./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor761024644 <...> DUID 00:04:e3:a1:4c:5b:a4:47:39:93:9a:5d:f6:69:14:97:a9:57 forked to background, child pid 4657 [ 52.797226][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.816540][ T4658] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.123' (ECDSA) to the list of known hosts. execve("./syz-executor761024644", ["./syz-executor761024644"], 0x7ffc6911a7b0 /* 10 vars */) = 0 brk(NULL) = 0x555556681000 brk(0x555556681c40) = 0x555556681c40 arch_prctl(ARCH_SET_FS, 0x555556681300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor761024644", 4096) = 27 brk(0x5555566a2c40) = 0x5555566a2c40 brk(0x5555566a3000) = 0x5555566a3000 mprotect(0x7f6d3e3b8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached , child_tidptr=0x5555566815d0) = 5084 [pid 5084] getpid() = 5084 [pid 5084] mkdir("./syzkaller.maRGcC", 0700 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5085 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5085 attached [pid 5084] chmod("./syzkaller.maRGcC", 0777 [pid 5085] getpid( [pid 5084] <... chmod resumed>) = 0 [pid 5085] <... getpid resumed>) = 5085 [pid 5084] chdir("./syzkaller.maRGcC") = 0 [pid 5084] mkdir("./0", 0777./strace-static-x86_64: Process 5086 attached [pid 5083] <... clone resumed>, child_tidptr=0x5555566815d0) = 5086 [pid 5085] mkdir("./syzkaller.ABCvLF", 0700 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] getpid( [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... clone resumed>, child_tidptr=0x5555566815d0) = 5087 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... openat resumed>) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x5555566815d0) = 5088 ./strace-static-x86_64: Process 5087 attached [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5086] <... getpid resumed>) = 5086 [pid 5086] mkdir("./syzkaller.qdaw6K", 0700 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... clone resumed>, child_tidptr=0x5555566815d0) = 5089 ./strace-static-x86_64: Process 5088 attached [pid 5084] close(3 [pid 5088] getpid( [pid 5086] <... mkdir resumed>) = 0 [pid 5088] <... getpid resumed>) = 5088 [pid 5088] mkdir("./syzkaller.JxPAgU", 0700 [pid 5084] <... close resumed>) = 0 [pid 5088] <... mkdir resumed>) = 0 [pid 5088] chmod("./syzkaller.JxPAgU", 0777) = 0 [pid 5088] chdir("./syzkaller.JxPAgU" [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] <... chdir resumed>) = 0 [pid 5088] mkdir("./0", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5086] chmod("./syzkaller.qdaw6K", 0777 [pid 5088] <... openat resumed>) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached [pid 5090] chdir("./0") = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5091 [pid 5090] <... openat resumed>) = 3 [pid 5090] write(3, "1000", 4 [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5090 [pid 5090] <... write resumed>) = 4 [pid 5090] close(3 [pid 5086] <... chmod resumed>) = 0 [pid 5090] <... close resumed>) = 0 [pid 5086] chdir("./syzkaller.qdaw6K" [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... chdir resumed>) = 0 [pid 5085] chmod("./syzkaller.ABCvLF", 0777 [pid 5087] getpid( [pid 5086] mkdir("./0", 0777 [pid 5090] <... symlink resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5090] memfd_create("syzkaller", 0 [pid 5086] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5089 attached [pid 5087] <... getpid resumed>) = 5087 [pid 5086] ioctl(3, LOOP_CLR_FD [pid 5085] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5091 attached [pid 5089] getpid( [pid 5087] mkdir("./syzkaller.P3EIHP", 0700 [pid 5086] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] chdir("./syzkaller.ABCvLF" [pid 5091] chdir("./0" [pid 5087] <... mkdir resumed>) = 0 [pid 5086] close(3 [pid 5085] <... chdir resumed>) = 0 [pid 5089] <... getpid resumed>) = 5089 [pid 5086] <... close resumed>) = 0 [pid 5091] <... chdir resumed>) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] mkdir("./0", 0777 [pid 5089] mkdir("./syzkaller.QCKj80", 0700 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5092 attached [pid 5092] chdir("./0" [pid 5089] <... mkdir resumed>) = 0 [pid 5087] chmod("./syzkaller.P3EIHP", 0777 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5091] <... symlink resumed>) = 0 [pid 5091] memfd_create("syzkaller", 0 [pid 5087] <... chmod resumed>) = 0 [pid 5092] <... chdir resumed>) = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5091] <... memfd_create resumed>) = 3 [pid 5087] chdir("./syzkaller.P3EIHP" [pid 5086] <... clone resumed>, child_tidptr=0x5555566815d0) = 5092 [pid 5085] <... openat resumed>) = 3 [pid 5092] <... prctl resumed>) = 0 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] chmod("./syzkaller.QCKj80", 0777 [pid 5087] <... chdir resumed>) = 0 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5092] setpgid(0, 0 [pid 5091] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] mkdir("./0", 0777 [pid 5092] <... setpgid resumed>) = 0 [pid 5089] <... chmod resumed>) = 0 [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] <... mkdir resumed>) = 0 [pid 5089] chdir("./syzkaller.QCKj80" [pid 5085] close(3 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5092] write(3, "1000", 4 [pid 5089] <... chdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5092] <... write resumed>) = 4 [pid 5087] <... openat resumed>) = 3 [pid 5092] close(3 [pid 5089] mkdir("./0", 0777 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... close resumed>) = 0 [pid 5092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5092] memfd_create("syzkaller", 0) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5089] <... mkdir resumed>) = 0 [pid 5087] ioctl(3, LOOP_CLR_FD [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5094 [pid 5090] <... memfd_create resumed>) = 3 syzkaller login: [ 79.018564][ T5090] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5090 'syz-executor761' [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5094 attached [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5094] chdir("./0" [pid 5090] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5094] <... chdir resumed>) = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] <... prctl resumed>) = 0 [pid 5094] setpgid(0, 0 [pid 5089] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5095 attached [pid 5094] <... setpgid resumed>) = 0 [pid 5089] ioctl(3, LOOP_CLR_FD [pid 5087] <... clone resumed>, child_tidptr=0x5555566815d0) = 5095 [pid 5095] chdir("./0" [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5095] <... chdir resumed>) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs" [pid 5089] close(3 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5094] <... symlink resumed>) = 0 [pid 5095] <... prctl resumed>) = 0 [pid 5094] memfd_create("syzkaller", 0 [pid 5089] <... close resumed>) = 0 [pid 5094] <... memfd_create resumed>) = 3 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] setpgid(0, 0 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5095] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5096 attached [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5096 [pid 5096] chdir("./0" [pid 5095] <... openat resumed>) = 3 [pid 5096] <... chdir resumed>) = 0 [pid 5095] write(3, "1000", 4 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5095] <... write resumed>) = 4 [pid 5096] <... prctl resumed>) = 0 [pid 5095] close(3 [pid 5096] setpgid(0, 0 [pid 5095] <... close resumed>) = 0 [pid 5096] <... setpgid resumed>) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs" [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] <... symlink resumed>) = 0 [pid 5096] <... openat resumed>) = 3 [pid 5096] write(3, "1000", 4 [pid 5095] memfd_create("syzkaller", 0 [pid 5096] <... write resumed>) = 4 [pid 5095] <... memfd_create resumed>) = 3 [pid 5096] close(3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5096] <... close resumed>) = 0 [pid 5095] <... mmap resumed>) = 0x7f6d35efb000 [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5095] <... write resumed>) = 4194304 [pid 5094] <... write resumed>) = 4194304 [pid 5092] <... write resumed>) = 4194304 [pid 5094] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5091] <... write resumed>) = 4194304 [pid 5094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5095] munmap(0x7f6d35efb000, 4194304 [pid 5091] munmap(0x7f6d35efb000, 4194304 [pid 5095] <... munmap resumed>) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5091] <... munmap resumed>) = 0 [pid 5091] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5092] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5091] <... ioctl resumed>) = 0 [pid 5090] <... write resumed>) = 4194304 [pid 5092] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3 [pid 5095] <... ioctl resumed>) = 0 [pid 5094] close(3 [pid 5090] munmap(0x7f6d35efb000, 4194304 [pid 5094] <... close resumed>) = 0 [pid 5094] mkdir("./file0", 0777 [pid 5095] close(3 [pid 5094] <... mkdir resumed>) = 0 [pid 5090] <... munmap resumed>) = 0 [pid 5095] <... close resumed>) = 0 [pid 5094] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5095] mkdir("./file0", 0777 [pid 5090] <... openat resumed>) = 4 [pid 5092] <... ioctl resumed>) = 0 [pid 5092] close(3) = 0 [pid 5092] mkdir("./file0", 0777 [pid 5095] <... mkdir resumed>) = 0 [ 79.443059][ T5094] loop1: detected capacity change from 0 to 8192 [ 79.461122][ T5091] loop4: detected capacity change from 0 to 8192 [ 79.465563][ T5095] loop3: detected capacity change from 0 to 8192 [ 79.471624][ T5092] loop2: detected capacity change from 0 to 8192 [pid 5090] ioctl(4, LOOP_SET_FD, 3 [pid 5092] <... mkdir resumed>) = 0 [pid 5092] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5091] close(3) = 0 [pid 5091] mkdir("./file0", 0777) = 0 [pid 5091] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5090] <... ioctl resumed>) = 0 [pid 5095] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5090] close(3 [pid 5096] <... write resumed>) = 4194304 [pid 5090] <... close resumed>) = 0 [pid 5096] munmap(0x7f6d35efb000, 4194304 [pid 5090] mkdir("./file0", 0777 [pid 5096] <... munmap resumed>) = 0 [pid 5090] <... mkdir resumed>) = 0 [ 79.492772][ T5090] loop0: detected capacity change from 0 to 8192 [ 79.504286][ T5092] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.518727][ T5095] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.520272][ T5092] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5096] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 79.534251][ T5095] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 79.541812][ T5094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.552780][ T5095] REISERFS (device loop3): using ordered data mode [ 79.564678][ T5094] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 79.580206][ T5094] REISERFS (device loop1): using ordered data mode [ 79.581440][ T5096] loop5: detected capacity change from 0 to 8192 [pid 5090] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5096] <... openat resumed>) = 4 [ 79.587613][ T5094] reiserfs: using flush barriers [ 79.593615][ T5091] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.600669][ T5092] REISERFS (device loop2): using ordered data mode [ 79.612540][ T5090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5096] ioctl(4, LOOP_SET_FD, 