumed>) = ? [pid 6840] +++ exited with 0 +++ [pid 6839] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6839, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./314", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./314/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./314/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 258.958061][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 258.958077][ T27] audit: type=1804 audit(1671282482.363:1033): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/314/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] unlink("./314/binderfs") = 0 [pid 5073] umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 258.988905][ T27] audit: type=1800 audit(1671282482.363:1034): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./314/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./314/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./314/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./314") = 0 [pid 5073] mkdir("./315", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6844 ./strace-static-x86_64: Process 6844 attached [pid 6844] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6844] chdir("./315") = 0 [pid 6844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6844] setpgid(0, 0) = 0 [pid 6844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6844] write(3, "1000", 4) = 4 [pid 6844] close(3) = 0 [pid 6844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6844] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6844] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6844] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6845 attached , parent_tid=[6845], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6845 [pid 6845] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6845] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6844] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6844] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6845] <... futex resumed>) = 0 [pid 6845] memfd_create("syzkaller", 0) = 3 [pid 6845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6845] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6845] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6845] close(3) = 0 [pid 6845] mkdir("./file0", 0777) = 0 [ 259.122458][ T6845] loop4: detected capacity change from 0 to 8192 [ 259.132139][ T6845] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.145788][ T6845] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 259.155059][ T6845] REISERFS (device loop4): using ordered data mode [ 259.161726][ T6845] reiserfs: using flush barriers [ 259.167701][ T6845] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.184364][ T6845] REISERFS (device loop4): checking transaction log (loop4) [pid 6845] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6845] chdir("./file0") = 0 [pid 6845] ioctl(4, LOOP_CLR_FD) = 0 [pid 6845] close(4) = 0 [pid 6845] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... futex resumed>) = 0 [pid 6844] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... futex resumed>) = 1 [pid 6845] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6845] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... futex resumed>) = 0 [pid 6844] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... futex resumed>) = 1 [pid 6845] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6845] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6844] <... futex resumed>) = 0 [pid 6845] sendfile(4, 5, NULL, 140737974943952 [pid 6844] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 259.221567][ T6845] REISERFS (device loop4): Using r5 hash to sort names [ 259.228748][ T6845] REISERFS (device loop4): using 3.5.x disk format [ 259.235556][ T6845] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 259.254096][ T27] audit: type=1800 audit(1671282482.653:1035): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6844] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6844] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6844] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6844] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6847], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6847 [pid 6844] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6847 attached [pid 6847] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6847] open("./bus", O_RDONLY [pid 6844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6844] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6844] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6844] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6848 attached , parent_tid=[6848], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6848 [pid 6844] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6848] set_robust_list(0x7fe8f42af9e0, 24 [pid 6844] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6848] <... set_robust_list resumed>) = 0 [pid 6848] truncate("./bus", 6 [pid 6844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6844] exit_group(0) = ? [pid 6845] <... sendfile resumed>) = ? [pid 6847] <... open resumed>) = ? [pid 6845] +++ exited with 0 +++ [pid 6847] +++ exited with 0 +++ [pid 6848] <... truncate resumed>) = ? [pid 6848] +++ exited with 0 +++ [pid 6844] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6844, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./315", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./315/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./315/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./315/binderfs") = 0 [pid 5073] umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./315/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./315/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [ 259.628494][ T27] audit: type=1804 audit(1671282483.033:1036): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/315/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 259.651859][ T27] audit: type=1800 audit(1671282483.033:1037): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] rmdir("./315/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./315") = 0 [pid 5073] mkdir("./316", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6849 ./strace-static-x86_64: Process 6849 attached [pid 6849] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6849] chdir("./316") = 0 [pid 6849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6849] setpgid(0, 0) = 0 [pid 6849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6849] write(3, "1000", 4) = 4 [pid 6849] close(3) = 0 [pid 6849] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6849] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6849] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6849] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6850 attached , parent_tid=[6850], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6850 [pid 6850] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6850] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6849] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6849] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6850] <... futex resumed>) = 0 [pid 6850] memfd_create("syzkaller", 0) = 3 [pid 6850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6850] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6850] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6850] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6850] close(3) = 0 [pid 6850] mkdir("./file0", 0777) = 0 [ 259.774149][ T6850] loop4: detected capacity change from 0 to 8192 [ 259.784466][ T6850] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.797616][ T6850] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 259.807053][ T6850] REISERFS (device loop4): using ordered data mode [ 259.813705][ T6850] reiserfs: using flush barriers [ 259.819892][ T6850] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.837320][ T6850] REISERFS (device loop4): checking transaction log (loop4) [pid 6850] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6850] chdir("./file0") = 0 [pid 6850] ioctl(4, LOOP_CLR_FD) = 0 [pid 6850] close(4) = 0 [pid 6850] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6849] <... futex resumed>) = 0 [pid 6849] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6850] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 259.881665][ T6850] REISERFS (device loop4): Using r5 hash to sort names [ 259.889168][ T6850] REISERFS (device loop4): using 3.5.x disk format [ 259.896352][ T6850] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6849] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6850] <... open resumed>) = 4 [pid 6850] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6849] <... futex resumed>) = 0 [pid 6850] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6849] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6850] openat(-1, "/proc/self/exe", O_RDONLY [pid 6849] <... futex resumed>) = 0 [pid 6850] <... openat resumed>) = 5 [pid 6849] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6850] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6850] <... futex resumed>) = 0 [pid 6849] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6850] sendfile(4, 5, NULL, 140737974943952 [pid 6849] <... futex resumed>) = 0 [ 259.920979][ T27] audit: type=1800 audit(1671282483.323:1038): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6849] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6849] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6849] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6849] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6852 attached , parent_tid=[6852], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6852 [pid 6849] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6852] set_robust_list(0x7fe8f42d09e0, 24 [pid 6849] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6852] <... set_robust_list resumed>) = 0 [pid 6852] open("./bus", O_RDONLY [pid 6849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6849] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6849] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6849] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6849] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6853 attached , parent_tid=[6853], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6853 [pid 6853] set_robust_list(0x7fe8f42af9e0, 24 [pid 6849] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6853] <... set_robust_list resumed>) = 0 [pid 6849] <... futex resumed>) = 0 [pid 6849] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6853] truncate("./bus", 6 [pid 6849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6849] exit_group(0) = ? [pid 6850] <... sendfile resumed>) = ? [pid 6852] <... open resumed>) = ? [pid 6850] +++ exited with 0 +++ [pid 6852] +++ exited with 0 +++ [pid 6853] <... truncate resumed>) = ? [pid 6853] +++ exited with 0 +++ [pid 6849] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6849, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./316", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./316/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./316/binderfs") = 0 [ 260.268392][ T27] audit: type=1804 audit(1671282483.673:1039): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/316/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 260.292188][ T27] audit: type=1800 audit(1671282483.673:1040): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./316/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./316/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./316/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./316") = 0 [pid 5073] mkdir("./317", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6854 ./strace-static-x86_64: Process 6854 attached [pid 6854] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6854] chdir("./317") = 0 [pid 6854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6854] setpgid(0, 0) = 0 [pid 6854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6854] write(3, "1000", 4) = 4 [pid 6854] close(3) = 0 [pid 6854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6854] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6854] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6854] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6855 attached , parent_tid=[6855], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6855 [pid 6854] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6855] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6854] <... futex resumed>) = 0 [pid 6855] <... set_robust_list resumed>) = 0 [pid 6854] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6855] memfd_create("syzkaller", 0) = 3 [pid 6855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6855] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6855] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6855] close(3) = 0 [pid 6855] mkdir("./file0", 0777) = 0 [ 260.433735][ T6855] loop4: detected capacity change from 0 to 8192 [ 260.443696][ T6855] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 260.456813][ T6855] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 260.466089][ T6855] REISERFS (device loop4): using ordered data mode [ 260.472603][ T6855] reiserfs: using flush barriers [ 260.478638][ T6855] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.495208][ T6855] REISERFS (device loop4): checking transaction log (loop4) [pid 6855] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6855] chdir("./file0") = 0 [pid 6855] ioctl(4, LOOP_CLR_FD) = 0 [pid 6855] close(4) = 0 [pid 6855] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6854] <... futex resumed>) = 0 [pid 6854] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6855] <... futex resumed>) = 1 [pid 6855] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6855] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6855] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6854] <... futex resumed>) = 0 [pid 6854] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6855] <... futex resumed>) = 0 [pid 6854] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6855] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6855] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6854] <... futex resumed>) = 0 [pid 6855] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6854] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6854] <... futex resumed>) = 0 [pid 6855] sendfile(4, 5, NULL, 140737974943952 [ 260.534576][ T6855] REISERFS (device loop4): Using r5 hash to sort names [ 260.541721][ T6855] REISERFS (device loop4): using 3.5.x disk format [ 260.548732][ T6855] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 260.562309][ T27] audit: type=1800 audit(1671282483.963:1041): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6854] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6854] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6854] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6854] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6857 attached , parent_tid=[6857], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6857 [pid 6854] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] set_robust_list(0x7fe8f42d09e0, 24 [pid 6854] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6857] <... set_robust_list resumed>) = 0 [pid 6857] open("./bus", O_RDONLY [pid 6854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6854] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6854] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6854] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6858 attached , parent_tid=[6858], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6858 [pid 6858] set_robust_list(0x7fe8f42af9e0, 24 [pid 6854] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6858] <... set_robust_list resumed>) = 0 [pid 6854] <... futex resumed>) = 0 [pid 6858] truncate("./bus", 6 [pid 6854] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6854] exit_group(0) = ? [pid 6855] <... sendfile resumed>) = ? [pid 6857] <... open resumed>) = ? [pid 6855] +++ exited with 0 +++ [pid 6857] +++ exited with 0 +++ [pid 6858] <... truncate resumed>) = ? [pid 6858] +++ exited with 0 +++ [pid 6854] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6854, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./317", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./317/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./317/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./317/binderfs") = 0 [ 260.948735][ T27] audit: type=1804 audit(1671282484.353:1042): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/317/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./317/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./317/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./317/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./317") = 0 [pid 5073] mkdir("./318", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6859 ./strace-static-x86_64: Process 6859 attached [pid 6859] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6859] chdir("./318") = 0 [pid 6859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6859] setpgid(0, 0) = 0 [pid 6859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6859] write(3, "1000", 4) = 4 [pid 6859] close(3) = 0 [pid 6859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6859] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6859] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6859] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6860 attached , parent_tid=[6860], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6860 [pid 6859] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6860] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6860] memfd_create("syzkaller", 0) = 3 [pid 6860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6860] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6860] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6860] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6860] close(3) = 0 [pid 6860] mkdir("./file0", 0777) = 0 [ 261.092273][ T6860] loop4: detected capacity change from 0 to 8192 [ 261.103198][ T6860] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 261.116381][ T6860] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 261.125705][ T6860] REISERFS (device loop4): using ordered data mode [ 261.132428][ T6860] reiserfs: using flush barriers [ 261.138534][ T6860] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.155223][ T6860] REISERFS (device loop4): checking transaction log (loop4) [pid 6860] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6860] chdir("./file0") = 0 [pid 6860] ioctl(4, LOOP_CLR_FD) = 0 [pid 6860] close(4) = 0 [pid 6860] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6860] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] <... futex resumed>) = 0 [pid 6859] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6859] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] <... futex resumed>) = 0 [pid 6860] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6860] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6859] <... futex resumed>) = 0 [pid 6860] openat(-1, "/proc/self/exe", O_RDONLY [pid 6859] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... openat resumed>) = 5 [pid 6859] <... futex resumed>) = 0 [pid 6860] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6859] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6860] <... futex resumed>) = 0 [pid 6859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6860] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6860] <... futex resumed>) = 0 [pid 6859] <... futex resumed>) = 1 [pid 6860] sendfile(4, 5, NULL, 140737974943952 [ 261.192163][ T6860] REISERFS (device loop4): Using r5 hash to sort names [ 261.199287][ T6860] REISERFS (device loop4): using 3.5.x disk format [ 261.206186][ T6860] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6859] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6859] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6859] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6859] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6862 attached , parent_tid=[6862], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6862 [pid 6862] set_robust_list(0x7fe8f42d09e0, 24 [pid 6859] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6862] <... set_robust_list resumed>) = 0 [pid 6862] open("./bus", O_RDONLY [pid 6859] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6859] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6859] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6859] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6863 attached [pid 6863] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6863] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] <... clone resumed>, parent_tid=[6863], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6863 [pid 6859] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6863] <... futex resumed>) = 0 [pid 6859] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6863] truncate("./bus", 6 [pid 6859] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6859] exit_group(0) = ? [pid 6860] <... sendfile resumed>) = ? [pid 6860] +++ exited with 0 +++ [pid 6862] <... open resumed>) = ? [pid 6862] +++ exited with 0 +++ [pid 6863] <... truncate resumed>) = ? [pid 6863] +++ exited with 0 +++ [pid 6859] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6859, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./318", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./318/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./318/binderfs") = 0 [pid 5073] umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./318/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./318/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./318/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./318") = 0 [pid 5073] mkdir("./319", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6864 ./strace-static-x86_64: Process 6864 attached [pid 6864] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6864] chdir("./319") = 0 [pid 6864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6864] setpgid(0, 0) = 0 [pid 6864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6864] write(3, "1000", 4) = 4 [pid 6864] close(3) = 0 [pid 6864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6864] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6864] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6864] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6865], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6865 [pid 6864] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6865 attached [pid 6865] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6865] memfd_create("syzkaller", 0) = 3 [pid 6865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6865] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6865] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6865] close(3) = 0 [pid 6865] mkdir("./file0", 0777) = 0 [ 261.718008][ T6865] loop4: detected capacity change from 0 to 8192 [ 261.727933][ T6865] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 261.741108][ T6865] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 261.750733][ T6865] REISERFS (device loop4): using ordered data mode [ 261.757385][ T6865] reiserfs: using flush barriers [ 261.763214][ T6865] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.780921][ T6865] REISERFS (device loop4): checking transaction log (loop4) [pid 6865] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6865] chdir("./file0") = 0 [pid 6865] ioctl(4, LOOP_CLR_FD) = 0 [pid 6865] close(4) = 0 [pid 6865] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... futex resumed>) = 0 [pid 6864] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6865] <... futex resumed>) = 1 [pid 6865] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6865] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... futex resumed>) = 0 [pid 6864] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6865] <... futex resumed>) = 1 [pid 6865] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6865] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... futex resumed>) = 0 [pid 6864] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6865] <... futex resumed>) = 1 [ 261.818886][ T6865] REISERFS (device loop4): Using r5 hash to sort names [ 261.826151][ T6865] REISERFS (device loop4): using 3.5.x disk format [ 261.833103][ T6865] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6865] sendfile(4, 5, NULL, 140737974943952 [pid 6864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6864] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6864] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6864] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6867 attached , parent_tid=[6867], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6867 [pid 6864] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6867] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6867] open("./bus", O_RDONLY [pid 6864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6864] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6864] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6864] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6868], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6868 [pid 6864] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6864] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6868 attached [pid 6868] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6868] truncate("./bus", 6 [pid 6864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6864] exit_group(0) = ? [pid 6865] <... sendfile resumed>) = ? [pid 6867] <... open resumed>) = ? [pid 6868] <... truncate resumed>) = ? [pid 6867] +++ exited with 0 +++ [pid 6865] +++ exited with 0 +++ [pid 6868] +++ exited with 0 +++ [pid 6864] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6864, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./319", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./319/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./319/binderfs") = 0 [pid 5073] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./319/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./319/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./319/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./319") = 0 [pid 5073] mkdir("./320", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6869 ./strace-static-x86_64: Process 6869 attached [pid 6869] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6869] chdir("./320") = 0 [pid 6869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6869] setpgid(0, 0) = 0 [pid 6869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6869] write(3, "1000", 4) = 4 [pid 6869] close(3) = 0 [pid 6869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6869] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6869] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6869] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6870 attached , parent_tid=[6870], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6870 [pid 6869] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6869] <... futex resumed>) = 0 [pid 6870] <... set_robust_list resumed>) = 0 [pid 6869] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6870] memfd_create("syzkaller", 0) = 3 [pid 6870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6870] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6870] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6870] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6870] close(3) = 0 [pid 6870] mkdir("./file0", 0777) = 0 [ 262.320985][ T6870] loop4: detected capacity change from 0 to 8192 [ 262.331281][ T6870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.344344][ T6870] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 262.353554][ T6870] REISERFS (device loop4): using ordered data mode [ 262.360106][ T6870] reiserfs: using flush barriers [ 262.366178][ T6870] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.383055][ T6870] REISERFS (device loop4): checking transaction log (loop4) [pid 6870] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6870] chdir("./file0") = 0 [pid 6870] ioctl(4, LOOP_CLR_FD) = 0 [pid 6870] close(4) = 0 [pid 6870] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6870] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6869] <... futex resumed>) = 0 [pid 6869] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6869] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6870] <... futex resumed>) = 0 [pid 6870] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6870] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6869] <... futex resumed>) = 0 [pid 6870] openat(-1, "/proc/self/exe", O_RDONLY [pid 6869] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] <... openat resumed>) = 5 [pid 6869] <... futex resumed>) = 0 [pid 6870] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6869] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6870] <... futex resumed>) = 0 [pid 6869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6870] sendfile(4, 5, NULL, 140737974943952 [pid 6869] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 262.426183][ T6870] REISERFS (device loop4): Using r5 hash to sort names [ 262.433136][ T6870] REISERFS (device loop4): using 3.5.x disk format [ 262.440150][ T6870] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6869] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6869] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6869] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6869] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6872], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6872 [pid 6869] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6872 attached [pid 6872] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6872] open("./bus", O_RDONLY [pid 6869] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6869] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6869] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6869] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6869] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6873 attached , parent_tid=[6873], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6873 [pid 6873] set_robust_list(0x7fe8f42af9e0, 24 [pid 6869] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] <... set_robust_list resumed>) = 0 [pid 6869] <... futex resumed>) = 0 [pid 6869] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6873] truncate("./bus", 6 [pid 6869] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6869] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6869] exit_group(0) = ? [pid 6872] <... open resumed>) = ? [pid 6870] <... sendfile resumed>) = ? [pid 6873] <... truncate resumed>) = ? [pid 6872] +++ exited with 0 +++ [pid 6870] +++ exited with 0 +++ [pid 6873] +++ exited with 0 +++ [pid 6869] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6869, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./320/binderfs") = 0 [pid 5073] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./320/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./320/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./320") = 0 [pid 5073] mkdir("./321", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6874 ./strace-static-x86_64: Process 6874 attached [pid 6874] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6874] chdir("./321") = 0 [pid 6874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6874] setpgid(0, 0) = 0 [pid 6874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6874] write(3, "1000", 4) = 4 [pid 6874] close(3) = 0 [pid 6874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6874] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6874] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6874] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6875 attached , parent_tid=[6875], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6875 [pid 6875] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6874] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6875] <... set_robust_list resumed>) = 0 [pid 6874] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6875] memfd_create("syzkaller", 0) = 3 [pid 6875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6875] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6875] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6875] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6875] close(3) = 0 [pid 6875] mkdir("./file0", 0777) = 0 [ 262.954438][ T6875] loop4: detected capacity change from 0 to 8192 [ 262.964255][ T6875] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.977266][ T6875] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 262.986593][ T6875] REISERFS (device loop4): using ordered data mode [ 262.993109][ T6875] reiserfs: using flush barriers [ 262.998945][ T6875] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 263.015290][ T6875] REISERFS (device loop4): checking transaction log (loop4) [pid 6875] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6875] chdir("./file0") = 0 [pid 6875] ioctl(4, LOOP_CLR_FD) = 0 [pid 6875] close(4) = 0 [pid 6875] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6875] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6874] <... futex resumed>) = 0 [pid 6874] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6874] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6875] <... futex resumed>) = 0 [pid 6875] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6875] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6874] <... futex resumed>) = 0 [pid 6874] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6875] <... futex