3) = 0 [ 79.618221][ T5094] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.633496][ T5092] reiserfs: using flush barriers [ 79.648120][ T5094] REISERFS (device loop1): checking transaction log (loop1) [ 79.659257][ T5095] reiserfs: using flush barriers [ 79.661348][ T5095] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.671174][ T5091] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [pid 5096] close(3) = 0 [pid 5096] mkdir("./file0", 0777) = 0 [ 79.685855][ T5090] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.697052][ T5091] REISERFS (device loop4): using ordered data mode [ 79.703706][ T5092] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.713906][ T5091] reiserfs: using flush barriers [ 79.724267][ T5090] REISERFS (device loop0): using ordered data mode [ 79.738941][ T5091] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.740355][ T5095] REISERFS (device loop3): checking transaction log (loop3) [ 79.760735][ T5092] REISERFS (device loop2): checking transaction log (loop2) [ 79.772425][ T5096] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 79.783952][ T5091] REISERFS (device loop4): checking transaction log (loop4) [ 79.801098][ T5090] reiserfs: using flush barriers [ 79.833784][ T5090] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.834264][ T5094] REISERFS (device loop1): Using r5 hash to sort names [ 79.863493][ T5094] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 79.870770][ T5096] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 79.879829][ T5090] REISERFS (device loop0): checking transaction log (loop0) [pid 5096] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5094] <... mount resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5094] chdir("./file0") = 0 [pid 5094] ioctl(4, LOOP_CLR_FD) = 0 [pid 5094] close(4) = 0 [pid 5094] creat("./bus", 000) = 4 [ 79.966144][ T5096] REISERFS (device loop5): using ordered data mode [ 79.995552][ T5096] reiserfs: using flush barriers [pid 5094] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5094] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5094] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5094] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [ 80.031424][ T5096] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5094] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5094] exit_group(0) = ? [pid 5094] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 80.076336][ T5092] REISERFS (device loop2): Using r5 hash to sort names [ 80.115581][ T5096] REISERFS (device loop5): checking transaction log (loop5) [pid 5085] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./0/binderfs") = 0 [ 80.116674][ T5092] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5085] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] <... mount resumed>) = 0 [pid 5092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5092] chdir("./file0") = 0 [pid 5092] ioctl(4, LOOP_CLR_FD) = 0 [pid 5092] close(4) = 0 [pid 5092] creat("./bus", 000) = 4 [ 80.153349][ T5091] REISERFS (device loop4): Using r5 hash to sort names [ 80.157932][ T5090] REISERFS (device loop0): Using r5 hash to sort names [ 80.165917][ T5091] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5092] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5092] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5092] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5092] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5092] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5092] exit_group(0) = ? [pid 5092] +++ exited with 0 +++ [ 80.201181][ T5090] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5091] <... mount resumed>) = 0 [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5090] <... mount resumed>) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5091] chdir("./file0") = 0 [pid 5090] <... openat resumed>) = 3 [pid 5086] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] ioctl(4, LOOP_CLR_FD [pid 5090] chdir("./file0" [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5091] <... ioctl resumed>) = 0 [pid 5090] <... chdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5091] close(4 [pid 5090] ioctl(4, LOOP_CLR_FD [pid 5086] <... openat resumed>) = 3 [pid 5091] <... close resumed>) = 0 [pid 5090] <... ioctl resumed>) = 0 [pid 5086] fstat(3, [pid 5091] creat("./bus", 000 [pid 5090] close(4 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5091] <... creat resumed>) = 4 [pid 5090] <... close resumed>) = 0 [pid 5091] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5090] creat("./bus", 000 [pid 5086] getdents64(3, [pid 5091] <... write resumed>) = 32 [pid 5090] <... creat resumed>) = 4 [pid 5091] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5090] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5086] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5091] <... open resumed>) = 5 [pid 5090] <... write resumed>) = 32 [ 80.244355][ T5095] REISERFS (device loop3): Using r5 hash to sort names [pid 5086] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5090] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5090] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5090] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] write(-1, 0x20000080, 296 [pid 5091] <... mmap resumed>) = 0x20000000 [pid 5090] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] lstat("./0/binderfs", [pid 5091] ioctl(4, FS_IOC_GETVERSION [pid 5090] exit_group(0 [pid 5091] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5090] <... exit_group resumed>) = ? [pid 5086] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5091] write(-1, 0x20000080, 296 [pid 5090] +++ exited with 0 +++ [pid 5086] unlink("./0/binderfs" [pid 5091] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5091] exit_group(0 [pid 5086] <... unlink resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5091] <... exit_group resumed>) = ? [pid 5086] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5091] +++ exited with 0 +++ [pid 5084] <... restart_syscall resumed>) = 0 [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5088] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5088] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] fstat(3, [pid 5088] <... openat resumed>) = 3 [pid 5088] fstat(3, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, [pid 5084] getdents64(3, [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./0/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.303778][ T5095] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5095] <... mount resumed>) = 0 [pid 5088] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] lstat("./0/binderfs", [pid 5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5088] unlink("./0/binderfs" [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5095] <... openat resumed>) = 3 [pid 5095] chdir("./file0" [pid 5088] <... unlink resumed>) = 0 [pid 5084] unlink("./0/binderfs" [pid 5095] <... chdir resumed>) = 0 [pid 5088] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] ioctl(4, LOOP_CLR_FD [pid 5084] <... unlink resumed>) = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5084] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] close(4) = 0 [pid 5095] creat("./bus", 000) = 4 [pid 5095] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5095] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5095] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5095] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5095] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5095] exit_group(0) = ? [pid 5095] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5087] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./0/binderfs") = 0 [pid 5087] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [ 80.465283][ T5096] REISERFS (device loop5): Using r5 hash to sort names [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] rmdir("./0/file0" [pid 5085] lstat("./0/file0", [pid 5084] <... rmdir resumed>) = 0 [pid 5085] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, [pid 5084] getdents64(3, [pid 5085] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] getdents64(4, [pid 5084] close(3 [pid 5085] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] <... close resumed>) = 0 [pid 5085] close(4 [pid 5084] rmdir("./0" [pid 5085] <... close resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5085] rmdir("./0/file0" [pid 5084] mkdir("./1", 0777 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5085] getdents64(3, [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./0") = 0 [pid 5085] mkdir("./1", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] <... mount resumed>) = 0 [pid 5096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5105 [pid 5096] chdir("./file0"./strace-static-x86_64: Process 5105 attached [pid 5105] chdir("./1") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 80.507883][ T5096] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] <... chdir resumed>) = 0 [pid 5105] write(3, "1000", 4 [pid 5096] ioctl(4, LOOP_CLR_FD [pid 5105] <... write resumed>) = 4 [pid 5096] <... ioctl resumed>) = 0 [pid 5105] close(3 [pid 5096] close(4 [pid 5105] <... close resumed>) = 0 [pid 5096] <... close resumed>) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs" [pid 5096] creat("./bus", 000 [pid 5105] <... symlink resumed>) = 0 [pid 5096] <... creat resumed>) = 4 [pid 5105] memfd_create("syzkaller", 0 [pid 5096] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5105] <... memfd_create resumed>) = 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5096] <... write resumed>) = 32 [pid 5096] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5096] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5096] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5096] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5096] exit_group(0) = ? [pid 5105] <... mmap resumed>) = 0x7f6d35efb000 [pid 5096] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5089] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5089] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./0/binderfs") = 0 [pid 5089] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5107 ./strace-static-x86_64: Process 5107 attached [pid 5107] chdir("./1" [pid 5086] <... umount2 resumed>) = 0 [pid 5107] <... chdir resumed>) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5088] <... umount2 resumed>) = 0 [pid 5107] close(3) = 0 [pid 5107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5107] memfd_create("syzkaller", 0 [pid 5086] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... memfd_create resumed>) = 3 [pid 5088] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./0/file0", [pid 5107] <... mmap resumed>) = 0x7f6d35efb000 [pid 5088] lstat("./0/file0", [pid 5086] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] <... openat resumed>) = 4 [pid 5088] <... openat resumed>) = 4 [pid 5086] fstat(4, [pid 5088] fstat(4, [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, [pid 5088] getdents64(4, [pid 5086] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, [pid 5088] getdents64(4, [pid 5086] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4 [pid 5088] close(4 [pid 5086] <... close resumed>) = 0 [pid 5088] <... close resumed>) = 0 [pid 5086] rmdir("./0/file0" [pid 5088] rmdir("./0/file0" [pid 5086] <... rmdir resumed>) = 0 [pid 5088] <... rmdir resumed>) = 0 [pid 5086] getdents64(3, [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3 [pid 5086] close(3 [pid 5088] <... close resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5088] rmdir("./0" [pid 5086] rmdir("./0" [pid 5088] <... rmdir resumed>) = 0 [pid 5086] <... rmdir resumed>) = 0 [pid 5088] mkdir("./1", 0777 [pid 5086] mkdir("./1", 0777 [pid 5088] <... mkdir resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5086] <... mkdir resumed>) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5088] ioctl(3, LOOP_CLR_FD [pid 5086] <... openat resumed>) = 3 [pid 5088] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5086] ioctl(3, LOOP_CLR_FD [pid 5088] close(3 [pid 5086] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5088] <... close resumed>) = 0 [pid 5086] close(3 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] <... close resumed>) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5109 [pid 5086] <... clone resumed>, child_tidptr=0x5555566815d0) = 5110 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5109 attached [pid 5109] chdir("./1"./strace-static-x86_64: Process 5110 attached ) = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5110] chdir("./1" [pid 5109] <... prctl resumed>) = 0 [pid 5110] <... chdir resumed>) = 0 [pid 5109] setpgid(0, 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5109] <... setpgid resumed>) = 0 [pid 5110] <... prctl resumed>) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5110] setpgid(0, 0 [pid 5109] <... openat resumed>) = 3 [pid 5087] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] write(3, "1000", 4 [pid 5110] <... setpgid resumed>) = 0 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5109] <... write resumed>) = 4 [pid 5087] lstat("./0/file0", [pid 5110] <... openat resumed>) = 3 [pid 5109] close(3 [pid 5087] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] write(3, "1000", 4 [pid 5109] <... close resumed>) = 0 [pid 5087] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... write resumed>) = 4 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] close(3 [pid 5087] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5110] <... close resumed>) = 0 [pid 5109] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... openat resumed>) = 4 [pid 5110] symlink("/dev/binderfs", "./binderfs" [pid 5109] <... symlink resumed>) = 0 [pid 5087] fstat(4, [pid 5110] <... symlink resumed>) = 0 [pid 5109] memfd_create("syzkaller", 0 [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] memfd_create("syzkaller", 0 [pid 5109] <... memfd_create resumed>) = 3 [pid 5087] getdents64(4, [pid 5110] <... memfd_create resumed>) = 3 [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5109] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] getdents64(4, [pid 5110] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./0/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./0") = 0 [pid 5087] mkdir("./1", 0777 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] <... mkdir resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5111 ./strace-static-x86_64: Process 5111 attached [pid 5111] chdir("./1") = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5111] memfd_create("syzkaller", 0) = 3 [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./0/file0", [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5105] <... write resumed>) = 4194304 [pid 5089] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./0/file0") = 0 [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3) = 0 [pid 5089] rmdir("./0") = 0 [pid 5089] mkdir("./1", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD [pid 5105] munmap(0x7f6d35efb000, 4194304 [pid 5089] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] close(3) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5112 ./strace-static-x86_64: Process 5112 attached [pid 5112] chdir("./1") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5105] <... munmap resumed>) = 0 [pid 5112] <... openat resumed>) = 3 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5112] write(3, "1000", 4) = 4 [pid 5105] <... openat resumed>) = 4 [pid 5112] close(3 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5112] <... close resumed>) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5112] memfd_create("syzkaller", 0) = 3 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5107] <... write resumed>) = 4194304 [pid 5105] <... ioctl resumed>) = 0 [pid 5105] close(3) = 0 [pid 5105] mkdir("./file0", 0777 [pid 5107] munmap(0x7f6d35efb000, 4194304 [pid 5105] <... mkdir resumed>) = 0 [pid 5107] <... munmap resumed>) = 0 [pid 5105] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 81.098203][ T5105] loop1: detected capacity change from 0 to 8192 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] mkdir("./file0", 0777) = 0 [ 81.143658][ T5107] loop0: detected capacity change from 0 to 8192 [ 81.151449][ T5105] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.179182][ T5105] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [pid 5107] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5109] <... write resumed>) = 4194304 [pid 5110] <... write resumed>) = 4194304 [pid 5109] munmap(0x7f6d35efb000, 4194304 [pid 5110] munmap(0x7f6d35efb000, 4194304 [pid 5109] <... munmap resumed>) = 0 [pid 5109] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5110] <... munmap resumed>) = 0 [pid 5109] <... openat resumed>) = 4 [pid 5110] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5109] ioctl(4, LOOP_SET_FD, 3 [pid 5111] <... write resumed>) = 4194304 [pid 5110] <... openat resumed>) = 4 [pid 5109] <... ioctl resumed>) = 0 [ 81.193951][ T5107] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.217411][ T5105] REISERFS (device loop1): using ordered data mode [ 81.234556][ T5109] loop4: detected capacity change from 0 to 8192 [pid 5109] close(3) = 0 [pid 5109] mkdir("./file0", 0777) = 0 [pid 5109] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5111] munmap(0x7f6d35efb000, 4194304 [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5111] <... munmap resumed>) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5110] <... ioctl resumed>) = 0 [pid 5111] <... openat resumed>) = 4 [pid 5110] close(3 [pid 5111] ioctl(4, LOOP_SET_FD, 3 [pid 5110] <... close resumed>) = 0 [ 81.238191][ T5107] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 81.251405][ T5107] REISERFS (device loop0): using ordered data mode [ 81.259428][ T5110] loop2: detected capacity change from 0 to 8192 [ 81.262360][ T5105] reiserfs: using flush barriers [ 81.266595][ T5107] reiserfs: using flush barriers [ 81.278544][ T5109] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.279421][ T5107] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.308148][ T5111] loop3: detected capacity change from 0 to 8192 [ 81.309896][ T5109] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 81.316144][ T5107] REISERFS (device loop0): checking transaction log (loop0) [pid 5111] <... ioctl resumed>) = 0 [pid 5110] mkdir("./file0", 0777 [pid 5111] close(3 [pid 5110] <... mkdir resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5110] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5111] mkdir("./file0", 0777) = 0 [ 81.324344][ T5105] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.348441][ T5105] REISERFS (device loop1): checking transaction log (loop1) [ 81.350900][ T5110] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.362640][ T5109] REISERFS (device loop4): using ordered data mode [ 81.371452][ T5111] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.390502][ T5111] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 81.401254][ T5109] reiserfs: using flush barriers [ 81.407777][ T5109] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.425482][ T5109] REISERFS (device loop4): checking transaction log (loop4) [ 81.451949][ T5111] REISERFS (device loop3): using ordered data mode [ 81.456720][ T5110] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 81.467945][ T5110] REISERFS (device loop2): using ordered data mode [ 81.474630][ T5110] reiserfs: using flush barriers [ 81.481188][ T5111] reiserfs: using flush barriers [ 81.486210][ T5110] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5111] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5112] <... write resumed>) = 4194304 [pid 5112] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 81.503320][ T5110] REISERFS (device loop2): checking transaction log (loop2) [ 81.505252][ T5111] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5112] close(3) = 0 [pid 5112] mkdir("./file0", 0777) = 0 [ 81.551432][ T5112] loop5: detected capacity change from 0 to 8192 [ 81.578039][ T5112] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.602379][ T5112] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 81.611854][ T5112] REISERFS (device loop5): using ordered data mode [ 81.618402][ T5112] reiserfs: using flush barriers [ 81.648559][ T5111] REISERFS (device loop3): checking transaction log (loop3) [ 81.654228][ T5112] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.676933][ T5112] REISERFS (device loop5): checking transaction log (loop5) [pid 5112] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5109] <... mount resumed>) = 0 [pid 5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5109] chdir("./file0") = 0 [ 81.698747][ T5109] REISERFS (device loop4): Using r5 hash to sort names [ 81.706826][ T5109] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 81.718901][ T5105] REISERFS (device loop1): Using r5 hash to sort names [pid 5109] ioctl(4, LOOP_CLR_FD) = 0 [pid 5109] close(4) = 0 [pid 5109] creat("./bus", 000) = 4 [pid 5109] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5109] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5109] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5109] ioctl(4, FS_IOC_GETVERSION [pid 5105] <... mount resumed>) = 0 [ 81.748213][ T5105] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 81.765637][ T5110] REISERFS (device loop2): Using r5 hash to sort names [ 81.784376][ T5110] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5109] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5109] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5109] exit_group(0) = ? [pid 5105] chdir("./file0" [pid 5109] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5088] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] <... chdir resumed>) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5105] ioctl(4, LOOP_CLR_FD [pid 5088] fstat(3, [pid 5110] <... mount resumed>) = 0 [pid 5105] <... ioctl resumed>) = 0 [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5105] close(4 [pid 5088] getdents64(3, [pid 5110] <... openat resumed>) = 3 [pid 5105] <... close resumed>) = 0 [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5110] chdir("./file0" [pid 5105] creat("./bus", 000 [pid 5088] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... chdir resumed>) = 0 [pid 5105] <... creat resumed>) = 4 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.795785][ T5107] REISERFS (device loop0): Using r5 hash to sort names [pid 5110] ioctl(4, LOOP_CLR_FD [pid 5105] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5088] lstat("./1/binderfs", [pid 5110] <... ioctl resumed>) = 0 [pid 5105] <... write resumed>) = 32 [pid 5088] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5110] close(4 [pid 5105] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] unlink("./1/binderfs" [pid 5110] <... close resumed>) = 0 [pid 5105] <... open resumed>) = 5 [pid 5088] <... unlink resumed>) = 0 [pid 5110] creat("./bus", 000 [pid 5105] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5088] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... creat resumed>) = 4 [pid 5105] <... mmap resumed>) = 0x20000000 [pid 5110] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5107] <... mount resumed>) = 0 [pid 5105] ioctl(4, FS_IOC_GETVERSION [pid 5110] <... write resumed>) = 32 [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5105] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5110] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5107] <... openat resumed>) = 3 [pid 5105] write(-1, 0x20000080, 296 [pid 5110] <... open resumed>) = 5 [pid 5107] chdir("./file0" [pid 5105] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5107] <... chdir resumed>) = 0 [ 81.841433][ T5107] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5105] exit_group(0 [pid 5110] <... mmap resumed>) = 0x20000000 [pid 5107] ioctl(4, LOOP_CLR_FD [pid 5105] <... exit_group resumed>) = ? [pid 5110] ioctl(4, FS_IOC_GETVERSION [pid 5107] <... ioctl resumed>) = 0 [pid 5105] +++ exited with 0 +++ [pid 5110] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5107] close(4 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5110] write(-1, 0x20000080, 296 [pid 5107] <... close resumed>) = 0 [pid 5110] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] creat("./bus", 000 [pid 5110] exit_group(0 [pid 5107] <... creat resumed>) = 4 [pid 5085] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... exit_group resumed>) = ? [pid 5107] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] +++ exited with 0 +++ [pid 5107] <... write resumed>) = 32 [pid 5085] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5107] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5085] <... openat resumed>) = 3 [pid 5107] <... open resumed>) = 5 [pid 5085] fstat(3, [pid 5107] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, [pid 5107] <... mmap resumed>) = 0x20000000 [pid 5085] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5107] ioctl(4, FS_IOC_GETVERSION [pid 5085] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5086] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] write(-1, 0x20000080, 296 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./1/binderfs", [pid 5107] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5086] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5107] exit_group(0 [pid 5086] <... openat resumed>) = 3 [pid 5085] unlink("./1/binderfs" [pid 5107] <... exit_group resumed>) = ? [pid 5086] fstat(3, [pid 5085] <... unlink resumed>) = 0 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] +++ exited with 0 +++ [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5086] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./1/binderfs", [pid 5084] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] unlink("./1/binderfs" [pid 5084] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] <... unlink resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5086] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./1/binderfs") = 0 [ 82.024229][ T5111] REISERFS (device loop3): Using r5 hash to sort names [ 82.055391][ T5112] REISERFS (device loop5): Using r5 hash to sort names [ 82.066713][ T5111] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5084] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... mount resumed>) = 0 [pid 5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] <... umount2 resumed>) = 0 [pid 5111] <... openat resumed>) = 3 [pid 5084] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] <... mount resumed>) = 0 [pid 5111] chdir("./file0" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5111] <... chdir resumed>) = 0 [pid 5084] lstat("./1/file0", [pid 5112] <... openat resumed>) = 3 [pid 5111] ioctl(4, LOOP_CLR_FD [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5112] chdir("./file0" [pid 5111] <... ioctl resumed>) = 0 [pid 5084] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] <... chdir resumed>) = 0 [pid 5111] close(4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] ioctl(4, LOOP_CLR_FD [pid 5111] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 82.105990][ T5112] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, [pid 5112] <... ioctl resumed>) = 0 [pid 5111] creat("./bus", 000 [pid 5084] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5112] close(4 [pid 5111] <... creat resumed>) = 4 [pid 5084] getdents64(4, [pid 5112] <... close resumed>) = 0 [pid 5111] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5112] creat("./bus", 000 [pid 5084] close(4 [pid 5112] <... creat resumed>) = 4 [pid 5111] <... write resumed>) = 32 [pid 5084] <... close resumed>) = 0 [pid 5112] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5111] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5084] rmdir("./1/file0" [pid 5112] <... write resumed>) = 32 [pid 5111] <... open resumed>) = 5 [pid 5084] <... rmdir resumed>) = 0 [pid 5112] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5111] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5084] getdents64(3, [pid 5112] <... open resumed>) = 5 [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5112] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5111] <... mmap resumed>) = 0x20000000 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./1" [pid 5112] <... mmap resumed>) = 0x20000000 [pid 5111] ioctl(4, FS_IOC_GETVERSION [pid 5084] <... rmdir resumed>) = 0 [pid 5112] ioctl(4, FS_IOC_GETVERSION [pid 5111] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5084] mkdir("./2", 0777 [pid 5112] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5111] write(-1, 0x20000080, 296 [pid 5084] <... mkdir resumed>) = 0 [pid 5112] write(-1, 0x20000080, 296 [pid 5111] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5112] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] exit_group(0 [pid 5112] exit_group(0 [pid 5111] <... exit_group resumed>) = ? [pid 5088] <... umount2 resumed>) = 0 [pid 5112] <... exit_group resumed>) = ? [pid 5088] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5112] +++ exited with 0 +++ [pid 5087] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] fstat(3, [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] <... openat resumed>) = 3 [pid 5087] getdents64(3, [pid 5084] <... openat resumed>) = 3 [pid 5089] fstat(3, [pid 5087] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] getdents64(3, [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(3 [pid 5089] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] lstat("./1/binderfs", [pid 5084] <... close resumed>) = 0 [pid 5089] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] unlink("./1/binderfs"./strace-static-x86_64: Process 5119 attached [pid 5089] lstat("./1/binderfs", [pid 5087] <... unlink resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5119 [pid 5089] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] unlink("./1/binderfs" [pid 5088] lstat("./1/file0", [pid 5085] <... umount2 resumed>) = 0 [pid 5119] chdir("./2" [pid 5089] <... unlink resumed>) = 0 [pid 5088] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5119] <... chdir resumed>) = 0 [pid 5089] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] <... prctl resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] setpgid(0, 0 [pid 5088] <... openat resumed>) = 4 [pid 5085] lstat("./1/file0", [pid 5119] <... setpgid resumed>) = 0 [pid 5088] fstat(4, [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5119] <... openat resumed>) = 3 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] write(3, "1000", 4) = 4 [pid 5088] getdents64(4, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] close(3 [pid 5088] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5119] <... close resumed>) = 0 [pid 5088] close(4 [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5088] <... close resumed>) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5119] <... symlink resumed>) = 0 [pid 5088] rmdir("./1/file0" [pid 5119] memfd_create("syzkaller", 0 [pid 5088] <... rmdir resumed>) = 0 [pid 5085] fstat(4, [pid 5119] <... memfd_create resumed>) = 3 [pid 5088] getdents64(3, [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5119] <... mmap resumed>) = 0x7f6d35efb000 [pid 5088] close(3 [pid 5085] getdents64(4, [pid 5088] <... close resumed>) = 0 [pid 5088] rmdir("./1" [pid 5085] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] <... rmdir resumed>) = 0 [pid 5085] getdents64(4, [pid 5088] mkdir("./2", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5085] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3 [pid 5085] close(4 [pid 5088] <... close resumed>) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... close resumed>) = 0 [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5120 [pid 5085] rmdir("./1/file0") = 0 [pid 5085] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3./strace-static-x86_64: Process 5120 attached ) = 0 [pid 5120] chdir("./2" [pid 5085] rmdir("./1" [pid 5120] <... chdir resumed>) = 0 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5120] setpgid(0, 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5120] <... setpgid resumed>) = 0 [pid 5085] mkdir("./2", 0777 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5120] write(3, "1000", 4 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5120] <... write resumed>) = 4 [pid 5085] <... openat resumed>) = 3 [pid 5120] close(3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5120] <... close resumed>) = 0 [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5120] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... umount2 resumed>) = 0 [pid 5085] close(3 [pid 5120] <... symlink resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5120] memfd_create("syzkaller", 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5120] <... memfd_create resumed>) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5086] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5121 ./strace-static-x86_64: Process 5121 attached [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5121] chdir("./2" [pid 5086] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5121] <... chdir resumed>) = 0 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... prctl resumed>) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5121] setpgid(0, 0 [pid 5086] fstat(4, [pid 5121] <... setpgid resumed>) = 0 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] getdents64(4, [pid 5121] <... openat resumed>) = 3 [pid 5086] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./1/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./1") = 0 [pid 5121] write(3, "1000", 4 [pid 5086] mkdir("./2", 0777 [pid 5121] <... write resumed>) = 4 [pid 5086] <... mkdir resumed>) = 0 [pid 5121] close(3 