resumed>) = 1 [pid 6875] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6875] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6875] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 6874] <... futex resumed>) = 1 [pid 6875] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6874] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6874] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6875] sendfile(4, 5, NULL, 140737974943952 [pid 6874] <... futex resumed>) = 0 [ 263.056806][ T6875] REISERFS (device loop4): Using r5 hash to sort names [ 263.063724][ T6875] REISERFS (device loop4): using 3.5.x disk format [ 263.070577][ T6875] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6874] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6874] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6874] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6874] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6877 attached , parent_tid=[6877], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6877 [pid 6874] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6877] set_robust_list(0x7fe8f42d09e0, 24 [pid 6874] <... futex resumed>) = 0 [pid 6874] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6877] <... set_robust_list resumed>) = 0 [pid 6877] open("./bus", O_RDONLY [pid 6874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6874] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6874] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6874] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6878 attached [pid 6878] set_robust_list(0x7fe8f42af9e0, 24 [pid 6874] <... clone resumed>, parent_tid=[6878], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6878 [pid 6878] <... set_robust_list resumed>) = 0 [pid 6878] truncate("./bus", 6 [pid 6874] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6874] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6874] exit_group(0) = ? [pid 6875] <... sendfile resumed>) = ? [pid 6877] <... open resumed>) = ? [pid 6878] <... truncate resumed>) = ? [pid 6877] +++ exited with 0 +++ [pid 6875] +++ exited with 0 +++ [pid 6878] +++ exited with 0 +++ [pid 6874] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6874, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./321/binderfs") = 0 [pid 5073] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./321/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./321/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./321") = 0 [pid 5073] mkdir("./322", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6879 ./strace-static-x86_64: Process 6879 attached [pid 6879] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6879] chdir("./322") = 0 [pid 6879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6879] setpgid(0, 0) = 0 [pid 6879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6879] write(3, "1000", 4) = 4 [pid 6879] close(3) = 0 [pid 6879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6879] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6879] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6879] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6880], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6880 [pid 6879] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6880 attached [pid 6880] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6880] memfd_create("syzkaller", 0) = 3 [pid 6880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6880] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6880] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6880] close(3) = 0 [pid 6880] mkdir("./file0", 0777) = 0 [ 263.549835][ T6880] loop4: detected capacity change from 0 to 8192 [ 263.559999][ T6880] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 263.573318][ T6880] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 263.582620][ T6880] REISERFS (device loop4): using ordered data mode [ 263.589364][ T6880] reiserfs: using flush barriers [ 263.595199][ T6880] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 263.611743][ T6880] REISERFS (device loop4): checking transaction log (loop4) [pid 6880] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6880] chdir("./file0") = 0 [pid 6880] ioctl(4, LOOP_CLR_FD) = 0 [pid 6880] close(4) = 0 [pid 6880] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6880] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6879] <... futex resumed>) = 0 [pid 6879] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6880] <... futex resumed>) = 0 [pid 6879] <... futex resumed>) = 1 [pid 6880] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6879] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6880] <... open resumed>) = 4 [pid 6880] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6879] <... futex resumed>) = 0 [pid 6880] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6879] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6879] <... futex resumed>) = 0 [pid 6879] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6880] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6880] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6880] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6879] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6880] <... futex resumed>) = 0 [pid 6879] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 263.655030][ T6880] REISERFS (device loop4): Using r5 hash to sort names [ 263.662011][ T6880] REISERFS (device loop4): using 3.5.x disk format [ 263.668814][ T6880] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6880] sendfile(4, 5, NULL, 140737974943952 [pid 6879] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6879] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6879] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6879] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6882], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6882 [pid 6879] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6882 attached [pid 6882] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6882] open("./bus", O_RDONLY [pid 6879] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6879] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6879] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6879] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6883], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6883 [pid 6879] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6883 attached [pid 6883] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6883] truncate("./bus", 6 [pid 6879] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6879] exit_group(0) = ? [pid 6880] <... sendfile resumed>) = ? [pid 6882] <... open resumed>) = ? [pid 6880] +++ exited with 0 +++ [pid 6882] +++ exited with 0 +++ [pid 6883] <... truncate resumed>) = ? [pid 6883] +++ exited with 0 +++ [pid 6879] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6879, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./322/binderfs") = 0 [pid 5073] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [ 264.038417][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 264.038437][ T27] audit: type=1804 audit(1671282487.443:1057): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/322/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 264.068051][ T27] audit: type=1800 audit(1671282487.443:1058): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./322/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./322") = 0 [pid 5073] mkdir("./323", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6884 ./strace-static-x86_64: Process 6884 attached [pid 6884] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6884] chdir("./323") = 0 [pid 6884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6884] setpgid(0, 0) = 0 [pid 6884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6884] write(3, "1000", 4) = 4 [pid 6884] close(3) = 0 [pid 6884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6884] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6884] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6884] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6885], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6885 [pid 6884] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6885 attached [pid 6885] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6885] memfd_create("syzkaller", 0) = 3 [pid 6885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6885] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6885] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6885] close(3) = 0 [pid 6885] mkdir("./file0", 0777) = 0 [ 264.180255][ T6885] loop4: detected capacity change from 0 to 8192 [ 264.190458][ T6885] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 264.203678][ T6885] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 264.213392][ T6885] REISERFS (device loop4): using ordered data mode [ 264.220025][ T6885] reiserfs: using flush barriers [ 264.226035][ T6885] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.243223][ T6885] REISERFS (device loop4): checking transaction log (loop4) [pid 6885] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6885] chdir("./file0") = 0 [pid 6885] ioctl(4, LOOP_CLR_FD) = 0 [pid 6885] close(4) = 0 [pid 6885] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = 0 [pid 6884] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6885] <... futex resumed>) = 1 [pid 6885] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6885] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = 0 [pid 6884] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6885] <... futex resumed>) = 1 [pid 6885] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6885] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = 0 [pid 6884] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6885] <... futex resumed>) = 1 [ 264.281322][ T6885] REISERFS (device loop4): Using r5 hash to sort names [ 264.288772][ T6885] REISERFS (device loop4): using 3.5.x disk format [ 264.295719][ T6885] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6885] sendfile(4, 5, NULL, 140737974943952 [pid 6884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6884] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6884] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6884] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6884] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6887], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6887 ./strace-static-x86_64: Process 6887 attached [pid 6884] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6887] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 264.313519][ T27] audit: type=1800 audit(1671282487.713:1059): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6887] open("./bus", O_RDONLY [pid 6884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6884] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6884] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6884] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6888 attached , parent_tid=[6888], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6888 [pid 6888] set_robust_list(0x7fe8f42af9e0, 24 [pid 6884] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6888] <... set_robust_list resumed>) = 0 [pid 6884] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6888] truncate("./bus", 6 [pid 6884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6884] exit_group(0) = ? [pid 6885] <... sendfile resumed>) = ? [pid 6887] <... open resumed>) = ? [pid 6887] +++ exited with 0 +++ [pid 6888] <... truncate resumed>) = ? [pid 6885] +++ exited with 0 +++ [pid 6888] +++ exited with 0 +++ [pid 6884] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6884, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./323/binderfs") = 0 [pid 5073] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./323/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 264.708306][ T27] audit: type=1804 audit(1671282488.113:1060): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/323/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 264.732364][ T27] audit: type=1800 audit(1671282488.113:1061): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./323/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./323") = 0 [pid 5073] mkdir("./324", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6889 ./strace-static-x86_64: Process 6889 attached [pid 6889] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6889] chdir("./324") = 0 [pid 6889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6889] setpgid(0, 0) = 0 [pid 6889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6889] write(3, "1000", 4) = 4 [pid 6889] close(3) = 0 [pid 6889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6889] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6889] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6889] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6890], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6890 [pid 6889] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6890 attached [pid 6890] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6890] memfd_create("syzkaller", 0) = 3 [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6890] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6890] close(3) = 0 [pid 6890] mkdir("./file0", 0777) = 0 [ 264.862913][ T6890] loop4: detected capacity change from 0 to 8192 [ 264.872641][ T6890] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 264.885795][ T6890] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 264.895039][ T6890] REISERFS (device loop4): using ordered data mode [ 264.901674][ T6890] reiserfs: using flush barriers [ 264.908061][ T6890] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.924399][ T6890] REISERFS (device loop4): checking transaction log (loop4) [pid 6890] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6890] chdir("./file0") = 0 [pid 6890] ioctl(4, LOOP_CLR_FD) = 0 [pid 6890] close(4) = 0 [pid 6890] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6889] <... futex resumed>) = 0 [pid 6890] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6889] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6889] <... futex resumed>) = 0 [pid 6890] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6889] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6890] <... open resumed>) = 4 [pid 6890] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6889] <... futex resumed>) = 0 [pid 6890] openat(-1, "/proc/self/exe", O_RDONLY [pid 6889] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... openat resumed>) = 5 [pid 6889] <... futex resumed>) = 0 [pid 6890] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6889] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6890] <... futex resumed>) = 0 [pid 6889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6890] sendfile(4, 5, NULL, 140737974943952 [pid 6889] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 264.965966][ T6890] REISERFS (device loop4): Using r5 hash to sort names [ 264.972947][ T6890] REISERFS (device loop4): using 3.5.x disk format [ 264.979825][ T6890] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 264.998816][ T27] audit: type=1800 audit(1671282488.403:1062): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6889] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6889] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6889] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6889] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6892], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6892 [pid 6889] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6892 attached [pid 6892] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6892] open("./bus", O_RDONLY [pid 6889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6889] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6889] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6889] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6889] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6893], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6893 [pid 6889] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6889] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6893 attached [pid 6893] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6893] truncate("./bus", 6 [pid 6889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6889] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6889] exit_group(0) = ? [pid 6890] <... sendfile resumed>) = ? [pid 6890] +++ exited with 0 +++ [pid 6892] <... open resumed>) = ? [pid 6892] +++ exited with 0 +++ [pid 6893] <... truncate resumed>) = ? [pid 6893] +++ exited with 0 +++ [pid 6889] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6889, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./324/binderfs") = 0 [ 265.348931][ T27] audit: type=1804 audit(1671282488.753:1063): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/324/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 265.372564][ T27] audit: type=1800 audit(1671282488.753:1064): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./324/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./324/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./324") = 0 [pid 5073] mkdir("./325", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6894 ./strace-static-x86_64: Process 6894 attached [pid 6894] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6894] chdir("./325") = 0 [pid 6894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6894] setpgid(0, 0) = 0 [pid 6894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6894] write(3, "1000", 4) = 4 [pid 6894] close(3) = 0 [pid 6894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6894] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6894] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6894] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6895 attached , parent_tid=[6895], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6895 [pid 6895] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6895] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6894] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6894] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6895] <... futex resumed>) = 0 [pid 6895] memfd_create("syzkaller", 0) = 3 [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6895] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6895] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6895] close(3) = 0 [pid 6895] mkdir("./file0", 0777) = 0 [ 265.512169][ T6895] loop4: detected capacity change from 0 to 8192 [ 265.522453][ T6895] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 265.535685][ T6895] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 265.544997][ T6895] REISERFS (device loop4): using ordered data mode [ 265.551677][ T6895] reiserfs: using flush barriers [ 265.557704][ T6895] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 265.574028][ T6895] REISERFS (device loop4): checking transaction log (loop4) [pid 6895] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6895] chdir("./file0") = 0 [pid 6895] ioctl(4, LOOP_CLR_FD) = 0 [pid 6895] close(4) = 0 [pid 6895] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6894] <... futex resumed>) = 0 [pid 6894] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 265.611344][ T6895] REISERFS (device loop4): Using r5 hash to sort names [ 265.618366][ T6895] REISERFS (device loop4): using 3.5.x disk format [ 265.625100][ T6895] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6895] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6895] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6894] <... futex resumed>) = 0 [pid 6894] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6895] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6895] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6894] <... futex resumed>) = 0 [pid 6895] sendfile(4, 5, NULL, 140737974943952 [pid 6894] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 265.642098][ T27] audit: type=1800 audit(1671282489.043:1065): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6894] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6894] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6894] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6894] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6894] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6897 attached , parent_tid=[6897], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6897 [pid 6894] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6897] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6897] open("./bus", O_RDONLY [pid 6894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6894] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6894] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6894] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6898], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6898 [pid 6894] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6898 attached [pid 6898] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6898] truncate("./bus", 6 [pid 6894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6894] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6894] exit_group(0) = ? [pid 6895] <... sendfile resumed>) = ? [pid 6897] <... open resumed>) = ? [pid 6895] +++ exited with 0 +++ [pid 6898] <... truncate resumed>) = ? [pid 6898] +++ exited with 0 +++ [pid 6897] +++ exited with 0 +++ [pid 6894] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6894, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./325/binderfs") = 0 [pid 5073] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 266.059145][ T27] audit: type=1804 audit(1671282489.463:1066): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/325/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./325/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./325/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./325") = 0 [pid 5073] mkdir("./326", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6899 ./strace-static-x86_64: Process 6899 attached [pid 6899] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6899] chdir("./326") = 0 [pid 6899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6899] setpgid(0, 0) = 0 [pid 6899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6899] write(3, "1000", 4) = 4 [pid 6899] close(3) = 0 [pid 6899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6899] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6899] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6899] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6900 attached , parent_tid=[6900], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6900 [pid 6900] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6900] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6900] <... futex resumed>) = 0 [pid 6899] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6900] memfd_create("syzkaller", 0) = 3 [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6900] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6900] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6900] close(3) = 0 [pid 6900] mkdir("./file0", 0777) = 0 [ 266.190817][ T6900] loop4: detected capacity change from 0 to 8192 [ 266.200776][ T6900] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.213871][ T6900] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 266.223380][ T6900] REISERFS (device loop4): using ordered data mode [ 266.230015][ T6900] reiserfs: using flush barriers [ 266.235994][ T6900] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.252471][ T6900] REISERFS (device loop4): checking transaction log (loop4) [pid 6900] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6900] chdir("./file0") = 0 [pid 6900] ioctl(4, LOOP_CLR_FD) = 0 [pid 6900] close(4) = 0 [pid 6900] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6900] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] <... futex resumed>) = 0 [pid 6899] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6899] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6900] <... futex resumed>) = 0 [pid 6900] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6900] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6899] <... futex resumed>) = 0 [pid 6900] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6899] <... futex resumed>) = 0 [pid 6900] openat(-1, "/proc/self/exe", O_RDONLY [pid 6899] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6900] <... openat resumed>) = 5 [pid 6900] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6899] <... futex resumed>) = 0 [pid 6900] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6899] <... futex resumed>) = 0 [pid 6900] sendfile(4, 5, NULL, 140737974943952 [ 266.294162][ T6900] REISERFS (device loop4): Using r5 hash to sort names [ 266.301457][ T6900] REISERFS (device loop4): using 3.5.x disk format [ 266.308396][ T6900] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6899] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6899] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6899] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6899] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6902 attached , parent_tid=[6902], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6902 [pid 6899] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6902] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6902] open("./bus", O_RDONLY [pid 6899] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6899] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6899] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6899] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6899] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6903], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6903 [pid 6899] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6903 attached [pid 6903] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6903] truncate("./bus", 6 [pid 6899] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6899] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6899] exit_group(0) = ? [pid 6900] <... sendfile resumed>) = ? [pid 6902] <... open resumed>) = ? [pid 6900] +++ exited with 0 +++ [pid 6903] <... truncate resumed>) = ? [pid 6902] +++ exited with 0 +++ [pid 6903] +++ exited with 0 +++ [pid 6899] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6899, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./326/binderfs") = 0 [pid 5073] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./326/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./326") = 0 [pid 5073] mkdir("./327", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6904 ./strace-static-x86_64: Process 6904 attached [pid 6904] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6904] chdir("./327") = 0 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6904] setpgid(0, 0) = 0 [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6904] write(3, "1000", 4) = 4 [pid 6904] close(3) = 0 [pid 6904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6904] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6904] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6904] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6905 attached [pid 6905] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6905] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6904] <... clone resumed>, parent_tid=[6905], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6905 [pid 6904] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6905] <... futex resumed>) = 0 [pid 6904] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6905] memfd_create("syzkaller", 0) = 3 [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6905] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6905] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6905] close(3) = 0 [pid 6905] mkdir("./file0", 0777) = 0 [ 266.795353][ T6905] loop4: detected capacity change from 0 to 8192 [ 266.805691][ T6905] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.818768][ T6905] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 266.828223][ T6905] REISERFS (device loop4): using ordered data mode [ 266.834962][ T6905] reiserfs: using flush barriers [ 266.841117][ T6905] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.857392][ T6905] REISERFS (device loop4): checking transaction log (loop4) [pid 6905] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6905] chdir("./file0") = 0 [pid 6905] ioctl(4, LOOP_CLR_FD) = 0 [pid 6905] close(4) = 0 [pid 6905] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6905] <... futex resumed>) = 1 [pid 6905] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6905] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6905] <... futex resumed>) = 1 [pid 6905] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6905] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = 0 [pid 6904] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6905] <... futex resumed>) = 1 [ 266.894481][ T6905] REISERFS (device loop4): Using r5 hash to sort names [ 266.902061][ T6905] REISERFS (device loop4): using 3.5.x disk format [ 266.909069][ T6905] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6905] sendfile(4, 5, NULL, 140737974943952 [pid 6904] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6904] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6904] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6904] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6907 attached , parent_tid=[6907], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6907 [pid 6904] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6907] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6907] open("./bus", O_RDONLY [pid 6904] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6904] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6904] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6904] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6908], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6908 [pid 6904] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6908 attached [pid 6908] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6908] truncate("./bus", 6 [pid 6904] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6904] exit_group(0) = ? [pid 6905] <... sendfile resumed>) = ? [pid 6908] <... truncate resumed>) = ? [pid 6907] <... open resumed>) = ? [pid 6905] +++ exited with 0 +++ [pid 6908] +++ exited with 0 +++ [pid 6907] +++ exited with 0 +++ [pid 6904] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./327/binderfs") = 0 [pid 5073] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./327/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./327") = 0 [pid 5073] mkdir("./328", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6909 ./strace-static-x86_64: Process 6909 attached [pid 6909] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6909] chdir("./328") = 0 [pid 6909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6909] setpgid(0, 0) = 0 [pid 6909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6909] write(3, "1000", 4) = 4 [pid 6909] close(3) = 0 [pid 6909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6909] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6909] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6909] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6910 attached , parent_tid=[6910], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6910 [pid 6910] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6910] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6909] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6909] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6910] <... futex resumed>) = 0 [pid 6910] memfd_create("syzkaller", 0) = 3 [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6910] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6910] close(3) = 0 [pid 6910] mkdir("./file0", 0777) = 0 [ 267.373545][ T6910] loop4: detected capacity change from 0 to 8192 [ 267.383310][ T6910] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 267.396331][ T6910] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 267.405757][ T6910] REISERFS (device loop4): using ordered data mode [ 267.412362][ T6910] reiserfs: using flush barriers [ 267.418322][ T6910] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 267.434834][ T6910] REISERFS (device loop4): checking transaction log (loop4) [pid 6910] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6910] chdir("./file0") = 0 [pid 6910] ioctl(4, LOOP_CLR_FD) = 0 [pid 6910] close(4) = 0 [pid 6910] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] <... futex resumed>) = 0 [pid 6909] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] <... futex resumed>) = 1 [pid 6910] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6910] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] <... futex resumed>) = 0 [pid 6909] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] <... futex resumed>) = 1 [pid 6910] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6910] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] <... futex resumed>) = 0 [pid 6909] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] <... futex resumed>) = 1 [ 267.471646][ T6910] REISERFS (device loop4): Using r5 hash to sort names [ 267.479107][ T6910] REISERFS (device loop4): using 3.5.x disk format [ 267.486532][ T6910] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6910] sendfile(4, 5, NULL, 140737974943952 [pid 6909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6909] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6909] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6909] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6912 attached , parent_tid=[6912], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6912 [pid 6912] set_robust_list(0x7fe8f42d09e0, 24 [pid 6909] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6912] <... set_robust_list resumed>) = 0 [pid 6909] <... futex resumed>) = 0 [pid 6909] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] open("./bus", O_RDONLY [pid 6909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6909] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6909] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6909] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6913 attached , parent_tid=[6913], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6913 [pid 6913] set_robust_list(0x7fe8f42af9e0, 24 [pid 6909] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] <... set_robust_list resumed>) = 0 [pid 6909] <... futex resumed>) = 0 [pid 6913] truncate("./bus", 6 [pid 6909] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6909] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6909] exit_group(0) = ? [pid 6910] <... sendfile resumed>) = ? [pid 6912] <... open resumed>) = ? [pid 6912] +++ exited with 0 +++ [pid 6910] +++ exited with 0 +++ [pid 6913] <... truncate resumed>) = ? [pid 6913] +++ exited with 0 +++ [pid 6909] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6909, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./328/binderfs") = 0 [pid 5073] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./328/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./328") = 0 [pid 5073] mkdir("./329", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6914 ./strace-static-x86_64: Process 6914 attached [pid 6914] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6914] chdir("./329") = 0 [pid 6914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6914] setpgid(0, 0) = 0 [pid 6914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6914] write(3, "1000", 4) = 4 [pid 6914] close(3) = 0 [pid 6914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6914] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6914] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6914] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6915], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6915 [pid 6914] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6915 attached [pid 6915] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6915] memfd_create("syzkaller", 0) = 3 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6915] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6915] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6915] close(3) = 0 [pid 6915] mkdir("./file0", 0777) = 0 [ 267.980436][ T6915] loop4: detected capacity change from 0 to 8192 [ 267.990157][ T6915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 268.003274][ T6915] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 268.012582][ T6915] REISERFS (device loop4): using ordered data mode [ 268.019158][ T6915] reiserfs: using flush barriers [ 268.024874][ T6915] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.041655][ T6915] REISERFS (device loop4): checking transaction log (loop4) [pid 6915] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6915] chdir("./file0") = 0 [pid 6915] ioctl(4, LOOP_CLR_FD) = 0 [pid 6915] close(4) = 0 [pid 6915] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6915] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... futex resumed>) = 0 [pid 6914] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6914] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6915] <... futex resumed>) = 0 [pid 6915] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6915] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6915] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... futex resumed>) = 0 [pid 6914] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6915] <... futex resumed>) = 0 [pid 6914] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6915] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6915] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6914] <... futex resumed>) = 0 [pid 6914] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6915] sendfile(4, 5, NULL, 140737974943952 [pid 6914] <... futex resumed>) = 0 [ 268.079426][ T6915] REISERFS (device loop4): Using r5 hash to sort names [ 268.086559][ T6915] REISERFS (device loop4): using 3.5.x disk format [ 268.093308][ T6915] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6914] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6914] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6914] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6914] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6917], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6917 [pid 6914] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6917 attached [pid 6917] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6917] open("./bus", O_RDONLY [pid 6914] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6914] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6914] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6914] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6918], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6918 [pid 6914] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6918 attached [pid 6918] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6918] truncate("./bus", 6 [pid 6914] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6914] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6914] exit_group(0) = ? [pid 6917] <... open resumed>) = ? [pid 6915] <... sendfile resumed>) = ? [pid 6917] +++ exited with 0 +++ [pid 6918] <... truncate resumed>) = ? [pid 6915] +++ exited with 0 +++ [pid 6918] +++ exited with 0 +++ [pid 6914] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6914, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./329/binderfs") = 0 [pid 5073] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./329/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./329/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./329") = 0 [pid 5073] mkdir("./330", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6919 ./strace-static-x86_64: Process 6919 attached [pid 6919] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6919] chdir("./330") = 0 [pid 6919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6919] setpgid(0, 0) = 0 [pid 6919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6919] write(3, "1000", 4) = 4 [pid 6919] close(3) = 0 [pid 6919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6919] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6919] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6919] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6920], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6920 [pid 6919] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6920 attached [pid 6920] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6920] memfd_create("syzkaller", 0) = 3 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6920] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6920] close(3) = 0 [pid 6920] mkdir("./file0", 0777) = 0 [ 268.549087][ T6920] loop4: detected capacity change from 0 to 8192 [ 268.560360][ T6920] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 268.573406][ T6920] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 268.583239][ T6920] REISERFS (device loop4): using ordered data mode [ 268.589849][ T6920] reiserfs: using flush barriers [ 268.595815][ T6920] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.612385][ T6920] REISERFS (device loop4): checking transaction log (loop4) [pid 6920] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6920] chdir("./file0") = 0 [pid 6920] ioctl(4, LOOP_CLR_FD) = 0 [pid 6920] close(4) = 0 [pid 6920] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6920] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6919] <... futex resumed>) = 0 [pid 6919] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... futex resumed>) = 0 [pid 6919] <... futex resumed>) = 1 [pid 6920] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6919] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... open resumed>) = 4 [pid 6920] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6919] <... futex resumed>) = 0 [pid 6920] openat(-1, "/proc/self/exe", O_RDONLY [pid 6919] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... openat resumed>) = 5 [pid 6919] <... futex resumed>) = 0 [pid 6920] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6919] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6919] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 1 [pid 6919] <... futex resumed>) = 0 [pid 6919] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [ 268.651283][ T6920] REISERFS (device loop4): Using r5 hash to sort names [ 268.658647][ T6920] REISERFS (device loop4): using 3.5.x disk format [ 268.665792][ T6920] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6920] sendfile(4, 5, NULL, 140737974943952 [pid 6919] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6919] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6919] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6919] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6922 attached , parent_tid=[6922], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6922 [pid 6919] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6922] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6922] open("./bus", O_RDONLY [pid 6919] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6919] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6919] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6919] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6923 attached [pid 6923] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6923] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6919] <... clone resumed>, parent_tid=[6923], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6923 [pid 6919] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] <... futex resumed>) = 0 [pid 6919] <... futex resumed>) = 1 [pid 6919] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6923] truncate("./bus", 6 [pid 6919] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6919] exit_group(0) = ? [pid 6920] <... sendfile resumed>) = ? [pid 6922] <... open resumed>) = ? [pid 6920] +++ exited with 0 +++ [pid 6922] +++ exited with 0 +++ [pid 6923] <... truncate resumed>) = ? [pid 6923] +++ exited with 0 +++ [pid 6919] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6919, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./330/binderfs") = 0 [pid 5073] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 269.081217][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 269.081236][ T27] audit: type=1804 audit(1671282492.483:1081): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/330/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 269.111017][ T27] audit: type=1800 audit(1671282492.483:1082): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./330/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./330") = 0 [pid 5073] mkdir("./331", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6924 ./strace-static-x86_64: Process 6924 attached [pid 6924] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6924] chdir("./331") = 0 [pid 6924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6924] setpgid(0, 0) = 0 [pid 6924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6924] write(3, "1000", 4) = 4 [pid 6924] close(3) = 0 [pid 6924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6924] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6924] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6924] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6925], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6925 [pid 6924] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6925 attached [pid 6925] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6925] memfd_create("syzkaller", 0) = 3 [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6925] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6925] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6925] close(3) = 0 [pid 6925] mkdir("./file0", 0777) = 0 [ 269.226338][ T6925] loop4: detected capacity change from 0 to 8192 [ 269.237640][ T6925] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.250675][ T6925] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 269.261010][ T6925] REISERFS (device loop4): using ordered data mode [ 269.267722][ T6925] reiserfs: using flush barriers [ 269.273401][ T6925] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.289998][ T6925] REISERFS (device loop4): checking transaction log (loop4) [pid 6925] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6925] chdir("./file0") = 0 [pid 6925] ioctl(4, LOOP_CLR_FD) = 0 [pid 6925] close(4) = 0 [pid 6925] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6924] <... futex resumed>) = 0 [pid 6924] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6925] <... futex resumed>) = 1 [pid 6925] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6925] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6924] <... futex resumed>) = 0 [pid 6924] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6925] <... futex resumed>) = 1 [pid 6925] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6925] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6924] <... futex resumed>) = 0 [pid 6924] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6925] <... futex resumed>) = 1 [ 269.327853][ T6925] REISERFS (device loop4): Using r5 hash to sort names [ 269.334813][ T6925] REISERFS (device loop4): using 3.5.x disk format [ 269.341764][ T6925] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6925] sendfile(4, 5, NULL, 140737974943952 [pid 6924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6924] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6924] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 269.358520][ T27] audit: type=1800 audit(1671282492.763:1083): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6924] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6927], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6927 [pid 6924] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6927 attached [pid 6927] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6927] open("./bus", O_RDONLY [pid 6924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6924] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6924] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6924] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6928 attached , parent_tid=[6928], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6928 [pid 6924] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6928] set_robust_list(0x7fe8f42af9e0, 24 [pid 6924] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6928] <... set_robust_list resumed>) = 0 [pid 6928] truncate("./bus", 6 [pid 6924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6924] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6924] exit_group(0) = ? [pid 6925] <... sendfile resumed>) = ? [pid 6927] <... open resumed>) = ? [pid 6925] +++ exited with 0 +++ [pid 6928] <... truncate resumed>) = ? [pid 6928] +++ exited with 0 +++ [pid 6927] +++ exited with 0 +++ [pid 6924] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6924, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./331/binderfs") = 0 [ 269.708766][ T27] audit: type=1804 audit(1671282493.113:1084): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/331/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 269.732162][ T27] audit: type=1800 audit(1671282493.113:1085): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./331/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./331") = 0 [pid 5073] mkdir("./332", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6929 ./strace-static-x86_64: Process 6929 attached [pid 6929] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6929] chdir("./332") = 0 [pid 6929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6929] setpgid(0, 0) = 0 [pid 6929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6929] write(3, "1000", 4) = 4 [pid 6929] close(3) = 0 [pid 6929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6929] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6929] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6929] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6930 attached , parent_tid=[6930], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6930 [pid 6930] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6929] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6930] <... set_robust_list resumed>) = 0 [pid 6930] memfd_create("syzkaller", 0) = 3 [pid 6930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6930] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6930] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6930] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6930] close(3) = 0 [pid 6930] mkdir("./file0", 0777) = 0 [ 269.867038][ T6930] loop4: detected capacity change from 0 to 8192 [ 269.876798][ T6930] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.890437][ T6930] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 269.900242][ T6930] REISERFS (device loop4): using ordered data mode [ 269.906802][ T6930] reiserfs: using flush barriers [ 269.912514][ T6930] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.928905][ T6930] REISERFS (device loop4): checking transaction log (loop4) [pid 6930] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6930] chdir("./file0") = 0 [pid 6930] ioctl(4, LOOP_CLR_FD) = 0 [pid 6930] close(4) = 0 [pid 6930] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6929] <... futex resumed>) = 0 [pid 6930] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6929] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6929] <... futex resumed>) = 0 [pid 6930] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6929] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6930] <... open resumed>) = 4 [pid 6930] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6929] <... futex resumed>) = 0 [pid 6930] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6929] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6929] <... futex resumed>) = 0 [pid 6930] openat(-1, "/proc/self/exe", O_RDONLY [pid 6929] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6930] <... openat resumed>) = 5 [pid 6930] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6929] <... futex resumed>) = 0 [pid 6930] sendfile(4, 5, NULL, 140737974943952 [pid 6929] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 269.966120][ T6930] REISERFS (device loop4): Using r5 hash to sort names [ 269.973316][ T6930] REISERFS (device loop4): using 3.5.x disk format [ 269.980263][ T6930] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6929] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6929] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6929] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 269.996974][ T27] audit: type=1800 audit(1671282493.403:1086): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6929] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6932], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6932 [pid 6929] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6932 attached [pid 6932] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6932] open("./bus", O_RDONLY [pid 6929] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6929] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6929] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6929] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6933 attached , parent_tid=[6933], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6933 [pid 6929] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6933] set_robust_list(0x7fe8f42af9e0, 24 [pid 6929] <... futex resumed>) = 0 [pid 6929] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6933] <... set_robust_list resumed>) = 0 [pid 6933] truncate("./bus", 6 [pid 6929] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6929] exit_group(0) = ? [pid 6930] <... sendfile resumed>) = ? [pid 6933] <... truncate resumed>) = ? [pid 6932] <... open resumed>) = ? [pid 6930] +++ exited with 0 +++ [pid 6933] +++ exited with 0 +++ [pid 6932] +++ exited with 0 +++ [pid 6929] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6929, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./332/binderfs") = 0 [pid 5073] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 270.318436][ T27] audit: type=1804 audit(1671282493.723:1087): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/332/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 270.342234][ T27] audit: type=1800 audit(1671282493.723:1088): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./332/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./332") = 0 [pid 5073] mkdir("./333", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6934 ./strace-static-x86_64: Process 6934 attached [pid 6934] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6934] chdir("./333") = 0 [pid 6934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6934] setpgid(0, 0) = 0 [pid 6934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6934] write(3, "1000", 4) = 4 [pid 6934] close(3) = 0 [pid 6934] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6934] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6934] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6934] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6935], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6935 ./strace-static-x86_64: Process 6935 attached [pid 6935] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6934] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] memfd_create("syzkaller", 0 [pid 6934] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6935] <... memfd_create resumed>) = 3 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6935] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6935] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6935] close(3) = 0 [pid 6935] mkdir("./file0", 0777) = 0 [ 270.470593][ T6935] loop4: detected capacity change from 0 to 8192 [ 270.480870][ T6935] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 270.494238][ T6935] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 270.503560][ T6935] REISERFS (device loop4): using ordered data mode [ 270.510487][ T6935] reiserfs: using flush barriers [ 270.516336][ T6935] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 270.532802][ T6935] REISERFS (device loop4): checking transaction log (loop4) [pid 6935] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6935] chdir("./file0") = 0 [pid 6935] ioctl(4, LOOP_CLR_FD) = 0 [pid 6935] close(4) = 0 [pid 6935] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = 0 [pid 6934] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 1 [ 270.569909][ T6935] REISERFS (device loop4): Using r5 hash to sort names [ 270.576953][ T6935] REISERFS (device loop4): using 3.5.x disk format [ 270.583689][ T6935] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6935] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6935] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6934] <... futex resumed>) = 0 [pid 6934] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 1 [pid 6934] <... futex resumed>) = 0 [pid 6935] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6935] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6934] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6934] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6934] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6935] <... futex resumed>) = 0 [ 270.601776][ T27] audit: type=1800 audit(1671282494.003:1089): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6935] sendfile(4, 5, NULL, 140737974943952 [pid 6934] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6934] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6934] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6934] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6934] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6937 attached , parent_tid=[6937], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6937 [pid 6934] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6937] set_robust_list(0x7fe8f42d09e0, 24 [pid 6934] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6937] <... set_robust_list resumed>) = 0 [pid 6937] open("./bus", O_RDONLY [pid 6934] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6934] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6934] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6934] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6938 attached , parent_tid=[6938], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6938 [pid 6934] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6934] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6938] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6938] truncate("./bus", 6 [pid 6934] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6934] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6934] exit_group(0) = ? [pid 6935] <... sendfile resumed>) = ? [pid 6938] <... truncate resumed>) = ? [pid 6937] <... open resumed>) = ? [pid 6938] +++ exited with 0 +++ [pid 6935] +++ exited with 0 +++ [pid 6937] +++ exited with 0 +++ [pid 6934] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6934, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./333/binderfs") = 0 [ 270.978517][ T27] audit: type=1804 audit(1671282494.383:1090): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/333/file0/bus" dev="loop4" ino=2 res=1 errno=0 [pid 5073] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./333/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./333") = 0 [pid 5073] mkdir("./334", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6939 ./strace-static-x86_64: Process 6939 attached [pid 6939] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6939] chdir("./334") = 0 [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6939] setpgid(0, 0) = 0 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6939] write(3, "1000", 4) = 4 [pid 6939] close(3) = 0 [pid 6939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6939] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6939] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6939] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6940], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6940 [pid 6939] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6939] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6940 attached [pid 6940] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6940] memfd_create("syzkaller", 0) = 3 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6940] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6940] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6940] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6940] close(3) = 0 [pid 6940] mkdir("./file0", 0777) = 0 [ 271.112916][ T6940] loop4: detected capacity change from 0 to 8192 [ 271.122572][ T6940] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 271.135980][ T6940] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 271.145639][ T6940] REISERFS (device loop4): using ordered data mode [ 271.152174][ T6940] reiserfs: using flush barriers [ 271.158202][ T6940] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.174566][ T6940] REISERFS (device loop4): checking transaction log (loop4) [pid 6940] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6940] chdir("./file0") = 0 [pid 6940] ioctl(4, LOOP_CLR_FD) = 0 [pid 6940] close(4) = 0 [pid 6940] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6939] <... futex resumed>) = 0 [pid 6940] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6939] <... futex resumed>) = 0 [pid 6940] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6939] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6940] <... open resumed>) = 4 [pid 6940] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6939] <... futex resumed>) = 0 [pid 6940] openat(-1, "/proc/self/exe", O_RDONLY [pid 6939] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] <... openat resumed>) = 5 [pid 6939] <... futex resumed>) = 0 [pid 6940] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6940] <... futex resumed>) = 0 [pid 6939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6940] sendfile(4, 5, NULL, 140737974943952 [pid 6939] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 271.216735][ T6940] REISERFS (device loop4): Using r5 hash to sort names [ 271.223815][ T6940] REISERFS (device loop4): using 3.5.x disk format [ 271.230779][ T6940] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6939] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6939] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6939] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6939] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6939] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6942], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6942 ./strace-static-x86_64: Process 6942 attached [pid 6939] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6942] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6942] open("./bus", O_RDONLY [pid 6939] <... futex resumed>) = 0 [pid 6939] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6939] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6939] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6939] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6943], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6943 [pid 6939] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6939] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6943 attached [pid 6943] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6943] truncate("./bus", 6 [pid 6939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6939] exit_group(0) = ? [pid 6940] <... sendfile resumed>) = ? [pid 6942] <... open resumed>) = ? [pid 6940] +++ exited with 0 +++ [pid 6943] <... truncate resumed>) = ? [pid 6942] +++ exited with 0 +++ [pid 6943] +++ exited with 0 +++ [pid 6939] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6939, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./334/binderfs") = 0 [pid 5073] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./334/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./334") = 0 [pid 5073] mkdir("./335", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6944 ./strace-static-x86_64: Process 6944 attached [pid 6944] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6944] chdir("./335") = 0 [pid 6944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6944] setpgid(0, 0) = 0 [pid 6944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6944] write(3, "1000", 4) = 4 [pid 6944] close(3) = 0 [pid 6944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6944] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6944] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6944] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6945], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6945 [pid 6944] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6945 attached [pid 6945] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6945] memfd_create("syzkaller", 0) = 3 [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6945] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6945] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6945] close(3) = 0 [pid 6945] mkdir("./file0", 0777) = 0 [ 271.701358][ T6945] loop4: detected capacity change from 0 to 8192 [ 271.711442][ T6945] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 271.724645][ T6945] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 271.733973][ T6945] REISERFS (device loop4): using ordered data mode [ 271.740564][ T6945] reiserfs: using flush barriers [ 271.746475][ T6945] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.762921][ T6945] REISERFS (device loop4): checking transaction log (loop4) [pid 6945] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6945] chdir("./file0") = 0 [pid 6945] ioctl(4, LOOP_CLR_FD) = 0 [pid 6945] close(4) = 0 [pid 6945] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6944] <... futex resumed>) = 0 [pid 6945] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6944] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6944] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6945] <... futex resumed>) = 0 [pid 6945] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6945] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6944] <... futex resumed>) = 0 [pid 6944] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6945] <... futex resumed>) = 1 [pid 6945] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6945] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6944] <... futex resumed>) = 0 [pid 6944] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6945] <... futex resumed>) = 1 [ 271.799533][ T6945] REISERFS (device loop4): Using r5 hash to sort names [ 271.806712][ T6945] REISERFS (device loop4): using 3.5.x disk format [ 271.813579][ T6945] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6945] sendfile(4, 5, NULL, 140737974943952 [pid 6944] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6944] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6944] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6944] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6947 attached [pid 6947] set_robust_list(0x7fe8f42d09e0, 24 [pid 6944] <... clone resumed>, parent_tid=[6947], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6947 [pid 6947] <... set_robust_list resumed>) = 0 [pid 