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5121] <... close resumed>) = 0 [pid 5086] <... openat resumed>) = 3 [pid 5121] symlink("/dev/binderfs", "./binderfs" [pid 5086] ioctl(3, LOOP_CLR_FD [pid 5121] <... symlink resumed>) = 0 [pid 5086] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5121] memfd_create("syzkaller", 0 [pid 5086] close(3 [pid 5121] <... memfd_create resumed>) = 3 [pid 5086] <... close resumed>) = 0 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5121] <... mmap resumed>) = 0x7f6d35efb000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5086] <... clone resumed>, child_tidptr=0x5555566815d0) = 5122 ./strace-static-x86_64: Process 5122 attached [pid 5122] chdir("./2") = 0 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5122] write(3, "1000", 4) = 4 [pid 5122] close(3) = 0 [pid 5122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] <... umount2 resumed>) = 0 [pid 5087] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] <... umount2 resumed>) = 0 [pid 5087] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5089] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] <... openat resumed>) = 4 [pid 5089] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] fstat(4, [pid 5089] <... openat resumed>) = 4 [pid 5089] fstat(4, [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, [pid 5089] getdents64(4, [pid 5087] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, [pid 5089] getdents64(4, [pid 5087] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4 [pid 5089] close(4) = 0 [pid 5089] rmdir("./1/file0" [pid 5087] <... close resumed>) = 0 [pid 5089] <... rmdir resumed>) = 0 [pid 5087] rmdir("./1/file0" [pid 5089] getdents64(3, [pid 5087] <... rmdir resumed>) = 0 [pid 5089] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] getdents64(3, [pid 5089] close(3 [pid 5087] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] <... close resumed>) = 0 [pid 5087] close(3 [pid 5089] rmdir("./1" [pid 5087] <... close resumed>) = 0 [pid 5119] <... write resumed>) = 4194304 [pid 5089] <... rmdir resumed>) = 0 [pid 5087] rmdir("./1" [pid 5089] mkdir("./2", 0777) = 0 [pid 5087] <... rmdir resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5087] mkdir("./2", 0777 [pid 5089] <... openat resumed>) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] <... mkdir resumed>) = 0 [pid 5089] close(3 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5119] munmap(0x7f6d35efb000, 4194304 [pid 5089] <... close resumed>) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] ioctl(3, LOOP_CLR_FD [pid 5119] <... munmap resumed>) = 0 [pid 5087] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5123 [pid 5087] close(3 [pid 5119] <... openat resumed>) = 4 [pid 5087] <... close resumed>) = 0 ./strace-static-x86_64: Process 5123 attached [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5123] chdir("./2") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5124 attached ) = 3 [pid 5119] <... ioctl resumed>) = 0 [pid 5123] write(3, "1000", 4 [pid 5119] close(3 [pid 5087] <... clone resumed>, child_tidptr=0x5555566815d0) = 5124 [pid 5124] chdir("./2" [pid 5123] <... write resumed>) = 4 [pid 5119] <... close resumed>) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5123] close(3 [pid 5119] mkdir("./file0", 0777 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5123] <... close resumed>) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5124] <... prctl resumed>) = 0 [pid 5123] <... symlink resumed>) = 0 [pid 5119] <... mkdir resumed>) = 0 [pid 5124] setpgid(0, 0 [pid 5123] memfd_create("syzkaller", 0 [pid 5119] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5124] <... setpgid resumed>) = 0 [pid 5123] <... memfd_create resumed>) = 3 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5124] <... openat resumed>) = 3 [pid 5123] <... mmap resumed>) = 0x7f6d35efb000 [ 82.672932][ T5119] loop0: detected capacity change from 0 to 8192 [pid 5124] write(3, "1000", 4 [pid 5120] <... write resumed>) = 4194304 [pid 5124] <... write resumed>) = 4 [pid 5120] munmap(0x7f6d35efb000, 4194304 [pid 5124] close(3 [pid 5121] <... write resumed>) = 4194304 [pid 5120] <... munmap resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5121] munmap(0x7f6d35efb000, 4194304 [pid 5124] symlink("/dev/binderfs", "./binderfs" [pid 5121] <... munmap resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5124] <... symlink resumed>) = 0 [pid 5121] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5120] <... openat resumed>) = 4 [pid 5124] memfd_create("syzkaller", 0 [pid 5121] <... openat resumed>) = 4 [ 82.722024][ T5119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.736760][ T5119] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.747641][ T5119] REISERFS (device loop0): using ordered data mode [ 82.755322][ T5119] reiserfs: using flush barriers [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5124] <... memfd_create resumed>) = 3 [pid 5121] ioctl(4, LOOP_SET_FD, 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5121] <... ioctl resumed>) = 0 [pid 5120] <... ioctl resumed>) = 0 [ 82.762243][ T5119] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.772827][ T5120] loop4: detected capacity change from 0 to 8192 [ 82.779689][ T5119] REISERFS (device loop0): checking transaction log (loop0) [ 82.787147][ T5121] loop1: detected capacity change from 0 to 8192 [pid 5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5122] <... write resumed>) = 4194304 [pid 5121] close(3 [pid 5120] close(3 [pid 5122] munmap(0x7f6d35efb000, 4194304 [pid 5121] <... close resumed>) = 0 [pid 5120] <... close resumed>) = 0 [pid 5122] <... munmap resumed>) = 0 [pid 5121] mkdir("./file0", 0777 [pid 5120] mkdir("./file0", 0777 [pid 5122] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5121] <... mkdir resumed>) = 0 [pid 5120] <... mkdir resumed>) = 0 [pid 5122] <... openat resumed>) = 4 [pid 5121] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5120] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5122] close(3) = 0 [pid 5122] mkdir("./file0", 0777) = 0 [ 82.878045][ T5122] loop2: detected capacity change from 0 to 8192 [ 82.885482][ T5121] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.903052][ T5122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5122] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5124] <... write resumed>) = 4194304 [pid 5124] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3) = 0 [ 82.942066][ T5120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 82.943085][ T5121] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 82.971496][ T5124] loop3: detected capacity change from 0 to 8192 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file0", 0777 [pid 5123] <... write resumed>) = 4194304 [pid 5124] <... mkdir resumed>) = 0 [ 82.987492][ T5122] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 82.999078][ T5121] REISERFS (device loop1): using ordered data mode [ 83.005897][ T5121] reiserfs: using flush barriers [ 83.013838][ T5120] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 83.013916][ T5121] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5123] munmap(0x7f6d35efb000, 4194304 [pid 5124] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5123] <... munmap resumed>) = 0 [pid 5123] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 83.023124][ T5120] REISERFS (device loop4): using ordered data mode [ 83.048914][ T5120] reiserfs: using flush barriers [ 83.052759][ T5124] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.055867][ T5120] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.075936][ T5123] loop5: detected capacity change from 0 to 8192 [pid 5123] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5123] close(3) = 0 [pid 5123] mkdir("./file0", 0777) = 0 [ 83.083764][ T5120] REISERFS (device loop4): checking transaction log (loop4) [ 83.097527][ T5122] REISERFS (device loop2): using ordered data mode [ 83.108654][ T5124] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 83.123701][ T5122] reiserfs: using flush barriers [ 83.124520][ T5119] REISERFS (device loop0): Using r5 hash to sort names [ 83.134677][ T5121] REISERFS (device loop1): checking transaction log (loop1) [pid 5123] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5119] <... mount resumed>) = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [ 83.138821][ T5119] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.148405][ T5122] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.170193][ T5123] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.170794][ T5124] REISERFS (device loop3): using ordered data mode [pid 5119] close(4) = 0 [pid 5119] creat("./bus", 000) = 4 [pid 5119] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5119] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5119] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5119] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5119] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5119] exit_group(0) = ? [pid 5119] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [ 83.183320][ T5123] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 83.199311][ T5123] REISERFS (device loop5): using ordered data mode [ 83.206906][ T5123] reiserfs: using flush barriers [ 83.214684][ T5123] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.231561][ T5123] REISERFS (device loop5): checking transaction log (loop5) [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] <... mount resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 83.296319][ T5122] REISERFS (device loop2): checking transaction log (loop2) [ 83.306006][ T5124] reiserfs: using flush barriers [ 83.316687][ T5123] REISERFS (device loop5): Using r5 hash to sort names [ 83.327591][ T5123] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] lstat("./2/binderfs", [pid 5123] <... openat resumed>) = 3 [pid 5123] chdir("./file0" [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5123] <... chdir resumed>) = 0 [pid 5084] unlink("./2/binderfs" [pid 5123] ioctl(4, LOOP_CLR_FD) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5123] close(4 [pid 5084] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] <... close resumed>) = 0 [pid 5123] creat("./bus", 000) = 4 [ 83.364315][ T5124] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.404072][ T5124] REISERFS (device loop3): checking transaction log (loop3) [pid 5123] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5123] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5123] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5123] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5123] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5123] exit_group(0) = ? [pid 5123] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5089] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] fstat(3, [pid 5122] <... mount resumed>) = 0 [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] getdents64(3, [pid 5122] <... openat resumed>) = 3 [pid 5089] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5122] chdir("./file0" [pid 5089] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... chdir resumed>) = 0 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 83.451972][ T5122] REISERFS (device loop2): Using r5 hash to sort names [ 83.487602][ T5122] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5122] ioctl(4, LOOP_CLR_FD [pid 5089] lstat("./2/binderfs", [pid 5122] <... ioctl resumed>) = 0 [pid 5089] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5122] close(4 [pid 5089] unlink("./2/binderfs" [pid 5122] <... close resumed>) = 0 [pid 5089] <... unlink resumed>) = 0 [pid 5089] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] creat("./bus", 000) = 4 [pid 5122] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5122] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5122] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5122] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5122] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5122] exit_group(0) = ? [pid 5122] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5086] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./2/binderfs") = 0 [ 83.601829][ T5124] REISERFS (device loop3): Using r5 hash to sort names [ 83.643392][ T5124] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 83.647637][ T5120] REISERFS (device loop4): Using r5 hash to sort names [pid 5086] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... mount resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file0") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [pid 5120] <... mount resumed>) = 0 [pid 5124] close(4) = 0 [pid 5124] creat("./bus", 000 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5124] <... creat resumed>) = 4 [pid 5124] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5124] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5120] <... openat resumed>) = 3 [pid 5124] <... open resumed>) = 5 [pid 5120] chdir("./file0" [pid 5124] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5120] <... chdir resumed>) = 0 [pid 5124] <... mmap resumed>) = 0x20000000 [pid 5120] ioctl(4, LOOP_CLR_FD [pid 5124] ioctl(4, FS_IOC_GETVERSION [pid 5120] <... ioctl resumed>) = 0 [pid 5124] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5120] close(4 [pid 5124] write(-1, 0x20000080, 296 [pid 5120] <... close resumed>) = 0 [pid 5124] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5124] exit_group(0 [pid 5120] creat("./bus", 000 [pid 5124] <... exit_group resumed>) = ? [pid 5120] <... creat resumed>) = 4 [ 83.683655][ T5120] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 83.711281][ T5121] REISERFS (device loop1): Using r5 hash to sort names [ 83.724693][ T5121] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5124] +++ exited with 0 +++ [pid 5120] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5084] <... umount2 resumed>) = 0 [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5120] <... write resumed>) = 32 [pid 5084] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5120] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5084] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5120] <... open resumed>) = 5 [pid 5084] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5120] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5087] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, [pid 5120] <... mmap resumed>) = 0x20000000 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] ioctl(4, FS_IOC_GETVERSION [pid 5087] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... mount resumed>) = 0 [pid 5120] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5087] <... openat resumed>) = 3 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] fstat(3, [pid 5121] <... openat resumed>) = 3 [pid 5120] write(-1, 0x20000080, 296 [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, [pid 5121] chdir("./file0" [pid 5120] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] getdents64(3, [pid 5084] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5121] <... chdir resumed>) = 0 [pid 5120] exit_group(0 [pid 5087] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] getdents64(4, [pid 5121] ioctl(4, LOOP_CLR_FD [pid 5120] <... exit_group resumed>) = ? [pid 5087] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5121] <... ioctl resumed>) = 0 [pid 5084] close(4 [pid 5121] close(4 [pid 5084] <... close resumed>) = 0 [pid 5121] <... close resumed>) = 0 [pid 5084] rmdir("./2/file0" [pid 5121] creat("./bus", 000 [pid 5120] +++ exited with 0 +++ [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... rmdir resumed>) = 0 [pid 5121] <... creat resumed>) = 4 [pid 5087] lstat("./2/binderfs", [pid 5084] getdents64(3, [pid 5121] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5087] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5121] <... write resumed>) = 32 [pid 5088] restart_syscall(<... resuming interrupted clone ...> [pid 5087] unlink("./2/binderfs" [pid 5084] close(3 [pid 5121] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] <... restart_syscall resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5121] <... open resumed>) = 5 [pid 5087] <... unlink resumed>) = 0 [pid 5084] rmdir("./2" [pid 5121] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5087] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5121] <... mmap resumed>) = 0x20000000 [pid 5088] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] mkdir("./3", 0777 [pid 5121] ioctl(4, FS_IOC_GETVERSION [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... mkdir resumed>) = 0 [pid 5121] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5121] write(-1, 0x20000080, 296 [pid 5088] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5121] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5121] exit_group(0 [pid 5088] <... openat resumed>) = 3 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5121] <... exit_group resumed>) = ? [pid 5084] close(3 [pid 5121] +++ exited with 0 +++ [pid 5088] fstat(3, [pid 5084] <... close resumed>) = 0 [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] getdents64(3, [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5131 [pid 5088] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] lstat("./2/binderfs", [pid 5085] <... openat resumed>) = 3 [pid 5088] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] fstat(3, [pid 5088] unlink("./2/binderfs" [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, [pid 5088] <... unlink resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./2/binderfs") = 0 [pid 5085] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5131 attached [pid 5131] chdir("./3") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./2/file0") = 0 [pid 5131] <... setpgid resumed>) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3) = 0 [pid 5089] rmdir("./2" [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4 [pid 5089] <... rmdir resumed>) = 0 [pid 5089] mkdir("./3", 0777 [pid 5131] <... write resumed>) = 4 [pid 5131] close(3 [pid 5089] <... mkdir resumed>) = 0 [pid 5131] <... close resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5089] <... openat resumed>) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5089] close(3) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5132 [pid 5131] <... mmap resumed>) = 0x7f6d35efb000 ./strace-static-x86_64: Process 5132 attached [pid 5132] chdir("./3") = 0 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5132] write(3, "1000", 4) = 4 [pid 5087] <... umount2 resumed>) = 0 [pid 5086] <... umount2 resumed>) = 0 [pid 5132] close(3 [pid 5087] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... close resumed>) = 0 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] symlink("/dev/binderfs", "./binderfs" [pid 5087] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, [pid 5132] <... symlink resumed>) = 0 [pid 5087] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] memfd_create("syzkaller", 0 [pid 5087] getdents64(4, [pid 5132] <... memfd_create resumed>) = 3 [pid 5087] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] close(4 [pid 5132] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] <... close resumed>) = 0 [pid 5087] rmdir("./2/file0" [pid 5086] lstat("./2/file0", [pid 5087] <... rmdir resumed>) = 0 [pid 5087] getdents64(3, [pid 5086] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] close(3 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... close resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] rmdir("./2") = 0 [pid 5086] <... openat resumed>) = 4 [pid 5087] mkdir("./3", 0777) = 0 [pid 5086] fstat(4, [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./2/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./2") = 0 [pid 5086] mkdir("./3", 0777) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5133 ./strace-static-x86_64: Process 5133 attached [pid 5133] chdir("./3") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] <... openat resumed>) = 3 [pid 5133] memfd_create("syzkaller", 0 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3 [pid 5133] <... memfd_create resumed>) = 3 [pid 5087] <... close resumed>) = 0 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5133] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] <... clone resumed>, child_tidptr=0x5555566815d0) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] chdir("./3") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5134] <... prctl resumed>) = 0 [pid 5134] setpgid(0, 0) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5085] <... umount2 resumed>) = 0 [pid 5088] <... umount2 resumed>) = 0 [pid 5085] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./2/file0", [pid 5088] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5088] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... openat resumed>) = 4 [pid 5088] <... openat resumed>) = 4 [pid 5085] fstat(4, [pid 5088] fstat(4, [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, [pid 5085] getdents64(4, [pid 5088] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4 [pid 5085] close(4 [pid 5088] <... close resumed>) = 0 [pid 5088] rmdir("./2/file0" [pid 5085] <... close resumed>) = 0 [pid 5088] <... rmdir resumed>) = 0 [pid 5085] rmdir("./2/file0" [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5088] close(3 [pid 5085] getdents64(3, [pid 5088] <... close resumed>) = 0 [pid 5088] rmdir("./2" [pid 5085] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] <... rmdir resumed>) = 0 [pid 5085] close(3 [pid 5088] mkdir("./3", 0777 [pid 5085] <... close resumed>) = 0 [pid 5088] <... mkdir resumed>) = 0 [pid 5085] rmdir("./2" [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] <... rmdir resumed>) = 0 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5085] mkdir("./3", 0777 [pid 5088] close(3) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5135 [pid 5085] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304./strace-static-x86_64: Process 5136 attached ./strace-static-x86_64: Process 5135 attached [pid 5135] chdir("./3" [pid 5136] chdir("./3" [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5136 [pid 5136] <... chdir resumed>) = 0 [pid 5135] <... chdir resumed>) = 0 [pid 5131] <... write resumed>) = 4194304 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5135] setpgid(0, 0 [pid 5131] munmap(0x7f6d35efb000, 4194304 [pid 5135] <... setpgid resumed>) = 0 [pid 5136] <... prctl resumed>) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5136] setpgid(0, 0 [pid 5135] <... openat