6947] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6944] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6947] <... futex resumed>) = 0 [pid 6944] <... futex resumed>) = 1 [pid 6947] open("./bus", O_RDONLY [pid 6944] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6944] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6944] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6944] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6948 attached , parent_tid=[6948], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6948 [pid 6944] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6948] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6948] truncate("./bus", 6 [pid 6944] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6944] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6944] exit_group(0) = ? [pid 6947] <... open resumed>) = ? [pid 6945] <... sendfile resumed>) = ? [pid 6948] <... truncate resumed>) = ? [pid 6947] +++ exited with 0 +++ [pid 6945] +++ exited with 0 +++ [pid 6948] +++ exited with 0 +++ [pid 6944] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6944, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./335/binderfs") = 0 [pid 5073] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./335/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./335/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./335") = 0 [pid 5073] mkdir("./336", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6949 ./strace-static-x86_64: Process 6949 attached [pid 6949] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6949] chdir("./336") = 0 [pid 6949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6949] setpgid(0, 0) = 0 [pid 6949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6949] write(3, "1000", 4) = 4 [pid 6949] close(3) = 0 [pid 6949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6949] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6949] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6949] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6950], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6950 [pid 6949] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6950 attached [pid 6950] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6950] memfd_create("syzkaller", 0) = 3 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6950] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6950] close(3) = 0 [pid 6950] mkdir("./file0", 0777) = 0 [ 272.321972][ T6950] loop4: detected capacity change from 0 to 8192 [ 272.333186][ T6950] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.346438][ T6950] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 272.355760][ T6950] REISERFS (device loop4): using ordered data mode [ 272.362382][ T6950] reiserfs: using flush barriers [ 272.368453][ T6950] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.385131][ T6950] REISERFS (device loop4): checking transaction log (loop4) [pid 6950] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6950] chdir("./file0") = 0 [pid 6950] ioctl(4, LOOP_CLR_FD) = 0 [pid 6950] close(4) = 0 [pid 6950] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6949] <... futex resumed>) = 0 [pid 6950] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6949] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... open resumed>) = 4 [pid 6949] <... futex resumed>) = 0 [pid 6950] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6949] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... futex resumed>) = 0 [pid 6949] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6950] openat(-1, "/proc/self/exe", O_RDONLY [pid 6949] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... openat resumed>) = 5 [pid 6949] <... futex resumed>) = 0 [pid 6950] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6949] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... futex resumed>) = 0 [pid 6949] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6950] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6949] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6949] <... futex resumed>) = 0 [pid 6950] sendfile(4, 5, NULL, 140737974943952 [ 272.422747][ T6950] REISERFS (device loop4): Using r5 hash to sort names [ 272.429981][ T6950] REISERFS (device loop4): using 3.5.x disk format [ 272.436950][ T6950] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6949] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6949] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6949] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6949] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6949] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6952 attached [pid 6952] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6952] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6949] <... clone resumed>, parent_tid=[6952], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6952 [pid 6949] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6952] <... futex resumed>) = 0 [pid 6949] <... futex resumed>) = 1 [pid 6952] open("./bus", O_RDONLY [pid 6949] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6949] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6949] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6949] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6953 attached , parent_tid=[6953], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6953 [pid 6949] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] set_robust_list(0x7fe8f42af9e0, 24 [pid 6949] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... set_robust_list resumed>) = 0 [pid 6953] truncate("./bus", 6 [pid 6949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6949] exit_group(0) = ? [pid 6950] <... sendfile resumed>) = ? [pid 6952] <... open resumed>) = ? [pid 6950] +++ exited with 0 +++ [pid 6953] <... truncate resumed>) = ? [pid 6952] +++ exited with 0 +++ [pid 6953] +++ exited with 0 +++ [pid 6949] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6949, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./336/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./336/binderfs") = 0 [pid 5073] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./336/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./336") = 0 [pid 5073] mkdir("./337", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6954 ./strace-static-x86_64: Process 6954 attached [pid 6954] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6954] chdir("./337") = 0 [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6954] setpgid(0, 0) = 0 [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6954] write(3, "1000", 4) = 4 [pid 6954] close(3) = 0 [pid 6954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6954] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6954] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6954] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6955 attached , parent_tid=[6955], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6955 [pid 6954] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6955] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6955] memfd_create("syzkaller", 0) = 3 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6955] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6955] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6955] close(3) = 0 [pid 6955] mkdir("./file0", 0777) = 0 [ 272.916884][ T6955] loop4: detected capacity change from 0 to 8192 [ 272.927157][ T6955] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.940626][ T6955] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 272.949949][ T6955] REISERFS (device loop4): using ordered data mode [ 272.956722][ T6955] reiserfs: using flush barriers [ 272.962449][ T6955] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.979442][ T6955] REISERFS (device loop4): checking transaction log (loop4) [pid 6955] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6955] chdir("./file0") = 0 [pid 6955] ioctl(4, LOOP_CLR_FD) = 0 [pid 6955] close(4) = 0 [pid 6955] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6954] <... futex resumed>) = 0 [pid 6954] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6955] <... futex resumed>) = 1 [pid 6955] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6955] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6954] <... futex resumed>) = 0 [pid 6954] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6955] <... futex resumed>) = 1 [pid 6955] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6955] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6955] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6954] <... futex resumed>) = 0 [pid 6955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6954] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6955] sendfile(4, 5, NULL, 140737974943952 [pid 6954] <... futex resumed>) = 0 [ 273.022204][ T6955] REISERFS (device loop4): Using r5 hash to sort names [ 273.029640][ T6955] REISERFS (device loop4): using 3.5.x disk format [ 273.037292][ T6955] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6954] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6954] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6954] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6954] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6957 attached , parent_tid=[6957], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6957 [pid 6954] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6957] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6957] open("./bus", O_RDONLY [pid 6954] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6954] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6954] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6954] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6958 attached , parent_tid=[6958], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6958 [pid 6958] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6954] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6954] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6958] truncate("./bus", 6 [pid 6954] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6954] exit_group(0) = ? [pid 6955] <... sendfile resumed>) = ? [pid 6957] <... open resumed>) = ? [pid 6955] +++ exited with 0 +++ [pid 6958] <... truncate resumed>) = ? [pid 6957] +++ exited with 0 +++ [pid 6958] +++ exited with 0 +++ [pid 6954] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6954, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./337/binderfs") = 0 [pid 5073] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./337/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./337/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./337") = 0 [pid 5073] mkdir("./338", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6959 ./strace-static-x86_64: Process 6959 attached [pid 6959] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6959] chdir("./338") = 0 [pid 6959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6959] setpgid(0, 0) = 0 [pid 6959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6959] write(3, "1000", 4) = 4 [pid 6959] close(3) = 0 [pid 6959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6959] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6959] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6959] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6960 attached , parent_tid=[6960], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6960 [pid 6960] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6959] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6960] <... set_robust_list resumed>) = 0 [pid 6959] <... futex resumed>) = 0 [pid 6959] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6960] memfd_create("syzkaller", 0) = 3 [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6960] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6960] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6960] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6960] close(3) = 0 [pid 6960] mkdir("./file0", 0777) = 0 [ 273.529111][ T6960] loop4: detected capacity change from 0 to 8192 [ 273.540391][ T6960] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 273.553753][ T6960] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 273.563331][ T6960] REISERFS (device loop4): using ordered data mode [ 273.570638][ T6960] reiserfs: using flush barriers [ 273.577019][ T6960] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 273.593337][ T6960] REISERFS (device loop4): checking transaction log (loop4) [pid 6960] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6960] chdir("./file0") = 0 [pid 6960] ioctl(4, LOOP_CLR_FD) = 0 [pid 6960] close(4) = 0 [pid 6960] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6959] <... futex resumed>) = 0 [pid 6959] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6960] <... futex resumed>) = 1 [pid 6960] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6960] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6959] <... futex resumed>) = 0 [pid 6959] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6960] <... futex resumed>) = 1 [pid 6959] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6960] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6960] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6959] <... futex resumed>) = 0 [pid 6960] sendfile(4, 5, NULL, 140737974943952 [pid 6959] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 273.636038][ T6960] REISERFS (device loop4): Using r5 hash to sort names [ 273.642963][ T6960] REISERFS (device loop4): using 3.5.x disk format [ 273.649771][ T6960] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6959] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6959] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6959] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6959] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6959] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6962 attached , parent_tid=[6962], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6962 [pid 6962] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6962] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6959] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6962] <... futex resumed>) = 0 [pid 6959] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6962] open("./bus", O_RDONLY [pid 6959] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6959] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6959] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6959] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6963], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6963 [pid 6959] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6963 attached [pid 6963] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6963] truncate("./bus", 6 [pid 6959] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6959] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6959] exit_group(0) = ? [pid 6960] <... sendfile resumed>) = ? [pid 6963] <... truncate resumed>) = ? [pid 6962] <... open resumed>) = ? [pid 6963] +++ exited with 0 +++ [pid 6960] +++ exited with 0 +++ [pid 6962] +++ exited with 0 +++ [pid 6959] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6959, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./338/binderfs") = 0 [pid 5073] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./338/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./338") = 0 [pid 5073] mkdir("./339", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6964 ./strace-static-x86_64: Process 6964 attached [pid 6964] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6964] chdir("./339") = 0 [pid 6964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6964] setpgid(0, 0) = 0 [pid 6964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6964] write(3, "1000", 4) = 4 [pid 6964] close(3) = 0 [pid 6964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6964] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6964] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6964] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6965], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6965 [pid 6964] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6965 attached [pid 6965] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6965] memfd_create("syzkaller", 0) = 3 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6965] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6965] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6965] close(3) = 0 [pid 6965] mkdir("./file0", 0777) = 0 [ 274.121906][ T6965] loop4: detected capacity change from 0 to 8192 [ 274.132521][ T6965] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 274.145600][ T6965] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 274.154793][ T6965] REISERFS (device loop4): using ordered data mode [ 274.161367][ T6965] reiserfs: using flush barriers [ 274.167360][ T6965] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.183894][ T6965] REISERFS (device loop4): checking transaction log (loop4) [pid 6965] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6965] chdir("./file0") = 0 [pid 6965] ioctl(4, LOOP_CLR_FD) = 0 [pid 6965] close(4) = 0 [pid 6965] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6964] <... futex resumed>) = 0 [pid 6965] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6964] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6964] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 0 [pid 6965] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6965] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6964] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 1 [pid 6965] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6965] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6964] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... futex resumed>) = 1 [ 274.227701][ T6965] REISERFS (device loop4): Using r5 hash to sort names [ 274.234735][ T6965] REISERFS (device loop4): using 3.5.x disk format [ 274.241613][ T6965] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 274.260672][ T27] kauditd_printk_skb: 16 callbacks suppressed [pid 6965] sendfile(4, 5, NULL, 140737974943952 [pid 6964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6964] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6964] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6964] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6967 attached , parent_tid=[6967], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6967 [pid 6964] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6967] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 274.260726][ T27] audit: type=1800 audit(1671282497.663:1107): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6967] open("./bus", O_RDONLY [pid 6964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6964] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6964] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6964] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6968], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6968 [pid 6964] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6964] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6968 attached [pid 6968] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6968] truncate("./bus", 6 [pid 6964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6964] exit_group(0) = ? [pid 6965] <... sendfile resumed>) = ? [pid 6965] +++ exited with 0 +++ [pid 6967] <... open resumed>) = ? [pid 6967] +++ exited with 0 +++ [pid 6968] <... truncate resumed>) = ? [pid 6968] +++ exited with 0 +++ [pid 6964] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6964, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./339/binderfs") = 0 [ 274.618188][ T27] audit: type=1804 audit(1671282498.023:1108): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/339/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 274.641817][ T27] audit: type=1800 audit(1671282498.023:1109): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./339/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./339") = 0 [pid 5073] mkdir("./340", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6969 ./strace-static-x86_64: Process 6969 attached [pid 6969] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6969] chdir("./340") = 0 [pid 6969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6969] setpgid(0, 0) = 0 [pid 6969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6969] write(3, "1000", 4) = 4 [pid 6969] close(3) = 0 [pid 6969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6969] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6969] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6969] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6970], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6970 [pid 6969] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6970 attached [pid 6970] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6970] memfd_create("syzkaller", 0) = 3 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6970] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6970] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6970] close(3) = 0 [pid 6970] mkdir("./file0", 0777) = 0 [ 274.774494][ T6970] loop4: detected capacity change from 0 to 8192 [ 274.784687][ T6970] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 274.797843][ T6970] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 274.807098][ T6970] REISERFS (device loop4): using ordered data mode [ 274.813824][ T6970] reiserfs: using flush barriers [ 274.820144][ T6970] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.836500][ T6970] REISERFS (device loop4): checking transaction log (loop4) [pid 6970] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6970] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6970] chdir("./file0") = 0 [pid 6970] ioctl(4, LOOP_CLR_FD) = 0 [pid 6970] close(4) = 0 [pid 6970] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6969] <... futex resumed>) = 0 [pid 6969] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6969] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6970] <... futex resumed>) = 0 [ 274.877276][ T6970] REISERFS (device loop4): Using r5 hash to sort names [ 274.884219][ T6970] REISERFS (device loop4): using 3.5.x disk format [ 274.891298][ T6970] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6970] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6970] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6969] <... futex resumed>) = 0 [pid 6969] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6970] <... futex resumed>) = 0 [pid 6969] <... futex resumed>) = 1 [pid 6970] openat(-1, "/proc/self/exe", O_RDONLY [pid 6969] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6970] <... openat resumed>) = 5 [pid 6970] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6970] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6969] <... futex resumed>) = 0 [pid 6969] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6970] <... futex resumed>) = 0 [pid 6969] <... futex resumed>) = 1 [pid 6970] sendfile(4, 5, NULL, 140737974943952 [ 274.910115][ T27] audit: type=1800 audit(1671282498.313:1110): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6969] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6969] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6969] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6969] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6972], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6972 [pid 6969] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6972 attached [pid 6972] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6972] open("./bus", O_RDONLY [pid 6969] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6969] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6969] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6969] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6969] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6973 attached , parent_tid=[6973], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6973 [pid 6969] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6973] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6973] truncate("./bus", 6 [pid 6969] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6969] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6969] exit_group(0) = ? [pid 6970] <... sendfile resumed>) = ? [pid 6973] <... truncate resumed>) = ? [pid 6972] <... open resumed>) = ? [pid 6970] +++ exited with 0 +++ [pid 6973] +++ exited with 0 +++ [pid 6972] +++ exited with 0 +++ [pid 6969] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6969, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./340/binderfs") = 0 [pid 5073] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 275.278710][ T27] audit: type=1804 audit(1671282498.683:1111): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/340/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 275.302032][ T27] audit: type=1800 audit(1671282498.683:1112): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] lstat("./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./340/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./340") = 0 [pid 5073] mkdir("./341", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6974 ./strace-static-x86_64: Process 6974 attached [pid 6974] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6974] chdir("./341") = 0 [pid 6974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6974] setpgid(0, 0) = 0 [pid 6974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6974] write(3, "1000", 4) = 4 [pid 6974] close(3) = 0 [pid 6974] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6974] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6974] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6974] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6975 attached , parent_tid=[6975], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6975 [pid 6974] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6975] set_robust_list(0x7fe8fc2f19e0, 24 [pid 6974] <... futex resumed>) = 0 [pid 6974] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6975] <... set_robust_list resumed>) = 0 [pid 6975] memfd_create("syzkaller", 0) = 3 [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6975] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6975] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6975] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6975] close(3) = 0 [pid 6975] mkdir("./file0", 0777) = 0 [ 275.438155][ T6975] loop4: detected capacity change from 0 to 8192 [ 275.448585][ T6975] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.461739][ T6975] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 275.471221][ T6975] REISERFS (device loop4): using ordered data mode [ 275.478113][ T6975] reiserfs: using flush barriers [ 275.484115][ T6975] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.500504][ T6975] REISERFS (device loop4): checking transaction log (loop4) [pid 6975] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6975] chdir("./file0") = 0 [pid 6975] ioctl(4, LOOP_CLR_FD) = 0 [pid 6975] close(4) = 0 [pid 6975] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6974] <... futex resumed>) = 0 [pid 6975] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6974] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6974] <... futex resumed>) = 0 [pid 6975] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6974] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6975] <... open resumed>) = 4 [pid 6975] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6974] <... futex resumed>) = 0 [pid 6975] openat(-1, "/proc/self/exe", O_RDONLY [pid 6974] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6975] <... openat resumed>) = 5 [pid 6974] <... futex resumed>) = 0 [pid 6975] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6974] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6975] <... futex resumed>) = 0 [pid 6974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6975] sendfile(4, 5, NULL, 140737974943952 [pid 6974] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 275.543057][ T6975] REISERFS (device loop4): Using r5 hash to sort names [ 275.550066][ T6975] REISERFS (device loop4): using 3.5.x disk format [ 275.556984][ T6975] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6974] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6974] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6974] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6974] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6974] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6977 attached , parent_tid=[6977], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6977 [pid 6977] set_robust_list(0x7fe8f42d09e0, 24 [pid 6974] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6977] <... set_robust_list resumed>) = 0 [pid 6974] <... futex resumed>) = 0 [pid 6977] open("./bus", O_RDONLY [ 275.575294][ T27] audit: type=1800 audit(1671282498.973:1113): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6974] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6974] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6974] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6974] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6978 attached , parent_tid=[6978], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6978 [pid 6978] set_robust_list(0x7fe8f42af9e0, 24 [pid 6974] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6978] <... set_robust_list resumed>) = 0 [pid 6974] <... futex resumed>) = 0 [pid 6978] truncate("./bus", 6 [pid 6974] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6974] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6974] exit_group(0) = ? [pid 6975] <... sendfile resumed>) = ? [pid 6978] <... truncate resumed>) = ? [pid 6977] <... open resumed>) = ? [pid 6975] +++ exited with 0 +++ [pid 6978] +++ exited with 0 +++ [pid 6977] +++ exited with 0 +++ [pid 6974] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6974, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./341/binderfs") = 0 [pid 5073] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 275.938441][ T27] audit: type=1804 audit(1671282499.343:1114): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/341/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 275.962050][ T27] audit: type=1800 audit(1671282499.343:1115): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./341/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./341") = 0 [pid 5073] mkdir("./342", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6979 ./strace-static-x86_64: Process 6979 attached [pid 6979] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6979] chdir("./342") = 0 [pid 6979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6979] setpgid(0, 0) = 0 [pid 6979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6979] write(3, "1000", 4) = 4 [pid 6979] close(3) = 0 [pid 6979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6979] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6979] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6979] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6980], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6980 [pid 6979] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6980 attached [pid 6980] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6980] memfd_create("syzkaller", 0) = 3 [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6980] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6980] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6980] close(3) = 0 [pid 6980] mkdir("./file0", 0777) = 0 [ 276.094000][ T6980] loop4: detected capacity change from 0 to 8192 [ 276.103631][ T6980] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 276.117290][ T6980] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 276.126695][ T6980] REISERFS (device loop4): using ordered data mode [ 276.133449][ T6980] reiserfs: using flush barriers [ 276.139485][ T6980] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.156026][ T6980] REISERFS (device loop4): checking transaction log (loop4) [pid 6980] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6980] chdir("./file0") = 0 [pid 6980] ioctl(4, LOOP_CLR_FD) = 0 [pid 6980] close(4) = 0 [pid 6980] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6979] <... futex resumed>) = 0 [pid 6980] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6979] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6980] <... open resumed>) = 4 [pid 6979] <... futex resumed>) = 0 [pid 6980] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6979] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6980] <... futex resumed>) = 0 [pid 6979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6980] openat(-1, "/proc/self/exe", O_RDONLY [pid 6979] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6980] <... openat resumed>) = 5 [pid 6979] <... futex resumed>) = 0 [pid 6980] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6979] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6980] <... futex resumed>) = 0 [pid 6979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6980] sendfile(4, 5, NULL, 140737974943952 [pid 6979] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 276.199634][ T6980] REISERFS (device loop4): Using r5 hash to sort names [ 276.207081][ T6980] REISERFS (device loop4): using 3.5.x disk format [ 276.213756][ T6980] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 276.227290][ T27] audit: type=1800 audit(1671282499.633:1116): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 6979] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6979] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6979] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6979] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6982 attached , parent_tid=[6982], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6982 [pid 6979] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] set_robust_list(0x7fe8f42d09e0, 24 [pid 6979] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6982] <... set_robust_list resumed>) = 0 [pid 6982] open("./bus", O_RDONLY [pid 6979] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6979] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6979] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6979] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6979] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6983 attached , parent_tid=[6983], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6983 [pid 6983] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6983] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6979] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6983] <... futex resumed>) = 0 [pid 6979] <... futex resumed>) = 1 [pid 6983] truncate("./bus", 6 [pid 6979] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6979] exit_group(0) = ? [pid 6980] <... sendfile resumed>) = ? [pid 6982] <... open resumed>) = ? [pid 6982] +++ exited with 0 +++ [pid 6980] +++ exited with 0 +++ [pid 6983] <... truncate resumed>) = ? [pid 6983] +++ exited with 0 +++ [pid 6979] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6979, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./342/binderfs") = 0 [pid 5073] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./342/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./342/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./342") = 0 [pid 5073] mkdir("./343", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6984 ./strace-static-x86_64: Process 6984 attached [pid 6984] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6984] chdir("./343") = 0 [pid 6984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6984] setpgid(0, 0) = 0 [pid 6984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6984] write(3, "1000", 4) = 4 [pid 6984] close(3) = 0 [pid 6984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6984] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6984] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6984] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6985], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6985 [pid 6984] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6985 attached [pid 6985] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6985] memfd_create("syzkaller", 0) = 3 [pid 6985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6985] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6985] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6985] close(3) = 0 [pid 6985] mkdir("./file0", 0777) = 0 [ 276.690766][ T6985] loop4: detected capacity change from 0 to 8192 [ 276.701307][ T6985] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 276.714399][ T6985] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 276.723665][ T6985] REISERFS (device loop4): using ordered data mode [ 276.730434][ T6985] reiserfs: using flush barriers [ 276.736461][ T6985] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.754234][ T6985] REISERFS (device loop4): checking transaction log (loop4) [pid 6985] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6985] chdir("./file0") = 0 [pid 6985] ioctl(4, LOOP_CLR_FD) = 0 [pid 6985] close(4) = 0 [pid 6985] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6984] <... futex resumed>) = 0 [pid 6984] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6984] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6985] <... futex resumed>) = 0 [pid 6985] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6985] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6984] <... futex resumed>) = 0 [pid 6984] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6985] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6985] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6984] <... futex resumed>) = 0 [pid 6984] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] <... futex resumed>) = 0 [pid 6984] <... futex resumed>) = 1 [pid 6985] sendfile(4, 5, NULL, 140737974943952 [ 276.792246][ T6985] REISERFS (device loop4): Using r5 hash to sort names [ 276.799421][ T6985] REISERFS (device loop4): using 3.5.x disk format [ 276.806343][ T6985] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6984] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6984] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6984] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6984] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6987 attached [pid 6987] set_robust_list(0x7fe8f42d09e0, 24 [pid 6984] <... clone resumed>, parent_tid=[6987], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6987 [pid 6984] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6987] <... set_robust_list resumed>) = 0 [pid 6987] open("./bus", O_RDONLY [pid 6984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6984] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6984] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6984] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6988], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6988 [pid 6984] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6988 attached [pid 6988] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 6988] truncate("./bus", 6 [pid 6984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6984] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6984] exit_group(0) = ? [pid 6985] <... sendfile resumed>) = ? [pid 6988] <... truncate resumed>) = ? [pid 6987] <... open resumed>) = ? [pid 6985] +++ exited with 0 +++ [pid 6988] +++ exited with 0 +++ [pid 6987] +++ exited with 0 +++ [pid 6984] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6984, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./343/binderfs") = 0 [pid 5073] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./343/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./343/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./343") = 0 [pid 5073] mkdir("./344", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6989 ./strace-static-x86_64: Process 6989 attached [pid 6989] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6989] chdir("./344") = 0 [pid 6989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6989] setpgid(0, 0) = 0 [pid 6989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6989] write(3, "1000", 4) = 4 [pid 6989] close(3) = 0 [pid 6989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6989] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6989] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6989] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6990], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6990 [pid 6989] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6990 attached [pid 6990] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6990] memfd_create("syzkaller", 0) = 3 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6990] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6990] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6990] close(3) = 0 [pid 6990] mkdir("./file0", 0777) = 0 [ 277.328983][ T6990] loop4: detected capacity change from 0 to 8192 [ 277.339479][ T6990] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.352610][ T6990] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 277.362135][ T6990] REISERFS (device loop4): using ordered data mode [ 277.368993][ T6990] reiserfs: using flush barriers [ 277.374929][ T6990] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.392062][ T6990] REISERFS (device loop4): checking transaction log (loop4) [pid 6990] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6990] chdir("./file0") = 0 [pid 6990] ioctl(4, LOOP_CLR_FD) = 0 [pid 6990] close(4) = 0 [pid 6990] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = 0 [pid 6989] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6990] <... futex resumed>) = 1 [pid 6990] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6990] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = 0 [pid 6989] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6990] <... futex resumed>) = 1 [pid 6990] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6990] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6989] <... futex resumed>) = 0 [pid 6990] sendfile(4, 5, NULL, 140737974943952 [pid 6989] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 277.429724][ T6990] REISERFS (device loop4): Using r5 hash to sort names [ 277.436876][ T6990] REISERFS (device loop4): using 3.5.x disk format [ 277.443746][ T6990] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6989] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6989] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6989] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6989] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6992], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6992 ./strace-static-x86_64: Process 6992 attached [pid 6989] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6992] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 6992] open("./bus", O_RDONLY [pid 6989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6989] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6989] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6989] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6989] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6993], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6993 [pid 6989] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6993 attached [pid 6993] set_robust_list(0x7fe8f42af9e0, 24 [pid 6989] <... futex resumed>) = 0 [pid 6993] <... set_robust_list resumed>) = 0 [pid 6993] truncate("./bus", 6 [pid 6989] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6989] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6989] exit_group(0) = ? [pid 6990] <... sendfile resumed>) = ? [pid 6992] <... open resumed>) = ? [pid 6992] +++ exited with 0 +++ [pid 6990] +++ exited with 0 +++ [pid 6993] <... truncate resumed>) = ? [pid 6993] +++ exited with 0 +++ [pid 6989] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6989, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./344/binderfs") = 0 [pid 5073] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./344/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./344") = 0 [pid 5073] mkdir("./345", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6994 ./strace-static-x86_64: Process 6994 attached [pid 6994] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6994] chdir("./345") = 0 [pid 6994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6994] setpgid(0, 0) = 0 [pid 6994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6994] write(3, "1000", 4) = 4 [pid 6994] close(3) = 0 [pid 6994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6994] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6994] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6994] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6995], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 6995 [pid 6994] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6995 attached [pid 6995] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 6995] memfd_create("syzkaller", 0) = 3 [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 6995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 6995] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 6995] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6995] close(3) = 0 [pid 6995] mkdir("./file0", 0777) = 0 [ 277.908720][ T6995] loop4: detected capacity change from 0 to 8192 [ 277.919211][ T6995] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.932288][ T6995] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 277.942370][ T6995] REISERFS (device loop4): using ordered data mode [ 277.949058][ T6995] reiserfs: using flush barriers [ 277.954835][ T6995] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.971314][ T6995] REISERFS (device loop4): checking transaction log (loop4) [pid 6995] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 6995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6995] chdir("./file0") = 0 [pid 6995] ioctl(4, LOOP_CLR_FD) = 0 [pid 6995] close(4) = 0 [pid 6995] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] <... futex resumed>) = 1 [pid 6995] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6995] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] <... futex resumed>) = 1 [pid 6995] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 6995] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] <... futex resumed>) = 1 [ 278.012861][ T6995] REISERFS (device loop4): Using r5 hash to sort names [ 278.020389][ T6995] REISERFS (device loop4): using 3.5.x disk format [ 278.027849][ T6995] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6995] sendfile(4, 5, NULL, 140737974943952 [pid 6994] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6994] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6994] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6994] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6994] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6997], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 6997 ./strace-static-x86_64: Process 6997 attached [pid 6994] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] set_robust_list(0x7fe8f42d09e0, 24 [pid 6994] <... futex resumed>) = 0 [pid 6994] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6997] <... set_robust_list resumed>) = 0 [pid 6997] open("./bus", O_RDONLY [pid 6994] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6994] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6994] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6994] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6994] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6998 attached , parent_tid=[6998], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 6998 [pid 6998] set_robust_list(0x7fe8f42af9e0, 24 [pid 6994] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... set_robust_list resumed>) = 0 [pid 6994] <... futex resumed>) = 0 [pid 6998] truncate("./bus", 6 [pid 6994] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6994] exit_group(0) = ? [pid 6995] <... sendfile resumed>) = ? [pid 6997] <... open resumed>) = ? [pid 6995] +++ exited with 0 +++ [pid 6998] <... truncate resumed>) = ? [pid 6997] +++ exited with 0 +++ [pid 6998] +++ exited with 0 +++ [pid 6994] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6994, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./345/binderfs") = 0 [pid 5073] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./345/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./345") = 0 [pid 5073] mkdir("./346", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 6999 ./strace-static-x86_64: Process 6999 attached [pid 6999] set_robust_list(0x5555558b65e0, 24) = 0 [pid 6999] chdir("./346") = 0 [pid 6999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6999] setpgid(0, 0) = 0 [pid 6999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6999] write(3, "1000", 4) = 4 [pid 6999] close(3) = 0 [pid 6999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6999] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 6999] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6999] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7000 attached , parent_tid=[7000], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7000 [pid 7000] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7000] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6999] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7000] memfd_create("syzkaller", 0 [pid 6999] <... futex resumed>) = 0 [pid 7000] <... memfd_create resumed>) = 3 [pid 6999] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7000] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7000] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7000] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7000] close(3) = 0 [pid 7000] mkdir("./file0", 0777) = 0 [ 278.542440][ T7000] loop4: detected capacity change from 0 to 8192 [ 278.553475][ T7000] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 278.567075][ T7000] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 278.576348][ T7000] REISERFS (device loop4): using ordered data mode [ 278.582866][ T7000] reiserfs: using flush barriers [ 278.588778][ T7000] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.606016][ T7000] REISERFS (device loop4): checking transaction log (loop4) [pid 7000] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7000] chdir("./file0") = 0 [pid 7000] ioctl(4, LOOP_CLR_FD) = 0 [pid 7000] close(4) = 0 [pid 7000] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6999] <... futex resumed>) = 0 [pid 7000] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6999] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6999] <... futex resumed>) = 0 [pid 7000] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6999] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7000] <... open resumed>) = 4 [pid 7000] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6999] <... futex resumed>) = 0 [pid 7000] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6999] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6999] <... futex resumed>) = 0 [pid 7000] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7000] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7000] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6999] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6999] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7000] <... futex resumed>) = 0 [pid 6999] <... futex resumed>) = 1 [pid 7000] sendfile(4, 5, NULL, 140737974943952 [ 278.648687][ T7000] REISERFS (device loop4): Using r5 hash to sort names [ 278.655916][ T7000] REISERFS (device loop4): using 3.5.x disk format [ 278.662608][ T7000] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 6999] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6999] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 6999] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6999] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7002], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7002 [pid 6999] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6999] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7002 attached [pid 7002] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7002] open("./bus", O_RDONLY [pid 6999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6999] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 6999] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6999] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7003 attached [pid 7003] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7003] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6999] <... clone resumed>, parent_tid=[7003], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7003 [pid 6999] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] <... futex resumed>) = 0 [pid 6999] <... futex resumed>) = 1 [pid 7003] truncate("./bus", 6 [pid 6999] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6999] exit_group(0) = ? [pid 7000] <... sendfile resumed>) = ? [pid 7002] <... open resumed>) = ? [pid 7000] +++ exited with 0 +++ [pid 7002] +++ exited with 0 +++ [pid 7003] <... truncate resumed>) = ? [pid 7003] +++ exited with 0 +++ [pid 6999] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6999, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./346/binderfs") = 0 [pid 5073] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./346/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./346") = 0 [pid 5073] mkdir("./347", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7004 attached [pid 7004] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7004] chdir("./347") = 0 [pid 7004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7004] setpgid(0, 0) = 0 [pid 7004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7004] write(3, "1000", 4) = 4 [pid 7004] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x5555558b65d0) = 7004 [pid 7004] <... close resumed>) = 0 [pid 7004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7004] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7004] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7005 attached , parent_tid=[7005], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7005 [pid 7004] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7005] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7005] memfd_create("syzkaller", 0) = 3 [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7005] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7005] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7005] close(3) = 0 [pid 7005] mkdir("./file0", 0777) = 0 [ 279.182286][ T7005] loop4: detected capacity change from 0 to 8192 [ 279.193029][ T7005] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.206113][ T7005] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 279.215578][ T7005] REISERFS (device loop4): using ordered data mode [ 279.222101][ T7005] reiserfs: using flush barriers [ 279.228019][ T7005] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.244319][ T7005] REISERFS (device loop4): checking transaction log (loop4) [pid 7005] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7005] chdir("./file0") = 0 [pid 7005] ioctl(4, LOOP_CLR_FD) = 0 [pid 7005] close(4) = 0 [pid 7005] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7005] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7004] <... futex resumed>) = 0 [pid 7004] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7005] <... futex resumed>) = 0 [pid 7004] <... futex resumed>) = 1 [pid 7005] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 7004] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7005] <... open resumed>) = 4 [pid 7005] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7005] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7004] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7005] <... futex resumed>) = 0 [pid 7004] <... futex resumed>) = 1 [pid 7005] openat(-1, "/proc/self/exe", O_RDONLY [pid 7004] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7005] <... openat resumed>) = 5 [pid 7005] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7004] <... futex resumed>) = 0 [pid 7005] sendfile(4, 5, NULL, 140737974943952 [pid 7004] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 279.283018][ T7005] REISERFS (device loop4): Using r5 hash to sort names [ 279.290116][ T7005] REISERFS (device loop4): using 3.5.x disk format [ 279.297010][ T7005] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 279.314794][ T27] kauditd_printk_skb: 14 callbacks suppressed [pid 7004] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7004] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7004] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7007], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7007 [pid 7004] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7007 attached [pid 7007] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 279.314808][ T27] audit: type=1800 audit(1671282502.713:1131): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 7007] open("./bus", O_RDONLY [pid 7004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7004] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7004] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7008 attached , parent_tid=[7008], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7008 [pid 7008] set_robust_list(0x7fe8f42af9e0, 24 [pid 7004] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7008] <... set_robust_list resumed>) = 0 [pid 7004] <... futex resumed>) = 0 [pid 7008] truncate("./bus", 6 [pid 7004] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7004] exit_group(0) = ? [pid 7005] <... sendfile resumed>) = ? [pid 7007] <... open resumed>) = ? [pid 7005] +++ exited with 0 +++ [pid 7008] <... truncate resumed>) = ? [pid 7008] +++ exited with 0 +++ [pid 7007] +++ exited with 0 +++ [pid 7004] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7004, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./347/binderfs") = 0 [pid 5073] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 279.678602][ T27] audit: type=1804 audit(1671282503.083:1132): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/347/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 279.702555][ T27] audit: type=1800 audit(1671282503.083:1133): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./347/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./347") = 0 [pid 5073] mkdir("./348", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7009 ./strace-static-x86_64: Process 7009 attached [pid 7009] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7009] chdir("./348") = 0 [pid 7009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7009] setpgid(0, 0) = 0 [pid 7009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7009] write(3, "1000", 4) = 4 [pid 7009] close(3) = 0 [pid 7009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7009] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7009] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7009] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7010 attached , parent_tid=[7010], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7010 [pid 7010] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7010] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7009] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7010] <... futex resumed>) = 0 [pid 7010] memfd_create("syzkaller", 0 [pid 7009] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7010] <... memfd_create resumed>) = 3 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7010] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7010] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7010] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7010] close(3) = 0 [pid 7010] mkdir("./file0", 0777) = 0 [ 279.839269][ T7010] loop4: detected capacity change from 0 to 8192 [ 279.849181][ T7010] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.862369][ T7010] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 279.871598][ T7010] REISERFS (device loop4): using ordered data mode [ 279.878152][ T7010] reiserfs: using flush barriers [ 279.883807][ T7010] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.900651][ T7010] REISERFS (device loop4): checking transaction log (loop4) [pid 7010] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7010] chdir("./file0") = 0 [pid 7010] ioctl(4, LOOP_CLR_FD) = 0 [pid 7010] close(4) = 0 [pid 7010] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7009] <... futex resumed>) = 0 [pid 7010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 7009] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] <... open resumed>) = 4 [pid 7009] <... futex resumed>) = 0 [pid 7010] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] <... futex resumed>) = 0 [pid 7009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7010] openat(-1, "/proc/self/exe", O_RDONLY [pid 7009] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] <... openat resumed>) = 5 [pid 7009] <... futex resumed>) = 0 [pid 7010] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] <... futex resumed>) = 0 [pid 7009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7010] sendfile(4, 5, NULL, 140737974943952 [pid 7009] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7009] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7009] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 279.940042][ T7010] REISERFS (device loop4): Using r5 hash to sort names [ 279.946953][ T7010] REISERFS (device loop4): using 3.5.x disk format [ 279.954097][ T7010] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 279.969400][ T27] audit: type=1800 audit(1671282503.373:1134): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 7009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7009] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7009] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7012], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7012 ./strace-static-x86_64: Process 7012 attached [pid 7009] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7009] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7012] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7012] open("./bus", O_RDONLY [pid 7009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7009] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7009] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7009] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7009] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7013], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7013 [pid 7009] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7013 attached [pid 7009] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7013] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7013] truncate("./bus", 6 [pid 7009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7009] exit_group(0) = ? [pid 7010] <... sendfile resumed>) = ? [pid 7012] <... open resumed>) = ? [pid 7012] +++ exited with 0 +++ [pid 7013] <... truncate resumed>) = ? [pid 7013] +++ exited with 0 +++ [pid 7010] +++ exited with 0 +++ [pid 7009] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7009, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./348/binderfs") = 0 [ 280.358515][ T27] audit: type=1804 audit(1671282503.763:1135): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/348/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 280.382262][ T27] audit: type=1800 audit(1671282503.763:1136): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./348/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./348") = 0 [pid 5073] mkdir("./349", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7014 ./strace-static-x86_64: Process 7014 attached [pid 7014] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7014] chdir("./349") = 0 [pid 7014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7014] setpgid(0, 0) = 0 [pid 7014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7014] write(3, "1000", 4) = 4 [pid 7014] close(3) = 0 [pid 7014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7014] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7014] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7014] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7015], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7015 [pid 7014] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7015 attached [pid 7015] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7015] memfd_create("syzkaller", 0) = 3 [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7015] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7015] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7015] close(3) = 0 [pid 7015] mkdir("./file0", 0777) = 0 [ 280.513668][ T7015] loop4: detected capacity change from 0 to 8192 [ 280.524249][ T7015] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 280.537452][ T7015] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 280.547005][ T7015] REISERFS (device loop4): using ordered data mode [ 280.553530][ T7015] reiserfs: using flush barriers [ 280.559745][ T7015] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.576372][ T7015] REISERFS (device loop4): checking transaction log (loop4) [pid 7015] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7015] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7015] chdir("./file0") = 0 [pid 7015] ioctl(4, LOOP_CLR_FD) = 0 [pid 7015] close(4) = 0 [pid 7015] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7015] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] <... futex resumed>) = 0 [pid 7014] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7014] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7015] <... futex resumed>) = 0 [ 280.618900][ T7015] REISERFS (device loop4): Using r5 hash to sort names [ 280.626547][ T7015] REISERFS (device loop4): using 3.5.x disk format [ 280.633636][ T7015] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7015] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7015] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7014] <... futex resumed>) = 0 [pid 7015] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7014] <... futex resumed>) = 0 [pid 7014] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7015] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7015] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7014] <... futex resumed>) = 0 [pid 7015] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7015] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7014] <... futex resumed>) = 0 [pid 7015] sendfile(4, 5, NULL, 140737974943952 [ 280.650504][ T27] audit: type=1800 audit(1671282504.053:1137): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 7014] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7014] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7014] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7014] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7017 attached , parent_tid=[7017], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7017 [pid 7017] set_robust_list(0x7fe8f42d09e0, 24 [pid 7014] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7017] <... set_robust_list resumed>) = 0 [pid 7014] <... futex resumed>) = 0 [pid 7017] open("./bus", O_RDONLY [pid 