resumed>) = 3 [pid 5131] <... munmap resumed>) = 0 [pid 5135] write(3, "1000", 4 [pid 5136] <... setpgid resumed>) = 0 [pid 5135] <... write resumed>) = 4 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5135] close(3 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] <... close resumed>) = 0 [pid 5136] <... openat resumed>) = 3 [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 5131] <... openat resumed>) = 4 [pid 5135] <... symlink resumed>) = 0 [pid 5136] write(3, "1000", 4 [pid 5135] memfd_create("syzkaller", 0 [pid 5131] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... write resumed>) = 4 [pid 5135] <... memfd_create resumed>) = 3 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5136] close(3 [pid 5131] <... ioctl resumed>) = 0 [pid 5136] <... close resumed>) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] memfd_create("syzkaller", 0) = 3 [pid 5132] <... write resumed>) = 4194304 [pid 5131] close(3 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5131] <... close resumed>) = 0 [pid 5136] <... mmap resumed>) = 0x7f6d35efb000 [pid 5131] mkdir("./file0", 0777) = 0 [pid 5131] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5133] <... write resumed>) = 4194304 [ 84.331342][ T5131] loop0: detected capacity change from 0 to 8192 [pid 5133] munmap(0x7f6d35efb000, 4194304 [pid 5132] munmap(0x7f6d35efb000, 4194304 [pid 5133] <... munmap resumed>) = 0 [pid 5132] <... munmap resumed>) = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5132] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5134] <... write resumed>) = 4194304 [pid 5133] <... openat resumed>) = 4 [pid 5132] <... openat resumed>) = 4 [pid 5133] ioctl(4, LOOP_SET_FD, 3 [ 84.383536][ T5131] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.419700][ T5131] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5134] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 84.426091][ T5133] loop2: detected capacity change from 0 to 8192 [ 84.429325][ T5131] REISERFS (device loop0): using ordered data mode [ 84.442760][ T5131] reiserfs: using flush barriers [ 84.449313][ T5132] loop5: detected capacity change from 0 to 8192 [ 84.462179][ T5134] loop3: detected capacity change from 0 to 8192 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5134] <... ioctl resumed>) = 0 [pid 5133] <... ioctl resumed>) = 0 [pid 5132] <... ioctl resumed>) = 0 [pid 5134] close(3 [pid 5133] close(3 [pid 5132] close(3 [pid 5134] <... close resumed>) = 0 [pid 5133] <... close resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5134] mkdir("./file0", 0777 [pid 5133] mkdir("./file0", 0777 [pid 5132] mkdir("./file0", 0777 [pid 5134] <... mkdir resumed>) = 0 [pid 5133] <... mkdir resumed>) = 0 [pid 5134] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5133] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5132] <... mkdir resumed>) = 0 [ 84.465227][ T5131] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.486244][ T5131] REISERFS (device loop0): checking transaction log (loop0) [ 84.515223][ T5133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5132] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5135] <... write resumed>) = 4194304 [pid 5135] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5135] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 84.528768][ T5134] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.544784][ T5134] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 84.557226][ T5132] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.571764][ T5133] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5135] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... write resumed>) = 4194304 [pid 5135] <... ioctl resumed>) = 0 [pid 5136] munmap(0x7f6d35efb000, 4194304 [pid 5135] close(3) = 0 [ 84.590281][ T5135] loop4: detected capacity change from 0 to 8192 [ 84.601107][ T5132] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 84.611740][ T5132] REISERFS (device loop5): using ordered data mode [ 84.618297][ T5132] reiserfs: using flush barriers [ 84.621207][ T5134] REISERFS (device loop3): using ordered data mode [ 84.626792][ T5133] REISERFS (device loop2): using ordered data mode [pid 5135] mkdir("./file0", 0777) = 0 [pid 5136] <... munmap resumed>) = 0 [pid 5135] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [ 84.636812][ T5133] reiserfs: using flush barriers [ 84.646326][ T5132] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.646846][ T5135] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5136] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 84.662599][ T5133] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.678228][ T5136] loop1: detected capacity change from 0 to 8192 [ 84.692649][ T5132] REISERFS (device loop5): checking transaction log (loop5) [ 84.711489][ T5133] REISERFS (device loop2): checking transaction log (loop2) [ 84.712861][ T5134] reiserfs: using flush barriers [pid 5136] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5136] close(3) = 0 [ 84.780379][ T5135] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 84.789866][ T5135] REISERFS (device loop4): using ordered data mode [ 84.796490][ T5135] reiserfs: using flush barriers [ 84.805235][ T5135] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5136] mkdir("./file0", 0777) = 0 [ 84.816514][ T5134] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.822146][ T5135] REISERFS (device loop4): checking transaction log (loop4) [pid 5136] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [ 84.871701][ T5136] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.881487][ T5134] REISERFS (device loop3): checking transaction log (loop3) [ 84.902140][ T5131] REISERFS (device loop0): Using r5 hash to sort names [ 84.909489][ T5131] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5131] <... mount resumed>) = 0 [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 84.923765][ T5136] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 84.933875][ T5136] REISERFS (device loop1): using ordered data mode [ 84.952835][ T5136] reiserfs: using flush barriers [ 84.954000][ T5133] REISERFS (device loop2): Using r5 hash to sort names [pid 5131] chdir("./file0") = 0 [pid 5133] <... mount resumed>) = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5131] close(4 [pid 5133] <... openat resumed>) = 3 [pid 5133] chdir("./file0") = 0 [pid 5133] ioctl(4, LOOP_CLR_FD) = 0 [pid 5133] close(4) = 0 [pid 5133] creat("./bus", 000) = 4 [pid 5133] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5131] <... close resumed>) = 0 [pid 5133] <... write resumed>) = 32 [pid 5131] creat("./bus", 000 [pid 5133] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5131] <... creat resumed>) = 4 [pid 5131] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5133] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5131] <... write resumed>) = 32 [pid 5131] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5133] ioctl(4, FS_IOC_GETVERSION [pid 5131] <... open resumed>) = 5 [pid 5133] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5133] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5133] exit_group(0 [pid 5131] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5133] <... exit_group resumed>) = ? [ 84.970398][ T5136] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.977175][ T5133] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 85.009917][ T5136] REISERFS (device loop1): checking transaction log (loop1) [pid 5133] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5086] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5086] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5131] <... mmap resumed>) = 0x20000000 [pid 5086] lstat("./3/binderfs", [pid 5131] ioctl(4, FS_IOC_GETVERSION [pid 5086] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./3/binderfs" [pid 5131] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5086] <... unlink resumed>) = 0 [pid 5086] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5131] exit_group(0) = ? [pid 5131] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5084] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [ 85.039029][ T5132] REISERFS (device loop5): Using r5 hash to sort names [pid 5084] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./3/binderfs") = 0 [pid 5084] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... mount resumed>) = 0 [ 85.097739][ T5132] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5132] chdir("./file0") = 0 [pid 5132] ioctl(4, LOOP_CLR_FD) = 0 [pid 5132] close(4) = 0 [pid 5132] creat("./bus", 000) = 4 [pid 5132] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5132] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5132] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5132] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5132] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [ 85.180631][ T5135] REISERFS (device loop4): Using r5 hash to sort names [pid 5132] exit_group(0) = ? [pid 5132] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5089] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./3/binderfs") = 0 [pid 5089] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... mount resumed>) = 0 [pid 5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 85.223170][ T5135] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 85.253671][ T5134] REISERFS (device loop3): Using r5 hash to sort names [ 85.262169][ T5134] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5135] chdir("./file0") = 0 [pid 5135] ioctl(4, LOOP_CLR_FD) = 0 [pid 5135] close(4) = 0 [pid 5135] creat("./bus", 000 [pid 5134] <... mount resumed>) = 0 [pid 5135] <... creat resumed>) = 4 [pid 5135] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5135] <... write resumed>) = 32 [pid 5134] chdir("./file0") = 0 [pid 5135] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5135] <... open resumed>) = 5 [pid 5135] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5134] close(4) = 0 [pid 5134] creat("./bus", 000 [pid 5135] <... mmap resumed>) = 0x20000000 [pid 5134] <... creat resumed>) = 4 [pid 5135] ioctl(4, FS_IOC_GETVERSION [pid 5134] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5135] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5135] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5135] exit_group(0) = ? [pid 5134] <... write resumed>) = 32 [pid 5134] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5135] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5088] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5134] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5088] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... mmap resumed>) = 0x20000000 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] ioctl(4, FS_IOC_GETVERSION [pid 5088] <... openat resumed>) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5134] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5088] getdents64(3, [pid 5134] write(-1, 0x20000080, 296 [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./3/binderfs", [pid 5134] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5134] exit_group(0 [pid 5088] unlink("./3/binderfs" [pid 5134] <... exit_group resumed>) = ? [pid 5134] +++ exited with 0 +++ [pid 5088] <... unlink resumed>) = 0 [pid 