7014] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7014] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7014] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7014] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7018 attached , parent_tid=[7018], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7018 [pid 7018] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7014] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] truncate("./bus", 6 [pid 7014] <... futex resumed>) = 0 [pid 7014] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7014] exit_group(0) = ? [pid 7015] <... sendfile resumed>) = ? [pid 7017] <... open resumed>) = ? [pid 7015] +++ exited with 0 +++ [pid 7017] +++ exited with 0 +++ [pid 7018] <... truncate resumed>) = ? [pid 7018] +++ exited with 0 +++ [pid 7014] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7014, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./349/binderfs") = 0 [ 281.018475][ T27] audit: type=1804 audit(1671282504.423:1138): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/349/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 281.042606][ T27] audit: type=1800 audit(1671282504.423:1139): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./349/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./349") = 0 [pid 5073] mkdir("./350", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7019 ./strace-static-x86_64: Process 7019 attached [pid 7019] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7019] chdir("./350") = 0 [pid 7019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7019] setpgid(0, 0) = 0 [pid 7019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7019] write(3, "1000", 4) = 4 [pid 7019] close(3) = 0 [pid 7019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7019] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7019] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7019] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7020], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7020 [pid 7019] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7020 attached [pid 7020] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7020] memfd_create("syzkaller", 0) = 3 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7020] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7020] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7020] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7020] close(3) = 0 [pid 7020] mkdir("./file0", 0777) = 0 [ 281.181187][ T7020] loop4: detected capacity change from 0 to 8192 [ 281.191331][ T7020] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.204729][ T7020] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 281.214121][ T7020] REISERFS (device loop4): using ordered data mode [ 281.220778][ T7020] reiserfs: using flush barriers [ 281.226940][ T7020] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.243592][ T7020] REISERFS (device loop4): checking transaction log (loop4) [pid 7020] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7020] chdir("./file0") = 0 [pid 7020] ioctl(4, LOOP_CLR_FD) = 0 [pid 7020] close(4) = 0 [pid 7020] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... futex resumed>) = 0 [pid 7019] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7020] <... futex resumed>) = 1 [pid 7020] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7020] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... futex resumed>) = 0 [pid 7019] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] <... futex resumed>) = 1 [pid 7019] <... futex resumed>) = 0 [pid 7020] openat(-1, "/proc/self/exe", O_RDONLY [pid 7019] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7020] <... openat resumed>) = 5 [pid 7020] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7019] <... futex resumed>) = 0 [pid 7020] sendfile(4, 5, NULL, 140737974943952 [pid 7019] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 281.286750][ T7020] REISERFS (device loop4): Using r5 hash to sort names [ 281.293681][ T7020] REISERFS (device loop4): using 3.5.x disk format [ 281.300571][ T7020] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7019] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7019] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7019] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7019] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [ 281.318408][ T27] audit: type=1800 audit(1671282504.723:1140): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 7019] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7022 attached [pid 7022] set_robust_list(0x7fe8f42d09e0, 24 [pid 7019] <... clone resumed>, parent_tid=[7022], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7022 [pid 7022] <... set_robust_list resumed>) = 0 [pid 7019] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] open("./bus", O_RDONLY [pid 7019] <... futex resumed>) = 0 [pid 7019] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7019] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7019] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7019] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7023], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7023 [pid 7019] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7023 attached [pid 7023] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7023] truncate("./bus", 6 [pid 7019] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7019] exit_group(0) = ? [pid 7020] <... sendfile resumed>) = ? [pid 7022] <... open resumed>) = ? [pid 7020] +++ exited with 0 +++ [pid 7023] <... truncate resumed>) = ? [pid 7022] +++ exited with 0 +++ [pid 7023] +++ exited with 0 +++ [pid 7019] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7019, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./350/binderfs") = 0 [pid 5073] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./350/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./350/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./350") = 0 [pid 5073] mkdir("./351", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7024 ./strace-static-x86_64: Process 7024 attached [pid 7024] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7024] chdir("./351") = 0 [pid 7024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7024] setpgid(0, 0) = 0 [pid 7024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7024] write(3, "1000", 4) = 4 [pid 7024] close(3) = 0 [pid 7024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7024] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7024] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7024] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7025], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7025 [pid 7024] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7025 attached [pid 7025] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7025] memfd_create("syzkaller", 0) = 3 [pid 7025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7025] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7025] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7025] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7025] close(3) = 0 [pid 7025] mkdir("./file0", 0777) = 0 [ 281.800657][ T7025] loop4: detected capacity change from 0 to 8192 [ 281.811130][ T7025] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.824753][ T7025] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 281.834305][ T7025] REISERFS (device loop4): using ordered data mode [ 281.840939][ T7025] reiserfs: using flush barriers [ 281.846826][ T7025] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.863407][ T7025] REISERFS (device loop4): checking transaction log (loop4) [pid 7025] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7025] chdir("./file0") = 0 [pid 7025] ioctl(4, LOOP_CLR_FD) = 0 [pid 7025] close(4) = 0 [pid 7025] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] <... futex resumed>) = 0 [pid 7025] <... futex resumed>) = 1 [pid 7024] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 7024] <... futex resumed>) = 0 [pid 7025] <... open resumed>) = 4 [pid 7024] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7025] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7024] <... futex resumed>) = 0 [pid 7025] openat(-1, "/proc/self/exe", O_RDONLY [pid 7024] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] <... openat resumed>) = 5 [pid 7024] <... futex resumed>) = 0 [pid 7025] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7025] <... futex resumed>) = 0 [pid 7024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7025] sendfile(4, 5, NULL, 140737974943952 [pid 7024] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 281.901870][ T7025] REISERFS (device loop4): Using r5 hash to sort names [ 281.908957][ T7025] REISERFS (device loop4): using 3.5.x disk format [ 281.916285][ T7025] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7024] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7024] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7024] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7024] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7027], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7027 [pid 7024] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7027 attached [pid 7027] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7027] open("./bus", O_RDONLY [pid 7024] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7024] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7024] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7024] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7028 attached , parent_tid=[7028], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7028 [pid 7024] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7028] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7028] truncate("./bus", 6 [pid 7024] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7024] exit_group(0) = ? [pid 7025] <... sendfile resumed>) = ? [pid 7027] <... open resumed>) = ? [pid 7025] +++ exited with 0 +++ [pid 7028] <... truncate resumed>) = ? [pid 7027] +++ exited with 0 +++ [pid 7028] +++ exited with 0 +++ [pid 7024] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7024, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./351/binderfs") = 0 [pid 5073] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./351/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./351") = 0 [pid 5073] mkdir("./352", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7029 ./strace-static-x86_64: Process 7029 attached [pid 7029] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7029] chdir("./352") = 0 [pid 7029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7029] setpgid(0, 0) = 0 [pid 7029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7029] write(3, "1000", 4) = 4 [pid 7029] close(3) = 0 [pid 7029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7029] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7029] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7029] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7030 attached , parent_tid=[7030], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7030 [pid 7029] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7030] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7030] memfd_create("syzkaller", 0) = 3 [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7030] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7030] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7030] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7030] close(3) = 0 [pid 7030] mkdir("./file0", 0777) = 0 [ 282.409677][ T7030] loop4: detected capacity change from 0 to 8192 [ 282.420098][ T7030] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 282.433201][ T7030] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 282.442699][ T7030] REISERFS (device loop4): using ordered data mode [ 282.449299][ T7030] reiserfs: using flush barriers [ 282.455379][ T7030] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 282.471843][ T7030] REISERFS (device loop4): checking transaction log (loop4) [pid 7030] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7030] chdir("./file0") = 0 [pid 7030] ioctl(4, LOOP_CLR_FD) = 0 [pid 7030] close(4) = 0 [pid 7030] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7029] <... futex resumed>) = 0 [pid 7029] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7030] <... futex resumed>) = 1 [pid 7030] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7030] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7029] <... futex resumed>) = 0 [pid 7029] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7030] <... futex resumed>) = 1 [pid 7030] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7030] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7029] <... futex resumed>) = 0 [pid 7029] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7030] <... futex resumed>) = 1 [ 282.509200][ T7030] REISERFS (device loop4): Using r5 hash to sort names [ 282.516275][ T7030] REISERFS (device loop4): using 3.5.x disk format [ 282.523034][ T7030] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7030] sendfile(4, 5, NULL, 140737974943952 [pid 7029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7029] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7029] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7029] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7032], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7032 [pid 7029] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7032 attached [pid 7032] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7032] open("./bus", O_RDONLY [pid 7029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7029] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7029] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7029] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7033 attached , parent_tid=[7033], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7033 [pid 7033] set_robust_list(0x7fe8f42af9e0, 24 [pid 7029] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7033] <... set_robust_list resumed>) = 0 [pid 7029] <... futex resumed>) = 0 [pid 7033] truncate("./bus", 6 [pid 7029] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7029] exit_group(0) = ? [pid 7030] <... sendfile resumed>) = ? [pid 7032] <... open resumed>) = ? [pid 7032] +++ exited with 0 +++ [pid 7030] +++ exited with 0 +++ [pid 7033] <... truncate resumed>) = ? [pid 7033] +++ exited with 0 +++ [pid 7029] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7029, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./352/binderfs") = 0 [pid 5073] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./352/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./352") = 0 [pid 5073] mkdir("./353", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7034 ./strace-static-x86_64: Process 7034 attached [pid 7034] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7034] chdir("./353") = 0 [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7034] setpgid(0, 0) = 0 [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7034] write(3, "1000", 4) = 4 [pid 7034] close(3) = 0 [pid 7034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7034] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7034] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7034] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7035], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7035 [pid 7034] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7035 attached [pid 7035] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7035] memfd_create("syzkaller", 0) = 3 [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7035] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7035] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7035] close(3) = 0 [pid 7035] mkdir("./file0", 0777) = 0 [ 283.007397][ T7035] loop4: detected capacity change from 0 to 8192 [ 283.018900][ T7035] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 283.032058][ T7035] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 283.041381][ T7035] REISERFS (device loop4): using ordered data mode [ 283.048164][ T7035] reiserfs: using flush barriers [ 283.054370][ T7035] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 283.070886][ T7035] REISERFS (device loop4): checking transaction log (loop4) [pid 7035] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7035] chdir("./file0") = 0 [pid 7035] ioctl(4, LOOP_CLR_FD) = 0 [pid 7035] close(4) = 0 [pid 7035] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7034] <... futex resumed>) = 0 [pid 7035] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 7034] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] <... open resumed>) = 4 [pid 7034] <... futex resumed>) = 0 [pid 7035] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7035] <... futex resumed>) = 0 [pid 7034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7035] openat(-1, "/proc/self/exe", O_RDONLY [pid 7034] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] <... openat resumed>) = 5 [pid 7034] <... futex resumed>) = 0 [pid 7035] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7035] <... futex resumed>) = 0 [pid 7034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7035] sendfile(4, 5, NULL, 140737974943952 [pid 7034] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 283.113892][ T7035] REISERFS (device loop4): Using r5 hash to sort names [ 283.121102][ T7035] REISERFS (device loop4): using 3.5.x disk format [ 283.128035][ T7035] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7034] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7034] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7034] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7034] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7037], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7037 [pid 7034] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7037 attached [pid 7037] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7037] open("./bus", O_RDONLY [pid 7034] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7034] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7034] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7034] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7034] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7038 attached , parent_tid=[7038], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7038 [pid 7038] set_robust_list(0x7fe8f42af9e0, 24 [pid 7034] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] <... set_robust_list resumed>) = 0 [pid 7034] <... futex resumed>) = 0 [pid 7038] truncate("./bus", 6 [pid 7034] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7034] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7034] exit_group(0) = ? [pid 7035] <... sendfile resumed>) = ? [pid 7037] <... open resumed>) = ? [pid 7035] +++ exited with 0 +++ [pid 7037] +++ exited with 0 +++ [pid 7038] <... truncate resumed>) = ? [pid 7038] +++ exited with 0 +++ [pid 7034] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7034, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./353/binderfs") = 0 [pid 5073] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./353/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./353") = 0 [pid 5073] mkdir("./354", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7039 attached , child_tidptr=0x5555558b65d0) = 7039 [pid 7039] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7039] chdir("./354") = 0 [pid 7039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7039] setpgid(0, 0) = 0 [pid 7039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7039] write(3, "1000", 4) = 4 [pid 7039] close(3) = 0 [pid 7039] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7039] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7039] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7039] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7040 attached , parent_tid=[7040], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7040 [pid 7039] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7040] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7040] memfd_create("syzkaller", 0) = 3 [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7040] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7040] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7040] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7040] close(3) = 0 [pid 7040] mkdir("./file0", 0777) = 0 [ 283.601213][ T7040] loop4: detected capacity change from 0 to 8192 [ 283.611543][ T7040] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 283.624641][ T7040] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 283.633942][ T7040] REISERFS (device loop4): using ordered data mode [ 283.640635][ T7040] reiserfs: using flush barriers [ 283.646929][ T7040] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 283.663397][ T7040] REISERFS (device loop4): checking transaction log (loop4) [pid 7040] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7040] chdir("./file0") = 0 [pid 7040] ioctl(4, LOOP_CLR_FD) = 0 [pid 7040] close(4) = 0 [pid 7040] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7040] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7039] <... futex resumed>) = 0 [pid 7039] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7039] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7040] <... futex resumed>) = 0 [pid 7040] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7040] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7039] <... futex resumed>) = 0 [pid 7039] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7040] <... futex resumed>) = 1 [pid 7040] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7040] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7039] <... futex resumed>) = 0 [pid 7040] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7039] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7039] <... futex resumed>) = 0 [pid 7040] sendfile(4, 5, NULL, 140737974943952 [ 283.704927][ T7040] REISERFS (device loop4): Using r5 hash to sort names [ 283.712201][ T7040] REISERFS (device loop4): using 3.5.x disk format [ 283.719158][ T7040] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7039] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7039] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7039] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7039] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7042], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7042 [pid 7039] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7042 attached [pid 7042] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7042] open("./bus", O_RDONLY [pid 7039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7039] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7039] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7039] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7043], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7043 [pid 7039] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7039] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7043 attached [pid 7043] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7043] truncate("./bus", 6 [pid 7039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7039] exit_group(0) = ? [pid 7040] <... sendfile resumed>) = ? [pid 7040] +++ exited with 0 +++ [pid 7042] <... open resumed>) = ? [pid 7042] +++ exited with 0 +++ [pid 7043] <... truncate resumed>) = ? [pid 7043] +++ exited with 0 +++ [pid 7039] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7039, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./354/binderfs") = 0 [pid 5073] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./354/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./354") = 0 [pid 5073] mkdir("./355", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7044 ./strace-static-x86_64: Process 7044 attached [pid 7044] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7044] chdir("./355") = 0 [pid 7044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7044] setpgid(0, 0) = 0 [pid 7044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7044] write(3, "1000", 4) = 4 [pid 7044] close(3) = 0 [pid 7044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7044] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7044] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7044] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7045 attached , parent_tid=[7045], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7045 [pid 7045] set_robust_list(0x7fe8fc2f19e0, 24 [pid 7044] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7045] <... set_robust_list resumed>) = 0 [pid 7045] memfd_create("syzkaller", 0) = 3 [pid 7045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7045] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7045] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7045] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7045] close(3) = 0 [pid 7045] mkdir("./file0", 0777) = 0 [ 284.248565][ T7045] loop4: detected capacity change from 0 to 8192 [ 284.258904][ T7045] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.271995][ T7045] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 284.281352][ T7045] REISERFS (device loop4): using ordered data mode [ 284.287946][ T7045] reiserfs: using flush barriers [ 284.293646][ T7045] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.310574][ T7045] REISERFS (device loop4): checking transaction log (loop4) [pid 7045] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7045] chdir("./file0") = 0 [pid 7045] ioctl(4, LOOP_CLR_FD) = 0 [pid 7045] close(4) = 0 [pid 7045] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7044] <... futex resumed>) = 0 [pid 7045] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7044] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7044] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7045] <... futex resumed>) = 0 [ 284.353405][ T7045] REISERFS (device loop4): Using r5 hash to sort names [ 284.360469][ T7045] REISERFS (device loop4): using 3.5.x disk format [ 284.367333][ T7045] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7045] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7045] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7045] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7044] <... futex resumed>) = 0 [pid 7044] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7044] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7045] <... futex resumed>) = 0 [pid 7045] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7045] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7044] <... futex resumed>) = 0 [pid 7045] sendfile(4, 5, NULL, 140737974943952 [pid 7044] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7044] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7044] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 284.393564][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 284.393580][ T27] audit: type=1800 audit(1671282507.793:1155): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 7044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7044] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7044] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7047], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7047 [pid 7044] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7047 attached [pid 7047] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7047] open("./bus", O_RDONLY [pid 7044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7044] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7044] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7044] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7044] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7048 attached , parent_tid=[7048], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7048 [pid 7048] set_robust_list(0x7fe8f42af9e0, 24 [pid 7044] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7048] <... set_robust_list resumed>) = 0 [pid 7048] truncate("./bus", 6 [pid 7044] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7044] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7044] exit_group(0) = ? [pid 7045] <... sendfile resumed>) = ? [pid 7048] <... truncate resumed>) = ? [pid 7047] <... open resumed>) = ? [pid 7045] +++ exited with 0 +++ [pid 7048] +++ exited with 0 +++ [pid 7047] +++ exited with 0 +++ [pid 7044] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7044, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./355/binderfs") = 0 [ 284.778303][ T27] audit: type=1804 audit(1671282508.183:1156): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/355/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 284.802435][ T27] audit: type=1800 audit(1671282508.183:1157): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./355/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./355/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./355") = 0 [pid 5073] mkdir("./356", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7049 attached , child_tidptr=0x5555558b65d0) = 7049 [pid 7049] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7049] chdir("./356") = 0 [pid 7049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7049] setpgid(0, 0) = 0 [pid 7049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7049] write(3, "1000", 4) = 4 [pid 7049] close(3) = 0 [pid 7049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7049] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7049] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7050 attached , parent_tid=[7050], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7050 [pid 7049] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7050] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7050] memfd_create("syzkaller", 0) = 3 [pid 7050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7050] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7050] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7050] close(3) = 0 [pid 7050] mkdir("./file0", 0777) = 0 [ 284.937728][ T7050] loop4: detected capacity change from 0 to 8192 [ 284.948011][ T7050] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.961074][ T7050] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 284.970554][ T7050] REISERFS (device loop4): using ordered data mode [ 284.977129][ T7050] reiserfs: using flush barriers [ 284.982785][ T7050] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.999358][ T7050] REISERFS (device loop4): checking transaction log (loop4) [pid 7050] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7050] chdir("./file0") = 0 [pid 7050] ioctl(4, LOOP_CLR_FD) = 0 [pid 7050] close(4) = 0 [pid 7050] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7049] <... futex resumed>) = 0 [pid 7049] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] <... futex resumed>) = 1 [pid 7050] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7050] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7049] <... futex resumed>) = 0 [pid 7049] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7050] <... futex resumed>) = 1 [pid 7049] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7050] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7050] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7049] <... futex resumed>) = 0 [pid 7050] sendfile(4, 5, NULL, 140737974943952 [pid 7049] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 285.044149][ T7050] REISERFS (device loop4): Using r5 hash to sort names [ 285.051308][ T7050] REISERFS (device loop4): using 3.5.x disk format [ 285.058119][ T7050] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 7049] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7049] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7049] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7052], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7052 [ 285.076633][ T27] audit: type=1800 audit(1671282508.483:1158): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 7049] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7052 attached [pid 7052] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7052] open("./bus", O_RDONLY [pid 7049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7049] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7049] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7053 attached , parent_tid=[7053], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7053 [pid 7049] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7053] set_robust_list(0x7fe8f42af9e0, 24) = 0 [pid 7053] truncate("./bus", 6 [pid 7049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7049] exit_group(0) = ? [pid 7050] <... sendfile resumed>) = ? [pid 7052] <... open resumed>) = ? [pid 7050] +++ exited with 0 +++ [pid 7053] <... truncate resumed>) = ? [pid 7053] +++ exited with 0 +++ [pid 7052] +++ exited with 0 +++ [pid 7049] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7049, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5073] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./356/binderfs") = 0 [pid 5073] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./356/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./356") = 0 [ 285.448725][ T27] audit: type=1804 audit(1671282508.853:1159): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/356/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 285.472725][ T27] audit: type=1800 audit(1671282508.853:1160): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [pid 5073] mkdir("./357", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7054 ./strace-static-x86_64: Process 7054 attached [pid 7054] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7054] chdir("./357") = 0 [pid 7054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7054] setpgid(0, 0) = 0 [pid 7054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7054] write(3, "1000", 4) = 4 [pid 7054] close(3) = 0 [pid 7054] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7054] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7054] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7054] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7055], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7055 [pid 7054] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7055 attached [pid 7055] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7055] memfd_create("syzkaller", 0) = 3 [pid 7055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [pid 7055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7055] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7055] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7055] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7055] close(3) = 0 [pid 7055] mkdir("./file0", 0777) = 0 [ 285.589935][ T7055] loop4: detected capacity change from 0 to 8192 [ 285.599973][ T7055] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.614014][ T7055] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 285.623514][ T7055] REISERFS (device loop4): using ordered data mode [ 285.630096][ T7055] reiserfs: using flush barriers [ 285.635827][ T7055] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.652230][ T7055] REISERFS (device loop4): checking transaction log (loop4) [pid 7055] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7055] chdir("./file0") = 0 [pid 7055] ioctl(4, LOOP_CLR_FD) = 0 [pid 7055] close(4) = 0 [pid 7055] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7054] <... futex resumed>) = 0 [pid 7054] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7055] <... futex resumed>) = 1 [ 285.694876][ T7055] REISERFS (device loop4): Using r5 hash to sort names [ 285.702055][ T7055] REISERFS (device loop4): using 3.5.x disk format [ 285.709073][ T7055] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 285.718394][ T28] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 285.726342][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 285.733979][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [pid 7055] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7055] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7054] <... futex resumed>) = 0 [pid 7054] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7055] <... futex resumed>) = 1 [pid 7055] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7055] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7054] <... futex resumed>) = 0 [pid 7054] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7055] <... futex resumed>) = 1 [ 285.738921][ T27] audit: type=1800 audit(1671282509.133:1161): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 285.743812][ T28] task:kworker/0:0 state:D stack:27608 pid:7 ppid:2 flags:0x00004000 [ 285.773183][ T28] Workqueue: events_long flush_old_commits [ 285.779696][ T28] Call Trace: [ 285.783069][ T28] [ 285.786075][ T28] __schedule+0xb8a/0x5450 [ 285.790507][ T28] ? wq_worker_sleeping+0x1e9/0x250 [pid 7055] sendfile(4, 5, NULL, 140737974943952 [pid 7054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7054] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7054] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7054] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7057], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7057 [pid 7054] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7057 attached [pid 7057] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 285.796279][ T28] ? io_schedule_timeout+0x150/0x150 [ 285.801645][ T28] ? mark_held_locks+0x9f/0xe0 [ 285.806570][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 285.811573][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.817038][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 285.822291][ T28] schedule+0xde/0x1b0 [ 285.828505][ T28] schedule_preempt_disabled+0x13/0x20 [ 285.834035][ T28] __mutex_lock+0xa48/0x1360 [ 285.839709][ T28] ? reiserfs_write_lock+0x79/0x100 [pid 7057] open("./bus", O_RDONLY [pid 7054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7054] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7054] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7054] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7054] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7058], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7058 [pid 7054] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7054] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7058 attached [pid 7058] set_robust_list(0x7fe8f42af9e0, 24) = 0 [ 285.845109][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 285.850733][ T28] ? dquot_writeback_dquots+0x25d/0xa30 [ 285.856530][ T28] ? dquot_scan_active+0x2d0/0x2d0 [ 285.861711][ T28] reiserfs_write_lock+0x79/0x100 [ 285.866850][ T28] reiserfs_sync_fs+0x81/0x130 [ 285.871666][ T28] ? handle_quota_files+0x3b0/0x3b0 [ 285.876957][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 285.882593][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 285.887930][ T28] ? do_raw_spin_unlock+0x175/0x230 [pid 7058] truncate("./bus", 6 [pid 7054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 285.893363][ T28] flush_old_commits+0xfb/0x200 [ 285.898654][ T28] process_one_work+0x9bf/0x1710 [ 285.903674][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 285.909154][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 285.914111][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 285.919227][ T28] worker_thread+0x669/0x1090 [ 285.923940][ T28] ? process_one_work+0x1710/0x1710 [ 285.929214][ T28] kthread+0x2e8/0x3a0 [ 285.933303][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 285.939235][ T28] ret_from_fork+0x1f/0x30 [ 285.943730][ T28] [ 285.946835][ T28] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 285.954480][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 285.961832][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.970607][ T28] task:kworker/1:0 state:D stack:28264 pid:22 ppid:2 flags:0x00004000 [ 285.979928][ T28] Workqueue: events_long flush_old_commits [ 285.985833][ T28] Call Trace: [ 285.989119][ T28] [ 285.992056][ T28] __schedule+0xb8a/0x5450 [ 285.996852][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 286.002090][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.007452][ T28] ? mark_held_locks+0x9f/0xe0 [ 286.012243][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.017274][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.022598][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.027894][ T28] schedule+0xde/0x1b0 [ 286.032071][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.037599][ T28] __mutex_lock+0xa48/0x1360 [ 286.042298][ T28] ? reiserfs_write_lock+0x79/0x100 [ 286.047573][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.053142][ T28] ? dquot_writeback_dquots+0x25d/0xa30 [ 286.058807][ T28] ? dquot_scan_active+0x2d0/0x2d0 [ 286.063962][ T28] reiserfs_write_lock+0x79/0x100 [ 286.069246][ T28] reiserfs_sync_fs+0x81/0x130 [ 286.074050][ T28] ? handle_quota_files+0x3b0/0x3b0 [ 286.079344][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 286.084409][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.089432][ T28] ? do_raw_spin_unlock+0x175/0x230 [pid 7054] exit_group(0) = ? [ 286.094668][ T28] flush_old_commits+0xfb/0x200 [ 286.099704][ T28] process_one_work+0x9bf/0x1710 [ 286.104796][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.110802][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.115833][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 286.120893][ T28] worker_thread+0x669/0x1090 [ 286.125656][ T28] ? process_one_work+0x1710/0x1710 [ 286.130870][ T28] kthread+0x2e8/0x3a0 [ 286.134936][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.140668][ T28] ret_from_fork+0x1f/0x30 [ 286.145117][ T28] [pid 7055] <... sendfile resumed>) = ? [pid 7055] +++ exited with 0 +++ [ 286.148230][ T28] INFO: task kworker/1:1:26 blocked for more than 143 seconds. [ 286.155877][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 286.159990][ T27] audit: type=1804 audit(1671282509.563:1162): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/357/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 286.163307][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [pid 7057] <... open resumed>) = ? [pid 7057] +++ exited with 0 +++ [pid 7058] <... truncate resumed>) = ? [pid 7058] +++ exited with 0 +++ [pid 7054] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7054, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5073] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./357/binderfs") = 0 [ 286.186555][ T27] audit: type=1800 audit(1671282509.563:1163): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 286.196347][ T28] task:kworker/1:1 state:D stack:28512 pid:26 ppid:2 flags:0x00004000 [ 286.226209][ T28] Workqueue: events_long flush_old_commits [ 286.233666][ T28] Call Trace: [ 286.237008][ T28] [ 286.239939][ T28] __schedule+0xb8a/0x5450 [ 286.244358][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 286.249714][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.255386][ T28] ? mark_held_locks+0x9f/0xe0 [ 286.260242][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.265170][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.270633][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.276003][ T28] schedule+0xde/0x1b0 [ 286.280066][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.285587][ T28] __mutex_lock+0xa48/0x1360 [ 286.290209][ T28] ? reiserfs_write_lock+0x79/0x100 [ 286.295477][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.301059][ T28] ? dquot_writeback_dquots+0x25d/0xa30 [ 286.306667][ T28] ? dquot_scan_active+0x2d0/0x2d0 [ 286.311836][ T28] reiserfs_write_lock+0x79/0x100 [ 286.316930][ T28] reiserfs_sync_fs+0x81/0x130 [ 286.321819][ T28] ? handle_quota_files+0x3b0/0x3b0 [ 286.327054][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 286.332100][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.337326][ T28] ? do_raw_spin_unlock+0x175/0x230 [ 286.342632][ T28] flush_old_commits+0xfb/0x200 [ 286.347574][ T28] process_one_work+0x9bf/0x1710 [ 286.353066][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.358899][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.363889][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 286.369022][ T28] worker_thread+0x669/0x1090 [ 286.373755][ T28] ? process_one_work+0x1710/0x1710 [ 286.379019][ T28] kthread+0x2e8/0x3a0 [ 286.383105][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.388804][ T28] ret_from_fork+0x1f/0x30 [ 286.393354][ T28] [ 286.396548][ T28] INFO: task kworker/1:3:2689 blocked for more than 144 seconds. [ 286.404311][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 286.411660][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.420497][ T28] task:kworker/1:3 state:D stack:28888 pid:2689 ppid:2 flags:0x00004000 [ 286.429891][ T28] Workqueue: events_long flush_old_commits [ 286.435833][ T28] Call Trace: [ 286.439110][ T28] [ 286.442119][ T28] __schedule+0xb8a/0x5450 [ 286.446668][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 286.451902][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.457280][ T28] ? mark_held_locks+0x9f/0xe0 [ 286.462093][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.467128][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.472379][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.477665][ T28] schedule+0xde/0x1b0 [ 286.481764][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.487368][ T28] __mutex_lock+0xa48/0x1360 [ 286.491979][ T28] ? reiserfs_write_lock+0x79/0x100 [ 286.497224][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.502783][ T28] ? dquot_writeback_dquots+0x25d/0xa30 [ 286.508397][ T28] ? dquot_scan_active+0x2d0/0x2d0 [ 286.513588][ T28] reiserfs_write_lock+0x79/0x100 [ 286.518677][ T28] reiserfs_sync_fs+0x81/0x130 [ 286.523483][ T28] ? handle_quota_files+0x3b0/0x3b0 [ 286.528732][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 286.534253][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.539256][ T28] ? do_raw_spin_unlock+0x175/0x230 [ 286.544842][ T28] flush_old_commits+0xfb/0x200 [ 286.549953][ T28] process_one_work+0x9bf/0x1710 [ 286.554939][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.560394][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.565842][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 286.570883][ T28] worker_thread+0x669/0x1090 [ 286.575623][ T28] ? __kthread_parkme+0x163/0x220 [ 286.580663][ T28] ? process_one_work+0x1710/0x1710 [ 286.585947][ T28] kthread+0x2e8/0x3a0 [ 286.590060][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.595777][ T28] ret_from_fork+0x1f/0x30 [pid 5073] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./357/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./357") = 0 [pid 5073] mkdir("./358", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [ 286.600252][ T28] [ 286.603314][ T28] INFO: task syz-executor214:5087 blocked for more than 144 seconds. [ 286.611480][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 286.619240][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7059 ./strace-static-x86_64: Process 7059 attached [pid 7059] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7059] chdir("./358") = 0 [pid 7059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7059] setpgid(0, 0) = 0 [pid 7059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7059] write(3, "1000", 4) = 4 [pid 7059] close(3) = 0 [pid 7059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7059] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7059] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7059] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7060], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7060 [pid 7059] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7060 attached [pid 7060] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7060] memfd_create("syzkaller", 0) = 3 [pid 7060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 286.645491][ T28] task:syz-executor214 state:D stack:24592 pid:5087 ppid:5071 flags:0x00004004 [ 286.655006][ T28] Call Trace: [ 286.666882][ T28] [ 286.669946][ T28] __schedule+0xb8a/0x5450 [ 286.674417][ T28] ? lock_chain_count+0x20/0x20 [ 286.679419][ T28] ? find_held_lock+0x2d/0x110 [ 286.684230][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.689688][ T28] ? rwsem_down_write_slowpath+0x5af/0x12e0 [ 286.695652][ T28] ? mark_held_locks+0x9f/0xe0 [pid 7060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7060] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 286.700801][ T28] schedule+0xde/0x1b0 [ 286.704901][ T28] rwsem_down_write_slowpath+0x600/0x12e0 [ 286.710721][ T28] ? down_timeout+0x90/0x90 [ 286.715262][ T28] ? lock_release+0x810/0x810 [ 286.720050][ T28] down_write+0x1e8/0x220 [ 286.724428][ T28] ? down_write_killable+0x250/0x250 [ 286.729828][ T28] ? file_check_and_advance_wb_err+0xbf/0x410 [ 286.736194][ T28] reiserfs_sync_file+0xab/0x320 [ 286.741316][ T28] ? reiserfs_setattr+0x1460/0x1460 [pid 7060] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7060] close(3) = 0 [pid 7060] mkdir("./file0", 0777) = 0 [ 286.746808][ T28] vfs_fsync_range+0x13e/0x230 [ 286.748693][ T7060] loop4: detected capacity change from 0 to 8192 [ 286.751658][ T28] generic_file_write_iter+0x25a/0x350 [ 286.762434][ T7060] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 286.763763][ T28] do_iter_readv_writev+0x20b/0x3b0 [ 286.776733][ T7060] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 286.781816][ T28] ? generic_copy_file_range+0x1d0/0x1d0 [ 286.791173][ T7060] REISERFS (device loop4): using ordered data mode [ 286.796888][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 286.803504][ T7060] reiserfs: using flush barriers [ 286.808865][ T28] ? security_file_permission+0xaf/0xd0 [ 286.814659][ T7060] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.819368][ T28] do_iter_write+0x182/0x700 [ 286.840417][ T28] vfs_iter_write+0x74/0xa0 [ 286.840700][ T7060] REISERFS (device loop4): checking transaction log (loop4) [ 286.845021][ T28] iter_file_splice_write+0x745/0xc90 [ 286.857945][ T28] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 286.864017][ T28] ? add_to_pipe+0x3b0/0x3b0 [ 286.868923][ T28] ? security_file_permission+0xaf/0xd0 [ 286.874562][ T28] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 286.880969][ T28] direct_splice_actor+0x114/0x180 [ 286.886536][ T28] splice_direct_to_actor+0x335/0x8a0 [ 286.892001][ T28] ? do_splice_direct+0x280/0x280 [pid 7060] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [ 286.897300][ T28] ? folio_flags.constprop.0+0x150/0x150 [ 286.903041][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 286.908768][ T28] ? security_file_permission+0xaf/0xd0 [ 286.909762][ T7060] REISERFS (device loop4): Using r5 hash to sort names [ 286.914401][ T28] do_splice_direct+0x1ab/0x280 [ 286.921404][ T7060] REISERFS (device loop4): using 3.5.x disk format [ 286.926319][ T28] ? splice_direct_to_actor+0x8a0/0x8a0 [ 286.933020][ T7060] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 286.938341][ T28] do_sendfile+0xb19/0x1270 [pid 7060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7060] chdir("./file0") = 0 [pid 7060] ioctl(4, LOOP_CLR_FD) = 0 [pid 7060] close(4) = 0 [pid 7060] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] <... futex resumed>) = 0 [pid 7059] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7060] <... futex resumed>) = 1 [pid 7060] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7060] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] <... futex resumed>) = 0 [pid 7059] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7060] <... futex resumed>) = 1 [pid 7060] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7060] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] <... futex resumed>) = 0 [pid 7059] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7060] <... futex resumed>) = 1 [ 286.952314][ T28] ? vfs_iocb_iter_write+0x480/0x480 [ 286.960491][ T27] audit: type=1800 audit(1671282510.363:1164): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 286.966410][ T28] ? ptrace_notify+0xfe/0x140 [ 286.986561][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 286.991583][ T28] __x64_sys_sendfile64+0x1d0/0x210 [ 286.997285][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [pid 7060] sendfile(4, 5, NULL, 140737974943952 [pid 7059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7059] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7059] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7059] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7062], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7062 [pid 7059] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7062 attached [pid 7062] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 287.002759][ T28] ? __ia32_sys_sendfile+0x220/0x220 [ 287.008848][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.014111][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.021762][ T28] ? ptrace_notify+0xfe/0x140 [ 287.028259][ T28] do_syscall_64+0x39/0xb0 [ 287.032792][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.039375][ T28] RIP: 0033:0x7fe8fc345669 [ 287.043954][ T28] RSP: 002b:00007fe8fc2f12f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [pid 7062] open("./bus", O_RDONLY [pid 7059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7059] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7059] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7059] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7063], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7063 [pid 7059] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7063 attached [pid 7063] set_robust_list(0x7fe8f42af9e0, 24) = 0 [ 287.052817][ T28] RAX: ffffffffffffffda RBX: 00007fe8fc3cb7a0 RCX: 00007fe8fc345669 [ 287.061301][ T28] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 287.069725][ T28] RBP: 00007fe8fc3981b8 R08: 0000000000000000 R09: 0000000000000000 [ 287.079229][ T28] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0030656c69662f2e [ 287.087705][ T28] R13: 7366726573696572 R14: 65732f636f72702f R15: 00007fe8fc3cb7a8 [ 287.095853][ T28] [pid 7063] truncate("./bus", 6 [pid 7059] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 287.098920][ T28] INFO: task syz-executor214:5098 blocked for more than 144 seconds. [ 287.107392][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 287.114607][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.123432][ T28] task:syz-executor214 state:D stack:23488 pid:5098 ppid:5071 flags:0x00004004 [ 287.132752][ T28] Call Trace: [ 287.136293][ T28] [ 287.139270][ T28] __schedule+0xb8a/0x5450 [ 287.143737][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.149879][ T28] ? static_obj+0xb2/0xc0 [ 287.154270][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.159728][ T28] ? __mutex_lock+0xa43/0x1360 [ 287.164564][ T28] schedule+0xde/0x1b0 [ 287.168935][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.174472][ T28] __mutex_lock+0xa48/0x1360 [ 287.179209][ T28] ? reiserfs_write_lock+0x79/0x100 [ 287.184491][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 287.190424][ T28] ? mark_lock.part.0+0xee/0x1910 [ 287.195646][ T28] reiserfs_write_lock+0x79/0x100 [ 287.200980][ T28] reiserfs_get_block+0x1f6/0x4150 [ 287.206225][ T28] ? mark_lock.part.0+0xee/0x1910 [ 287.211289][ T28] ? lock_chain_count+0x20/0x20 [ 287.216229][ T28] ? kernel_text_address+0x3d/0x80 [ 287.221394][ T28] ? lock_chain_count+0x20/0x20 [ 287.226397][ T28] ? unwind_next_frame+0xd61/0x1d00 [ 287.231648][ T28] ? reiserfs_commit_write+0x6f0/0x6f0 [ 287.237245][ T28] ? __lock_acquire+0xbc3/0x56d0 [ 287.242221][ T28] ? mark_lock.part.0+0xee/0x1910 [ 287.247598][ T28] ? __lock_acquire+0xbc3/0x56d0 [pid 7059] exit_group(0) = ? [ 287.252584][ T28] ? mark_lock.part.0+0xee/0x1910 [ 287.257764][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.263805][ T28] ? find_held_lock+0x2d/0x110 [ 287.268670][ T28] do_mpage_readpage+0x765/0x19e0 [ 287.273756][ T28] ? zero_user_segments.constprop.0+0x6d0/0x6d0 [ 287.280124][ T28] ? __xa_clear_mark+0x120/0x120 [ 287.285344][ T28] mpage_readahead+0x344/0x580 [ 287.290206][ T28] ? do_mpage_readpage+0x19e0/0x19e0 [ 287.295631][ T28] ? reiserfs_commit_write+0x6f0/0x6f0 [ 287.301126][ T28] ? find_held_lock+0x2d/0x110 [ 287.306020][ T28] ? folio_add_lru+0x345/0x680 [ 287.310857][ T28] ? reiserfs_aop_bmap+0x30/0x30 [ 287.315886][ T28] read_pages+0x1a2/0xd40 [ 287.320289][ T28] ? folio_add_lru+0x37b/0x680 [ 287.325090][ T28] ? folio_flags.constprop.0+0x150/0x150 [ 287.330808][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.336961][ T28] ? find_held_lock+0x2d/0x110 [ 287.341759][ T28] page_cache_ra_unbounded+0x477/0x5e0 [ 287.347317][ T28] page_cache_ra_order+0x6ec/0xa00 [pid 7062] <... open resumed>) = ? [pid 7060] <... sendfile resumed>) = ? [pid 7062] +++ exited with 0 +++ [pid 7060] +++ exited with 0 +++ [pid 7063] <... truncate resumed>) = ? [pid 7063] +++ exited with 0 +++ [pid 7059] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7059, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5073] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./358/binderfs") = 0 [ 287.352479][ T28] ? blk_cgroup_congested+0x147/0x260 [ 287.358090][ T28] ondemand_readahead+0x6b3/0x1000 [ 287.363355][ T28] page_cache_sync_ra+0x1c9/0x200 [ 287.368633][ T28] filemap_get_pages+0x2ca/0x16b0 [ 287.374109][ T28] ? filemap_fault+0x23f0/0x23f0 [ 287.379610][ T28] ? is_bpf_text_address+0x7b/0x170 [ 287.385106][ T28] filemap_read+0x315/0xc00 [ 287.389774][ T28] ? write_profile+0x410/0x410 [ 287.394597][ T28] ? filemap_get_pages+0x16b0/0x16b0 [ 287.400053][ T28] ? __stack_depot_save+0x3e/0x560 [ 287.405222][ T28] generic_file_read_iter+0x3ad/0x5b0 [ 287.410672][ T28] ? process_measurement+0xd23/0x18b0 [ 287.416147][ T28] ? ima_file_check+0xb0/0x100 [ 287.420930][ T28] ? path_openat+0x15f1/0x2a50 [ 287.425783][ T28] ? iov_iter_kvec+0x49/0x1c0 [ 287.430525][ T28] __kernel_read+0x2ca/0x7c0 [ 287.435138][ T28] ? __ia32_sys_llseek+0x380/0x380 [ 287.440382][ T28] ? __kmem_cache_alloc_node+0x48/0x430 [ 287.445992][ T28] integrity_kernel_read+0x7f/0xb0 [ 287.451104][ T28] ? integrity_inode_free+0x310/0x310 [ 287.456571][ T28] ? kasan_set_track+0x25/0x30 [ 287.461386][ T28] ima_calc_file_hash_tfm+0x2aa/0x3b0 [ 287.466825][ T28] ? calc_buffer_shash_tfm+0x2b0/0x2b0 [ 287.472310][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.478398][ T28] ? lock_release+0x810/0x810 [ 287.483111][ T28] ? ima_alloc_tfm+0x214/0x2d0 [ 287.487942][ T28] ima_calc_file_hash+0x195/0x4a0 [ 287.493035][ T28] ima_collect_measurement+0x642/0x7b0 [ 287.498629][ T28] ? ima_get_action+0xa0/0xa0 [ 287.503391][ T28] ? ima_get_cache_status+0x1e0/0x1e0 [ 287.508857][ T28] process_measurement+0xd23/0x18b0 [ 287.514202][ T28] ? mmap_violation_check+0x1f0/0x1f0 [ 287.519672][ T28] ? tomoyo_check_open_permission+0x1f6/0x3a0 [ 287.525824][ T28] ? tomoyo_path_number_perm+0x570/0x570 [ 287.531475][ T28] ? apparmor_file_open+0x1a9/0xb80 [ 287.536745][ T28] ? hook_path_mknod+0x6b0/0x6b0 [ 287.541713][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 287.546656][ T28] ? apparmor_path_chmod+0x30/0x30 [ 287.551842][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 287.556912][ T28] ? apparmor_current_getsecid_subj+0x1f9/0x570 [ 287.563213][ T28] ima_file_check+0xb0/0x100 [ 287.567872][ T28] ? do_dentry_open+0xd1f/0x13f0 [ 287.573064][ T28] ? process_measurement+0x18b0/0x18b0 [ 287.578790][ T28] ? reiserfs_file_release+0xcb0/0xcb0 [ 287.584294][ T28] ? may_open+0x1f6/0x420 [ 287.588716][ T28] path_openat+0x15f1/0x2a50 [ 287.593346][ T28] ? path_lookupat+0x840/0x840 [ 287.598235][ T28] do_filp_open+0x1ba/0x410 [ 287.602810][ T28] ? may_open_dev+0xf0/0xf0 [ 287.607373][ T28] ? find_held_lock+0x2d/0x110 [ 287.612178][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 287.617290][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 287.622438][ T28] ? _raw_spin_unlock+0x28/0x40 [ 287.627431][ T28] ? alloc_fd+0x2d8/0x6d0 [ 287.631808][ T28] do_sys_openat2+0x16d/0x4c0 [ 287.636607][ T28] ? build_open_flags+0x6f0/0x6f0 [ 287.641692][ T28] ? ptrace_notify+0xfe/0x140 [ 287.646450][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 287.651350][ T28] __x64_sys_open+0x11d/0x1c0 [ 287.656120][ T28] ? do_sys_open+0x150/0x150 [ 287.660748][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.666067][ T28] ? ptrace_notify+0xfe/0x140 [ 287.670779][ T28] do_syscall_64+0x39/0xb0 [ 287.675199][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.681183][ T28] RIP: 0033:0x7fe8fc345669 [ 287.685840][ T28] RSP: 002b:00007fe8f42d02f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 287.694490][ T28] RAX: ffffffffffffffda RBX: 00007fe8fc3cb7b0 RCX: 00007fe8fc345669 [ 287.702578][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 287.710650][ T28] RBP: 00007fe8fc3981b8 R08: 00007fe8f42d0700 R09: 0000000000000000 [ 287.718924][ T28] R10: 00007fe8f42d0700 R11: 0000000000000246 R12: 0030656c69662f2e [ 287.726990][ T28] R13: 7366726573696572 R14: 65732f636f72702f R15: 00007fe8fc3cb7b8 [ 287.735238][ T28] [ 287.738554][ T28] INFO: task syz-executor214:5103 blocked for more than 145 seconds. [ 287.746751][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 287.754686][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.763556][ T28] task:syz-executor214 state:D stack:28648 pid:5103 ppid:5071 flags:0x00004004 [ 287.772872][ T28] Call Trace: [ 287.776220][ T28] [ 287.779189][ T28] __schedule+0xb8a/0x5450 [ 287.783618][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.789681][ T28] ? mark_lock.part.0+0xee/0x1910 [ 287.794826][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.800225][ T28] ? mark_held_locks+0x9f/0xe0 [ 287.805007][ T28] schedule+0xde/0x1b0 [ 287.809155][ T28] io_schedule+0xbe/0x130 [ 287.813517][ T28] folio_wait_bit_common+0x394/0x9b0 [ 287.818991][ T28] ? filemap_range_has_writeback+0x650/0x650 [ 287.825006][ T28] ? __filemap_get_folio+0x254/0xd80 [ 287.830366][ T28] ? folio_unlock+0xd0/0xd0 [ 287.834898][ T28] __filemap_get_folio+0xb71/0xd80 [ 287.840112][ T28] ? filemap_add_folio+0x1e0/0x1e0 [ 287.845659][ T28] pagecache_get_page+0x2e/0x280 [ 287.850597][ T28] reiserfs_truncate_file+0x5bb/0x1070 [ 287.856342][ T28] ? reiserfs_write_inode+0x2d0/0x2d0 [ 287.861850][ T28] ? unmap_mapping_range+0x109/0x280 [ 287.867189][ T28] ? unmap_mapping_pages+0x270/0x270 [ 287.872501][ T28] ? unmap_mapping_pages+0x270/0x270 [ 287.877869][ T28] ? setattr_prepare+0x13c/0xc30 [ 287.882930][ T28] reiserfs_setattr+0xed3/0x1460 [ 287.888122][ T28] ? reiserfs_new_inode+0x2190/0x2190 [ 287.893523][ T28] ? current_time+0x1fe/0x2c0 [ 287.898290][ T28] ? evm_inode_setattr+0x7e/0x710 [ 287.903462][ T28] ? mode_strip_sgid+0x210/0x210 [ 287.908475][ T28] ? reiserfs_new_inode+0x2190/0x2190 [ 287.913867][ T28] notify_change+0xca7/0x1420 [ 287.918644][ T28] ? do_truncate+0x143/0x200 [ 287.923303][ T28] do_truncate+0x143/0x200 [ 287.927798][ T28] ? file_open_root+0x430/0x430 [ 287.932688][ T28] ? reiserfs_listxattr+0x2e0/0x2e0 [ 287.937977][ T28] ? inode_permission.part.0+0xb5/0x670 [ 287.943752][ T28] vfs_truncate+0x3c2/0x490 [ 287.948391][ T28] do_sys_truncate.part.0+0x11e/0x140 [ 287.953802][ T28] ? vfs_truncate+0x490/0x490 [ 287.958560][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.963812][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.969094][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.974436][ T28] __x64_sys_truncate+0x6d/0xa0 [ 287.979398][ T28] do_syscall_64+0x39/0xb0 [ 287.983880][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.989831][ T28] RIP: 0033:0x7fe8fc345669 [ 287.994354][ T28] RSP: 002b:00007fe8f42af2f8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 288.002861][ T28] RAX: ffffffffffffffda RBX: 00007fe8fc3cb7c0 RCX: 00007fe8fc345669 [ 288.010900][ T28] RDX: 00007fe8f42af700 RSI: 0000000000000006 RDI: 00000000200001c0 [ 288.018953][ T28] RBP: 00007fe8fc3981b8 R08: 00007fe8f42af700 R09: 0000000000000000 [ 288.027127][ T28] R10: 00007fe8f42af700 R11: 0000000000000246 R12: 0030656c69662f2e [ 288.035097][ T28] R13: 7366726573696572 R14: 65732f636f72702f R15: 00007fe8fc3cb7c8 [ 288.043364][ T28] [ 288.046469][ T28] INFO: task syz-executor214:5120 blocked for more than 145 seconds. [ 288.054831][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 288.062631][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.071420][ T28] task:syz-executor214 state:D stack:24376 pid:5120 ppid:5069 flags:0x00004004 [ 288.080753][ T28] Call Trace: [ 288.084066][ T28] [ 288.087145][ T28] __schedule+0xb8a/0x5450 [ 288.091613][ T28] ? lock_chain_count+0x20/0x20 [ 288.096599][ T28] ? find_held_lock+0x2d/0x110 [ 288.101478][ T28] ? io_schedule_timeout+0x150/0x150 [pid 5073] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./358/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./358") = 0 [pid 5073] mkdir("./359", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7064 ./strace-static-x86_64: Process 7064 attached [pid 7064] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7064] chdir("./359") = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7064] setpgid(0, 0) = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 288.107201][ T28] ? rwsem_down_write_slowpath+0x5af/0x12e0 [ 288.113173][ T28] ? mark_held_locks+0x9f/0xe0 [ 288.118165][ T28] schedule+0xde/0x1b0 [ 288.122409][ T28] rwsem_down_write_slowpath+0x600/0x12e0 [ 288.128268][ T28] ? down_timeout+0x90/0x90 [ 288.136185][ T28] ? lock_release+0x810/0x810 [ 288.141413][ T28] down_write+0x1e8/0x220 [ 288.146103][ T28] ? down_write_killable+0x250/0x250 [pid 7064] write(3, "1000", 4) = 4 [pid 7064] close(3) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7064] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7064] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7064] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7065], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7065 [pid 7064] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7065 attached [pid 7065] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7065] memfd_create("syzkaller", 0) = 3 [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 288.158497][ T28] ? aa_path_link+0x2f0/0x2f0 [ 288.163935][ T28] ? do_splice_direct+0x1ab/0x280 [ 288.169849][ T28] ? do_sendfile+0xb19/0x1270 [ 288.174936][ T28] ? __x64_sys_sendfile64+0x1d0/0x210 [ 288.180689][ T28] ? do_syscall_64+0x39/0xb0 [ 288.185331][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 288.191753][ T28] generic_file_write_iter+0x92/0x350 [ 288.197533][ T28] do_iter_readv_writev+0x20b/0x3b0 [ 288.203041][ T28] ? generic_copy_file_range+0x1d0/0x1d0 [pid 7065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7065] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7065] close(3) = 0 [pid 7065] mkdir("./file0", 0777) = 0 [ 288.209097][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 288.214539][ T28] ? security_file_permission+0xaf/0xd0 [ 288.221262][ T28] do_iter_write+0x182/0x700 [ 288.226830][ T28] vfs_iter_write+0x74/0xa0 [ 288.231873][ T28] iter_file_splice_write+0x745/0xc90 [ 288.232544][ T7065] loop4: detected capacity change from 0 to 8192 [ 288.237880][ T28] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 288.248778][ T7065] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 288.250078][ T28] ? add_to_pipe+0x3b0/0x3b0 [ 288.263528][ T7065] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 288.267281][ T28] ? security_file_permission+0xaf/0xd0 [ 288.276695][ T7065] REISERFS (device loop4): using ordered data mode [ 288.282748][ T28] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 288.288759][ T7065] reiserfs: using flush barriers [ 288.294954][ T28] direct_splice_actor+0x114/0x180 [ 288.301596][ T7065] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.304791][ T28] splice_direct_to_actor+0x335/0x8a0 [ 288.321613][ T7065] REISERFS (device loop4): checking transaction log (loop4) [ 288.326392][ T28] ? do_splice_direct+0x280/0x280 [ 288.338975][ T28] ? folio_flags.constprop.0+0x150/0x150 [ 288.344649][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 288.350584][ T28] ? security_file_permission+0xaf/0xd0 [ 288.356614][ T28] do_splice_direct+0x1ab/0x280 [ 288.361596][ T28] ? splice_direct_to_actor+0x8a0/0x8a0 [ 288.367642][ T28] do_sendfile+0xb19/0x1270 [ 288.372353][ T28] ? vfs_iocb_iter_write+0x480/0x480 [ 288.378073][ T28] ? ptrace_notify+0xfe/0x140 [ 288.382782][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 288.388038][ T28] __x64_sys_sendfile64+0x1d0/0x210 [ 288.393271][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.398916][ T28] ? __ia32_sys_sendfile+0x220/0x220 [ 288.404330][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [pid 7065] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7065] chdir("./file0") = 0 [pid 7065] ioctl(4, LOOP_CLR_FD) = 0 [pid 7065] close(4) = 0 [pid 7065] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] futex(0x7fe8fc3cb7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7064] <... futex resumed>) = 0 [pid 7064] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 288.407200][ T7065] REISERFS (device loop4): Using r5 hash to sort names [ 288.409979][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 288.416944][ T7065] REISERFS (device loop4): using 3.5.x disk format [ 288.422158][ T28] ? ptrace_notify+0xfe/0x140 [ 288.429121][ T7065] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 288.433471][ T28] do_syscall_64+0x39/0xb0 [ 288.446794][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 288.452734][ T28] RIP: 0033:0x7fe8fc345669 [pid 7064] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7065] <... futex resumed>) = 0 [pid 7065] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7065] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... futex resumed>) = 0 [pid 7064] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7065] <... futex resumed>) = 1 [pid 7065] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7065] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... futex resumed>) = 0 [pid 7064] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7065] <... futex resumed>) = 1 [ 288.457454][ T28] RSP: 002b:00007fe8fc2f12f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 288.466131][ T28] RAX: ffffffffffffffda RBX: 00007fe8fc3cb7a0 RCX: 00007fe8fc345669 [ 288.474435][ T28] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 288.484175][ T28] RBP: 00007fe8fc3981b8 R08: 0000000000000000 R09: 0000000000000000 [ 288.492770][ T28] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0030656c69662f2e [ 288.501149][ T28] R13: 7366726573696572 R14: 65732f636f72702f R15: 00007fe8fc3cb7a8 [pid 7065] sendfile(4, 5, NULL, 140737974943952 [pid 7064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7064] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7064] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7064] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7067], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7067 [pid 7064] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7067 attached [pid 7067] set_robust_list(0x7fe8f42d09e0, 24) = 0 [ 288.509314][ T28] [ 288.512408][ T28] INFO: task syz-executor214:5127 blocked for more than 146 seconds. [ 288.521329][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 288.529045][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.537969][ T28] task:syz-executor214 state:D stack:23752 pid:5127 ppid:5069 flags:0x00004004 [ 288.547286][ T28] Call Trace: [ 288.550600][ T28] [ 288.553569][ T28] __schedule+0xb8a/0x5450 [pid 7067] open("./bus", O_RDONLY [pid 7064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7064] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7064] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7064] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7068], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7068 [pid 7064] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7068 attached [pid 7068] set_robust_list(0x7fe8f42af9e0, 24) = 0 [ 288.558070][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 288.564074][ T28] ? static_obj+0xb2/0xc0 [ 288.568491][ T28] ? io_schedule_timeout+0x150/0x150 [ 288.573842][ T28] ? __mutex_lock+0xa43/0x1360 [ 288.578745][ T28] schedule+0xde/0x1b0 [ 288.582849][ T28] schedule_preempt_disabled+0x13/0x20 [ 288.588452][ T28] __mutex_lock+0xa48/0x1360 [ 288.593097][ T28] ? reiserfs_write_lock+0x79/0x100 [ 288.598511][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 288.604111][ T28] ? mark_lock.part.0+0xee/0x1910 [pid 7068] truncate("./bus", 6 [pid 7064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 288.609575][ T28] reiserfs_write_lock+0x79/0x100 [ 288.614631][ T28] reiserfs_get_block+0x1f6/0x4150 [ 288.619791][ T28] ? mark_lock.part.0+0xee/0x1910 [ 288.624844][ T28] ? lock_chain_count+0x20/0x20 [ 288.629836][ T28] ? kernel_text_address+0x3d/0x80 [ 288.635016][ T28] ? lock_chain_count+0x20/0x20 [ 288.639943][ T28] ? unwind_next_frame+0xd61/0x1d00 [ 288.645187][ T28] ? reiserfs_commit_write+0x6f0/0x6f0 [ 288.650790][ T28] ? __lock_acquire+0xbc3/0x56d0 [ 288.655803][ T28] ? mark_lock.part.0+0xee/0x1910 [ 288.660855][ T28] ? __lock_acquire+0xbc3/0x56d0 [ 288.665967][ T28] ? mark_lock.part.0+0xee/0x1910 [ 288.671010][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 288.677047][ T28] ? find_held_lock+0x2d/0x110 [ 288.681868][ T28] do_mpage_readpage+0x765/0x19e0 [ 288.687021][ T28] ? zero_user_segments.constprop.0+0x6d0/0x6d0 [ 288.693293][ T28] ? __xa_clear_mark+0x120/0x120 [ 288.698320][ T28] mpage_readahead+0x344/0x580 [ 288.703212][ T28] ? do_mpage_readpage+0x19e0/0x19e0 [ 288.708667][ T28] ? reiserfs_commit_write+0x6f0/0x6f0 [ 288.714168][ T28] ? find_held_lock+0x2d/0x110 [ 288.719051][ T28] ? folio_add_lru+0x345/0x680 [ 288.723862][ T28] ? reiserfs_aop_bmap+0x30/0x30 [ 288.728915][ T28] read_pages+0x1a2/0xd40 [ 288.733271][ T28] ? folio_add_lru+0x37b/0x680 [ 288.738077][ T28] ? folio_flags.constprop.0+0x150/0x150 [ 288.743735][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 288.749800][ T28] ? find_held_lock+0x2d/0x110 [ 288.754617][ T28] page_cache_ra_unbounded+0x477/0x5e0 [pid 7068] <... truncate resumed>) = 0 [pid 7067] <... open resumed>) = 6 [pid 7068] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] <... futex resumed>) = 0 [pid 7067] <... futex resumed>) = 0 [pid 7068] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 288.760248][ T28] page_cache_ra_order+0x6ec/0xa00 [ 288.765394][ T28] ? blk_cgroup_congested+0x147/0x260 [ 288.771057][ T28] ondemand_readahead+0x6b3/0x1000 [ 288.776337][ T28] page_cache_sync_ra+0x1c9/0x200 [ 288.781573][ T28] filemap_get_pages+0x2ca/0x16b0 [ 288.786798][ T28] ? filemap_fault+0x23f0/0x23f0 [ 288.792123][ T28] ? is_bpf_text_address+0x7b/0x170 [ 288.797607][ T28] filemap_read+0x315/0xc00 [ 288.802157][ T28] ? write_profile+0x410/0x410 [pid 7067] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7064] exit_group(0 [pid 7068] <... futex resumed>) = ? [pid 7067] <... futex resumed>) = ? [pid 7064] <... exit_group resumed>) = ? [pid 7068] +++ exited with 0 +++ [pid 7067] +++ exited with 0 +++ [ 288.807300][ T28] ? filemap_get_pages+0x16b0/0x16b0 [ 288.812676][ T28] ? __stack_depot_save+0x3e/0x560 [ 288.818132][ T28] generic_file_read_iter+0x3ad/0x5b0 [ 288.823568][ T28] ? process_measurement+0xd23/0x18b0 [ 288.829440][ T28] ? ima_file_check+0xb0/0x100 [ 288.834264][ T28] ? path_openat+0x15f1/0x2a50 [ 288.839274][ T28] ? iov_iter_kvec+0x49/0x1c0 [ 288.844087][ T28] __kernel_read+0x2ca/0x7c0 [ 288.848810][ T28] ? __ia32_sys_llseek+0x380/0x380 [ 288.853974][ T28] ? find_held_lock+0x2d/0x110 [pid 7065] <... sendfile resumed>) = ? [pid 7065] +++ exited with 0 +++ [pid 7064] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7064, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5073] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./359/binderfs") = 0 [ 288.858873][ T28] ? __kmem_cache_alloc_node+0x48/0x430 [ 288.864467][ T28] integrity_kernel_read+0x7f/0xb0 [ 288.869706][ T28] ? integrity_inode_free+0x310/0x310 [ 288.875131][ T28] ? kasan_set_track+0x25/0x30 [ 288.880358][ T28] ima_calc_file_hash_tfm+0x2aa/0x3b0 [ 288.885998][ T28] ? calc_buffer_shash_tfm+0x2b0/0x2b0 [ 288.891497][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 288.897734][ T28] ? lock_release+0x810/0x810 [ 288.902463][ T28] ? ima_alloc_tfm+0x214/0x2d0 [ 288.907317][ T28] ima_calc_file_hash+0x195/0x4a0 [ 288.912385][ T28] ima_collect_measurement+0x642/0x7b0 [ 288.918022][ T28] ? ima_get_action+0xa0/0xa0 [ 288.922740][ T28] ? ima_get_cache_status+0x1e0/0x1e0 [ 288.928198][ T28] process_measurement+0xd23/0x18b0 [ 288.933421][ T28] ? mmap_violation_check+0x1f0/0x1f0 [ 288.938848][ T28] ? tomoyo_check_open_permission+0x1f6/0x3a0 [ 288.945060][ T28] ? tomoyo_path_number_perm+0x570/0x570 [ 288.950804][ T28] ? apparmor_file_open+0x1a9/0xb80 [ 288.956135][ T28] ? hook_path_mknod+0x6b0/0x6b0 [ 288.961116][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 288.966021][ T28] ? apparmor_path_chmod+0x30/0x30 [ 288.971309][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 288.976364][ T28] ? apparmor_current_getsecid_subj+0x1f9/0x570 [ 288.983473][ T28] ima_file_check+0xb0/0x100 [ 288.988149][ T28] ? do_dentry_open+0xd1f/0x13f0 [ 288.993136][ T28] ? process_measurement+0x18b0/0x18b0 [ 288.998765][ T28] ? reiserfs_file_release+0xcb0/0xcb0 [ 289.004267][ T28] ? may_open+0x1f6/0x420 [ 289.008681][ T28] path_openat+0x15f1/0x2a50 [ 289.013407][ T28] ? path_lookupat+0x840/0x840 [ 289.018289][ T28] do_filp_open+0x1ba/0x410 [ 289.022846][ T28] ? may_open_dev+0xf0/0xf0 [ 289.027511][ T28] ? find_held_lock+0x2d/0x110 [ 289.032416][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 289.037537][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 289.043050][ T28] ? _raw_spin_unlock+0x28/0x40 [ 289.047984][ T28] ? alloc_fd+0x2d8/0x6d0 [ 289.052358][ T28] do_sys_openat2+0x16d/0x4c0 [ 289.057110][ T28] ? build_open_flags+0x6f0/0x6f0 [ 289.062176][ T28] ? ptrace_notify+0xfe/0x140 [ 289.067178][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 289.072176][ T28] __x64_sys_open+0x11d/0x1c0 [ 289.076947][ T28] ? do_sys_open+0x150/0x150 [ 289.081581][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.086872][ T28] ? ptrace_notify+0xfe/0x140 [ 289.091601][ T28] do_syscall_64+0x39/0xb0 [ 289.096125][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 289.102078][ T28] RIP: 0033:0x7fe8fc345669 [ 289.106564][ T28] RSP: 002b:00007fe8f42d02f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 289.115031][ T28] RAX: ffffffffffffffda RBX: 00007fe8fc3cb7b0 RCX: 00007fe8fc345669 [ 289.123085][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 289.131593][ T28] RBP: 00007fe8fc3981b8 R08: 00007fe8f42d0700 R09: 0000000000000000 [ 289.140099][ T28] R10: 00007fe8f42d0700 R11: 0000000000000246 R12: 0030656c69662f2e [ 289.148150][ T28] R13: 7366726573696572 R14: 65732f636f72702f R15: 00007fe8fc3cb7b8 [ 289.156282][ T28] [ 289.159352][ T28] INFO: task syz-executor214:5129 blocked for more than 146 seconds. [ 289.169205][ T28] Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 289.176510][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.185204][ T28] task:syz-executor214 state:D stack:28984 pid:5129 ppid:5069 flags:0x00004004 [ 289.194504][ T28] Call Trace: [ 289.197892][ T28] [ 289.200844][ T28] __schedule+0xb8a/0x5450 [ 289.205254][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 289.211314][ T28] ? mark_lock.part.0+0xee/0x1910 [ 289.216474][ T28] ? io_schedule_timeout+0x150/0x150 [ 289.221781][ T28] ? mark_held_locks+0x9f/0xe0 [ 289.226631][ T28] schedule+0xde/0x1b0 [ 289.230732][ T28] io_schedule+0xbe/0x130 [ 289.235055][ T28] folio_wait_bit_common+0x394/0x9b0 [ 289.240462][ T28] ? filemap_range_has_writeback+0x650/0x650 [ 289.246627][ T28] ? __filemap_get_folio+0x254/0xd80 [ 289.251925][ T28] ? folio_unlock+0xd0/0xd0 [ 289.256511][ T28] __filemap_get_folio+0xb71/0xd80 [ 289.261828][ T28] ? filemap_add_folio+0x1e0/0x1e0 [ 289.267019][ T28] pagecache_get_page+0x2e/0x280 [ 289.272076][ T28] reiserfs_truncate_file+0x5bb/0x1070 [ 289.277615][ T28] ? reiserfs_write_inode+0x2d0/0x2d0 [ 289.283032][ T28] ? unmap_mapping_range+0x109/0x280 [ 289.288607][ T28] ? unmap_mapping_pages+0x270/0x270 [ 289.294097][ T28] ? unmap_mapping_pages+0x270/0x270 [ 289.299439][ T28] ? setattr_prepare+0x13c/0xc30 [ 289.304703][ T28] reiserfs_setattr+0xed3/0x1460 [ 289.309691][ T28] ? reiserfs_new_inode+0x2190/0x2190 [ 289.315157][ T28] ? current_time+0x1fe/0x2c0 [ 289.319902][ T28] ? evm_inode_setattr+0x7e/0x710 [ 289.324955][ T28] ? mode_strip_sgid+0x210/0x210 [ 289.330061][ T28] ? reiserfs_new_inode+0x2190/0x2190 [ 289.335524][ T28] notify_change+0xca7/0x1420 [ 289.340262][ T28] ? do_truncate+0x143/0x200 [ 289.344861][ T28] do_truncate+0x143/0x200 [ 289.349427][ T28] ? file_open_root+0x430/0x430 [ 289.354438][ T28] ? reiserfs_listxattr+0x2e0/0x2e0 [ 289.359727][ T28] ? inode_permission.part.0+0xb5/0x670 [ 289.365565][ T28] vfs_truncate+0x3c2/0x490 [ 289.370111][ T28] do_sys_truncate.part.0+0x11e/0x140 [ 289.375560][ T28] ? vfs_truncate+0x490/0x490 [ 289.380380][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.385647][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 289.390883][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.396179][ T28] __x64_sys_truncate+0x6d/0xa0 [ 289.401098][ T28] do_syscall_64+0x39/0xb0 [ 289.405601][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 289.411885][ T28] RIP: 0033:0x7fe8fc345669 [ 289.416706][ T28] RSP: 002b:00007fe8f42af2f8 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 289.425506][ T28] RAX: ffffffffffffffda RBX: 00007fe8fc3cb7c0 RCX: 00007fe8fc345669 [ 289.433938][ T28] RDX: 00007fe8f42af700 RSI: 0000000000000006 RDI: 00000000200001c0 [ 289.442071][ T28] RBP: 00007fe8fc3981b8 R08: 00007fe8f42af700 R09: 0000000000000000 [ 289.450143][ T28] R10: 00007fe8f42af700 R11: 0000000000000246 R12: 0030656c69662f2e [pid 5073] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./359/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [ 289.458425][ T28] R13: 7366726573696572 R14: 65732f636f72702f R15: 00007fe8fc3cb7c8 [ 289.466525][ T28] [ 289.469602][ T28] [ 289.469602][ T28] Showing all locks held in the system: [ 289.477412][ T28] 4 locks held by kworker/0:0/7: [ 289.482381][ T28] #0: ffff888012065538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [pid 5073] rmdir("./359") = 0 [pid 5073] mkdir("./360", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7069 ./strace-static-x86_64: Process 7069 attached [pid 7069] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7069] chdir("./360") = 0 [pid 7069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7069] setpgid(0, 0) = 0 [pid 7069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7069] write(3, "1000", 4) = 4 [pid 7069] close(3) = 0 [pid 7069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7069] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8fc2d1000 [pid 7069] mprotect(0x7fe8fc2d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7069] clone(child_stack=0x7fe8fc2f13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7070], tls=0x7fe8fc2f1700, child_tidptr=0x7fe8fc2f19d0) = 7070 [pid 7069] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7070 attached [pid 7070] set_robust_list(0x7fe8fc2f19e0, 24) = 0 [pid 7070] memfd_create("syzkaller", 0) = 3 [pid 7070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe8f3ed1000 [ 289.512749][ T28] #1: ffffc900000c7da8 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 289.530987][ T28] #2: ffff8880212dc0e0 (&type->s_umount_key#41){++++}-{3:3}, at: flush_old_commits+0x7c/0x200 [ 289.542416][ T28] #3: ffff88801dc65090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 289.553030][ T28] 1 lock held by rcu_tasks_kthre/12: [pid 7070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 7070] munmap(0x7fe8f3ed1000, 4194304) = 0 [pid 7070] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7070] close(3) = 0 [pid 7070] mkdir("./file0", 0777) = 0 [ 289.558784][ T28] #0: ffffffff8c590b70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 289.569876][ T28] 1 lock held by rcu_tasks_trace/13: [ 289.575249][ T28] #0: ffffffff8c590870 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 289.587001][ T28] 4 locks held by kworker/1:0/22: [ 289.589757][ T7070] loop4: detected capacity change from 0 to 8192 [ 289.592413][ T28] #0: ffff888012065538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 289.602624][ T7070] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 289.611824][ T28] #1: ffffc900001c7da8 [ 289.624359][ T7070] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 289.624383][ T28] ((work_completion)(&(&sbi->old_work)->work) [ 289.637916][ T7070] REISERFS (device loop4): using ordered data mode [ 289.638348][ T28] ){+.+.}-{0:0} [ 289.644285][ T7070] reiserfs: using flush barriers [ 289.651198][ T28] , at: process_one_work+0x8a1/0x1710 [ 289.655355][ T7070] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 289.659843][ T28] #2: [ 289.665252][ T7070] REISERFS (device loop4): checking transaction log (loop4) [ 289.681698][ T28] ffff88807d9740e0 (&type->s_umount_key#41){++++}-{3:3}, at: flush_old_commits+0x7c/0x200 [ 289.701989][ T28] #3: ffff8881452ea090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 289.712889][ T28] 4 locks held by kworker/1:1/26: [ 289.718575][ T28] #0: ffff888012065538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 289.730008][ T28] #1: ffffc90000a1fda8 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 289.742793][ T28] #2: ffff88807c5be0e0 (&type->s_umount_key#41){++++}-{3:3}, at: flush_old_commits+0x7c/0x200 [ 289.750464][ T7070] REISERFS (device loop4): Using r5 hash to sort names [ 289.753732][ T28] #3: [pid 7070] mount("/dev/loop4", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 7070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7070] chdir("./file0") = 0 [pid 7070] ioctl(4, LOOP_CLR_FD) = 0 [pid 7070] close(4) = 0 [pid 7070] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7069] <... futex resumed>) = 0 [pid 7069] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7070] <... futex resumed>) = 1 [pid 7070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 7070] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7069] <... futex resumed>) = 0 [pid 7069] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7070] <... futex resumed>) = 1 [pid 7070] openat(-1, "/proc/self/exe", O_RDONLY) = 5 [pid 7070] futex(0x7fe8fc3cb7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7069] <... futex resumed>) = 0 [pid 7069] futex(0x7fe8fc3cb7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fe8fc3cb7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7070] <... futex resumed>) = 1 [ 289.760592][ T7070] REISERFS (device loop4): using 3.5.x disk format [ 289.760626][ T28] ffff8880203d8090 [ 289.763567][ T7070] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 289.770414][ T28] ( [ 289.794788][ T27] kauditd_printk_skb: 5 callbacks suppressed [pid 7070] sendfile(4, 5, NULL, 140737974943952 [pid 7069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7069] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f42b0000 [pid 7069] mprotect(0x7fe8f42b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7069] clone(child_stack=0x7fe8f42d03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7072], tls=0x7fe8f42d0700, child_tidptr=0x7fe8f42d09d0) = 7072 [pid 7069] futex(0x7fe8fc3cb7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fe8fc3cb7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7072 attached [ 289.794803][ T27] audit: type=1800 audit(1671282513.183:1170): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 289.818710][ T28] &sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 289.832203][ T28] 1 lock held by khungtaskd/28: [ 289.837122][ T28] #0: ffffffff8c5916c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 [ 289.847089][ T28] 5 locks held by kworker/u4:2/41: [ 289.852269][ T28] 4 locks held by kworker/1:3/2689: [pid 7072] set_robust_list(0x7fe8f42d09e0, 24) = 0 [pid 7072] open("./bus", O_RDONLY [pid 7069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7069] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe8f428f000 [pid 7069] mprotect(0x7fe8f4290000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7069] clone(child_stack=0x7fe8f42af3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7073], tls=0x7fe8f42af700, child_tidptr=0x7fe8f42af9d0) = 7073 [pid 7069] futex(0x7fe8fc3cb7c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fe8fc3cb7cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7073 attached [pid 7073] set_robust_list(0x7fe8f42af9e0, 24) = 0 [ 289.857597][ T28] #0: ffff888012065538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 289.868567][ T28] #1: ffffc9000aff7da8 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 289.880961][ T28] #2: ffff88802abe20e0 (&type->s_umount_key#41){++++}-{3:3}, at: flush_old_commits+0x7c/0x200 [ 289.891468][ T28] #3: ffff8880177a3090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 289.901038][ T28] 1 lock held by klogd/4419: [ 289.905690][ T28] #0: ffff8880b9a3b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 [pid 7073] truncate("./bus", 6 [pid 7069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 289.915758][ T28] 2 locks held by getty/4746: [ 289.920465][ T28] #0: ffff88802b03b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 289.930462][ T28] #1: ffffc900015802f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 289.940682][ T28] 2 locks held by syz-executor214/5087: [ 289.946308][ T28] #0: ffff8880212dc460 (sb_writers#9){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d0/0x210 [ 289.956263][ T28] #1: ffff88807355be80 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: reiserfs_sync_file+0xab/0x320 [ 289.967355][ T28] 3 locks held by syz-executor214/5098: [ 289.972997][ T28] #0: ffff88801ba6faa0 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x3ab/0x18b0 [ 289.983011][ T28] #1: ffff88807355c020 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x153/0x5e0 [ 289.994537][ T28] #2: ffff88801dc65090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.004163][ T28] 4 locks held by syz-executor214/5103: [ 290.009768][ T28] #0: ffff8880212dc460 (sb_writers#9){.+.+}-{0:0}, at: vfs_truncate+0xee/0x490 [ 290.018905][ T28] #1: ffff88807355be80 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x131/0x200 [ 290.029364][ T28] #2: ffff88807355bc58 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_setattr+0xe9d/0x1460 [ 290.039091][ T28] #3: ffff88801dc65090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.048687][ T28] 2 locks held by syz-executor214/5120: [ 290.054264][ T28] #0: ffff88807c5be460 (sb_writers#9){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d0/0x210 [ 290.064323][ T28] #1: ffff88807363d260 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: generic_file_write_iter+0x92/0x350 [ 290.075747][ T28] 3 locks held by syz-executor214/5127: [ 290.081302][ T28] #0: ffff888027ac4860 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x3ab/0x18b0 [ 290.091198][ T28] #1: ffff88807363d400 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x153/0x5e0 [ 290.102538][ T28] #2: ffff8880203d8090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.112175][ T28] 4 locks held by syz-executor214/5129: [pid 7073] <... truncate resumed>) = 0 [pid 7072] <... open resumed>) = 6 [pid 7073] futex(0x7fe8fc3cb7cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7072] futex(0x7fe8fc3cb7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7073] <... futex resumed>) = 0 [pid 7072] <... futex resumed>) = 0 [pid 7073] futex(0x7fe8fc3cb7c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 290.117848][ T28] #0: ffff88807c5be460 (sb_writers#9){.+.+}-{0:0}, at: vfs_truncate+0xee/0x490 [ 290.127051][ T27] audit: type=1804 audit(1671282513.533:1171): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor214" name="/root/syzkaller.kSEdvM/360/file0/bus" dev="loop4" ino=2 res=1 errno=0 [ 290.130060][ T28] #1: [pid 7072] futex(0x7fe8fc3cb7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7069] exit_group(0) = ? [pid 7072] <... futex resumed>) = ? [pid 7072] +++ exited with 0 +++ [pid 7073] <... futex resumed>) = ? [pid 7073] +++ exited with 0 +++ [pid 7070] <... sendfile resumed>) = ? [pid 7070] +++ exited with 0 +++ [pid 7069] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7069, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5073] unlink("./360/binderfs") = 0 [ 290.150201][ T27] audit: type=1800 audit(1671282513.533:1172): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor214" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 290.172890][ T28] ffff88807363d260 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x131/0x200 [ 290.183253][ T28] #2: ffff88807363d038 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_setattr+0xe9d/0x1460 [ 290.193095][ T28] #3: ffff8880203d8090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.202949][ T28] 4 locks held by kworker/0:4/5174: [ 290.208593][ T28] #0: ffff888012065538 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 290.220213][ T28] #1: ffffc900047c7da8 ((work_completion)(&(&sbi->old_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 290.232504][ T28] #2: ffff88807d3a80e0 (&type->s_umount_key#41){++++}-{3:3}, at: flush_old_commits+0x7c/0x200 [ 290.243051][ T28] #3: ffff88801bc5f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.252786][ T28] 2 locks held by syz-executor214/5267: [ 290.258383][ T28] #0: ffff88807d974460 (sb_writers#9){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d0/0x210 [ 290.268530][ T28] #1: ffff88806e877a20 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: generic_file_write_iter+0x92/0x350 [ 290.280043][ T28] 3 locks held by syz-executor214/5274: [ 290.285637][ T28] #0: ffff888078d08ce0 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x3ab/0x18b0 [ 290.295548][ T28] #1: ffff88806e877bc0 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x153/0x5e0 [ 290.306933][ T28] #2: ffff8881452ea090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.316467][ T28] 4 locks held by syz-executor214/5276: [ 290.322053][ T28] #0: ffff88807d974460 (sb_writers#9){.+.+}-{0:0}, at: vfs_truncate+0xee/0x490 [ 290.331265][ T28] #1: ffff88806e877a20 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x131/0x200 [ 290.341765][ T28] #2: ffff88806e8777f8 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_setattr+0xe9d/0x1460 [ 290.351546][ T28] #3: ffff8881452ea090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.361159][ T28] 2 locks held by syz-executor214/5281: [ 290.366762][ T28] #0: ffff88802abe2460 (sb_writers#9){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d0/0x210 [ 290.376806][ T28] #1: ffff888073781d60 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: generic_file_write_iter+0x92/0x350 [ 290.388230][ T28] 3 locks held by syz-executor214/5289: [ 290.393797][ T28] #0: ffff88801ba6fe00 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x3ab/0x18b0 [ 290.403731][ T28] #1: ffff888073781f00 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x153/0x5e0 [ 290.415073][ T28] #2: ffff8880177a3090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.424639][ T28] 4 locks held by syz-executor214/5290: [ 290.430361][ T28] #0: ffff88802abe2460 (sb_writers#9){.+.+}-{0:0}, at: vfs_truncate+0xee/0x490 [ 290.439499][ T28] #1: ffff888073781d60 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x131/0x200 [ 290.450039][ T28] #2: ffff888073781b38 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_setattr+0xe9d/0x1460 [ 290.459825][ T28] #3: ffff8880177a3090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.469387][ T28] 2 locks held by syz-executor214/5309: [ 290.474941][ T28] #0: ffff88807d3a8460 (sb_writers#9){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d0/0x210 [ 290.484839][ T28] #1: ffff88807363ece0 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: reiserfs_sync_file+0xab/0x320 [ 290.495937][ T28] 3 locks held by syz-executor214/5313: [ 290.501462][ T28] #0: ffff88801ca5de00 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x3ab/0x18b0 [ 290.512074][ T28] #1: ffff88807363ee80 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x153/0x5e0 [ 290.523465][ T28] #2: ffff88801bc5f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.533035][ T28] 4 locks held by syz-executor214/5314: [ 290.538718][ T28] #0: ffff88807d3a8460 (sb_writers#9){.+.+}-{0:0}, at: vfs_truncate+0xee/0x490 [ 290.547873][ T28] #1: ffff88807363ece0 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: do_truncate+0x131/0x200 [ 290.558367][ T28] #2: ffff88807363eab8 (&ei->tailpack){+.+.}-{3:3}, at: reiserfs_setattr+0xe9d/0x1460 [ 290.568194][ T28] #3: ffff88801bc5f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 290.577784][ T28] 2 locks held by kworker/1:4/5335: [ 290.582983][ T28] #0: ffff888012066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 290.593407][ T28] #1: ffffc900058b7da8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 290.605140][ T28] [ 290.607819][ T28] ============================================= [ 290.607819][ T28] [ 290.616533][ T28] NMI backtrace for cpu 0 [ 290.620912][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 290.630367][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 290.640475][ T28] Call Trace: [ 290.643768][ T28] [ 290.646694][ T28] dump_stack_lvl+0xd1/0x138 [ 290.651288][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 290.656619][ T28] nmi_trigger_cpumask_backtrace+0x333/0x3c0 [ 290.662597][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 290.667796][ T28] watchdog+0xc75/0xfc0 [ 290.671977][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 290.678050][ T28] kthread+0x2e8/0x3a0 [ 290.682124][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 290.687763][ T28] ret_from_fork+0x1f/0x30 [ 290.692204][ T28] [ 290.695374][ T28] Sending NMI from CPU 0 to CPUs 1: [ 290.700976][ C1] NMI backtrace for cpu 1 [ 290.700985][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [pid 5073] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] lstat("./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] getdents64(4, 0x5555558bf660 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555558bf660 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./360/file0") = 0 [pid 5073] getdents64(3, 0x5555558b7620 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./360") = 0 [pid 5073] mkdir("./361", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558b65d0) = 7074 ./strace-static-x86_64: Process 7074 attached [pid 7074] set_robust_list(0x5555558b65e0, 24) = 0 [pid 7074] chdir("./361") = 0 [pid 7074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7074] setpgid(0, 0) = 0 [ 290.701002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 290.701010][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x19a/0x410 [ 290.701032][ C1] Code: 01 00 00 48 c7 c7 e0 4d 2c 8a e8 01 00 96 08 b8 ff ff ff ff 65 0f c1 05 7c 00 9f 7e 83 f8 01 0f 85 ff 00 00 00 5b 5d c3 9c 58 c4 02 0f 85 59 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da [ 290.701046][ C1] RSP: 0018:ffffc90000177db8 EFLAGS: 00000046 [ 290.701059][ C1] RAX: 0000000000000046 RBX: ffffffff919f6a00 RCX: 1ffffffff1ca59b5 [ 290.701069][ C1] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000001 [ 290.701077][ C1] RBP: ffffffff8174faee R08: 0000000000000000 R09: 0000000000000001 [ 290.701086][ C1] R10: ffffffff8fd53057 R11: 0000000000000001 R12: 0000000000000001 [ 290.701095][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 290.701107][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 290.701121][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.701131][ C1] CR2: 00007ffc4c528ff8 CR3: 000000000c28e000 CR4: 0000000000350ee0 [ 290.701141][ C1] Call Trace: [ 290.701145][ C1] [ 290.701150][ C1] ? tick_nohz_idle_enter+0x19e/0x250 [ 290.701167][ C1] trace_hardirqs_on+0x31/0x180 [ 290.701183][ C1] tick_nohz_idle_enter+0x19e/0x250 [ 290.701200][ C1] do_idle+0x9a/0x590 [ 290.701217][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 290.701237][ C1] cpu_startup_entry+0x18/0x20 [ 290.701254][ C1] start_secondary+0x256/0x300 [ 290.701272][ C1] ? set_cpu_sibling_map+0x24f0/0x24f0 [ 290.701293][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 290.701319][ C1] [ 290.702933][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 290.886256][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 290.895979][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 290.906040][ T28] Call Trace: [ 290.909316][ T28] [ 290.912244][ T28] dump_stack_lvl+0xd1/0x138 [ 290.916846][ T28] panic+0x2cc/0x626 [ 290.920763][ T28] ? panic_print_sys_info.part.0+0x110/0x110 [ 290.926767][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 290.932155][ T28] ? watchdog.cold+0x130/0x158 [ 290.936933][ T28] watchdog.cold+0x141/0x158 [ 290.941541][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 290.947536][ T28] kthread+0x2e8/0x3a0 [ 290.951625][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 290.957366][ T28] ret_from_fork+0x1f/0x30 [ 290.961853][ T28] [ 290.965666][ T28] Kernel Offset: disabled [ 290.970008][ T28] Rebooting in 86400 seconds..