5088] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5087] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./3/binderfs") = 0 [pid 5087] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... umount2 resumed>) = 0 [pid 5086] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./3/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./3") = 0 [pid 5086] mkdir("./4", 0777) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5084] <... umount2 resumed>) = 0 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] <... umount2 resumed>) = 0 [pid 5086] close(3 [pid 5088] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... close resumed>) = 0 [pid 5084] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./3/file0", ./strace-static-x86_64: Process 5143 attached [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... umount2 resumed>) = 0 [pid 5086] <... clone resumed>, child_tidptr=0x5555566815d0) = 5143 [pid 5087] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] chdir("./4" [pid 5088] lstat("./3/file0", [pid 5087] lstat("./3/file0", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 4 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] fstat(4, [pid 5143] <... chdir resumed>) = 0 [pid 5088] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... openat resumed>) = 4 [pid 5084] getdents64(4, [pid 5087] fstat(4, [pid 5084] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, [pid 5087] getdents64(4, [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5084] close(4 [pid 5143] <... prctl resumed>) = 0 [pid 5136] <... mount resumed>) = 0 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] getdents64(4, [pid 5084] <... close resumed>) = 0 [pid 5143] setpgid(0, 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5088] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./3/file0" [pid 5143] <... setpgid resumed>) = 0 [pid 5136] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 4 [pid 5087] close(4 [pid 5084] <... rmdir resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5084] getdents64(3, [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] fstat(4, [pid 5087] rmdir("./3/file0" [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5143] <... openat resumed>) = 3 [pid 5136] chdir("./file0" [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] <... rmdir resumed>) = 0 [pid 5084] close(3 [pid 5087] getdents64(3, [pid 5084] <... close resumed>) = 0 [pid 5087] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./3" [pid 5143] write(3, "1000", 4 [pid 5136] <... chdir resumed>) = 0 [pid 5088] getdents64(4, [pid 5087] close(3 [pid 5084] <... rmdir resumed>) = 0 [pid 5143] <... write resumed>) = 4 [pid 5136] ioctl(4, LOOP_CLR_FD [pid 5089] <... umount2 resumed>) = 0 [pid 5088] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] <... close resumed>) = 0 [pid 5084] mkdir("./4", 0777 [pid 5143] close(3 [pid 5136] <... ioctl resumed>) = 0 [pid 5089] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] getdents64(4, [pid 5087] rmdir("./3" [pid 5084] <... mkdir resumed>) = 0 [pid 5143] <... close resumed>) = 0 [pid 5136] close(4 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5136] <... close resumed>) = 0 [pid 5089] lstat("./3/file0", [pid 5088] close(4 [pid 5087] mkdir("./4", 0777 [pid 5084] <... openat resumed>) = 3 [pid 5143] <... symlink resumed>) = 0 [ 85.503023][ T5136] REISERFS (device loop1): Using r5 hash to sort names [ 85.521408][ T5136] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5136] creat("./bus", 000 [pid 5089] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... close resumed>) = 0 [pid 5087] <... mkdir resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5087] <... openat resumed>) = 3 [pid 5084] close(3 [pid 5087] ioctl(3, LOOP_CLR_FD [pid 5084] <... close resumed>) = 0 [pid 5087] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] <... creat resumed>) = 4 [pid 5089] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] rmdir("./3/file0" [pid 5087] close(3 [pid 5143] memfd_create("syzkaller", 0 [pid 5087] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5144 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5143] <... memfd_create resumed>) = 3 [pid 5136] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... rmdir resumed>) = 0 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] getdents64(3, [pid 5087] <... clone resumed>, child_tidptr=0x5555566815d0) = 5145 [pid 5143] <... mmap resumed>) = 0x7f6d35efb000 [pid 5136] <... write resumed>) = 32 ./strace-static-x86_64: Process 5144 attached [pid 5089] <... openat resumed>) = 4 [pid 5088] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5144] chdir("./4") = 0 [pid 5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5145 attached [pid 5144] setpgid(0, 0 [pid 5145] chdir("./4" [pid 5144] <... setpgid resumed>) = 0 [pid 5145] <... chdir resumed>) = 0 [pid 5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5144] <... openat resumed>) = 3 [pid 5088] close(3 [pid 5089] fstat(4, [pid 5136] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5145] <... prctl resumed>) = 0 [pid 5144] write(3, "1000", 4 [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... close resumed>) = 0 [pid 5145] setpgid(0, 0 [pid 5144] <... write resumed>) = 4 [pid 5136] <... open resumed>) = 5 [pid 5089] getdents64(4, [pid 5088] rmdir("./3" [pid 5145] <... setpgid resumed>) = 0 [pid 5144] close(3 [pid 5136] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5144] <... close resumed>) = 0 [pid 5088] <... rmdir resumed>) = 0 [pid 5145] <... openat resumed>) = 3 [pid 5144] symlink("/dev/binderfs", "./binderfs" [pid 5136] <... mmap resumed>) = 0x20000000 [pid 5089] getdents64(4, [pid 5088] mkdir("./4", 0777 [pid 5145] write(3, "1000", 4 [pid 5144] <... symlink resumed>) = 0 [pid 5136] ioctl(4, FS_IOC_GETVERSION [pid 5089] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5145] <... write resumed>) = 4 [pid 5144] memfd_create("syzkaller", 0 [pid 5136] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5089] close(4 [pid 5088] <... mkdir resumed>) = 0 [pid 5145] close(3 [pid 5144] <... memfd_create resumed>) = 3 [pid 5136] write(-1, 0x20000080, 296 [pid 5089] <... close resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5145] <... close resumed>) = 0 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5136] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] rmdir("./3/file0" [pid 5145] symlink("/dev/binderfs", "./binderfs" [pid 5144] <... mmap resumed>) = 0x7f6d35efb000 [pid 5136] exit_group(0 [pid 5145] <... symlink resumed>) = 0 [pid 5089] <... rmdir resumed>) = 0 [pid 5145] memfd_create("syzkaller", 0 [pid 5136] <... exit_group resumed>) = ? [pid 5145] <... memfd_create resumed>) = 3 [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] getdents64(3, [pid 5145] <... mmap resumed>) = 0x7f6d35efb000 [pid 5136] +++ exited with 0 +++ [pid 5089] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5089] <... close resumed>) = 0 [pid 5089] rmdir("./3") = 0 [pid 5089] mkdir("./4", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5085] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] ioctl(3, LOOP_CLR_FD [pid 5085] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5089] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] close(3 [pid 5085] <... openat resumed>) = 3 [pid 5089] <... close resumed>) = 0 [pid 5085] fstat(3, [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5146 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5146 attached [pid 5088] <... openat resumed>) = 3 [pid 5085] lstat("./3/binderfs", [pid 5146] chdir("./4" [pid 5088] ioctl(3, LOOP_CLR_FD [pid 5085] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5146] <... chdir resumed>) = 0 [pid 5088] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] unlink("./3/binderfs" [pid 5088] close(3 [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... close resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5146] <... prctl resumed>) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5147 attached [pid 5146] setpgid(0, 0 [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5147] chdir("./4" [pid 5146] <... setpgid resumed>) = 0 [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5147 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5147] <... chdir resumed>) = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5146] <... openat resumed>) = 3 [pid 5147] setpgid(0, 0 [pid 5146] write(3, "1000", 4 [pid 5147] <... setpgid resumed>) = 0 [pid 5146] <... write resumed>) = 4 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5146] close(3) = 0 [pid 5147] <... openat resumed>) = 3 [pid 5146] symlink("/dev/binderfs", "./binderfs" [pid 5147] write(3, "1000", 4 [pid 5146] <... symlink resumed>) = 0 [pid 5147] <... write resumed>) = 4 [pid 5146] memfd_create("syzkaller", 0 [pid 5147] close(3 [pid 5146] <... memfd_create resumed>) = 3 [pid 5147] <... close resumed>) = 0 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] symlink("/dev/binderfs", "./binderfs" [pid 5146] <... mmap resumed>) = 0x7f6d35efb000 [pid 5147] <... symlink resumed>) = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5143] <... write resumed>) = 4194304 [pid 5085] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./3/file0") = 0 [pid 5085] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5143] munmap(0x7f6d35efb000, 4194304 [pid 5085] close(3) = 0 [pid 5085] rmdir("./3") = 0 [pid 5085] mkdir("./4", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5143] <... munmap resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file0", 0777) = 0 [pid 5143] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 85.965624][ T5143] loop2: detected capacity change from 0 to 8192 [pid 5145] <... write resumed>) = 4194304 [pid 5085] close(3 [pid 5144] <... write resumed>) = 4194304 [pid 5144] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5145] munmap(0x7f6d35efb000, 4194304 [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5149 [pid 5145] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5149 attached [pid 5145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5149] chdir("./4" [pid 5145] <... openat resumed>) = 4 [ 86.011709][ T5143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.018753][ T5144] loop0: detected capacity change from 0 to 8192 [pid 5145] ioctl(4, LOOP_SET_FD, 3 [pid 5149] <... chdir resumed>) = 0 [pid 5145] <... ioctl resumed>) = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4 [pid 5145] close(3 [pid 5149] <... write resumed>) = 4 [pid 5149] close(3) = 0 [pid 5145] <... close resumed>) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5145] mkdir("./file0", 0777 [pid 5149] <... symlink resumed>) = 0 [ 86.054971][ T5145] loop3: detected capacity change from 0 to 8192 [ 86.061660][ T5143] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 86.070896][ T5143] REISERFS (device loop2): using ordered data mode [ 86.079279][ T5143] reiserfs: using flush barriers [ 86.087415][ T5143] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5147] <... write resumed>) = 4194304 [pid 5145] <... mkdir resumed>) = 0 [pid 5144] <... ioctl resumed>) = 0 [pid 5149] memfd_create("syzkaller", 0 [pid 5147] munmap(0x7f6d35efb000, 4194304 [pid 5145] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5144] close(3 [pid 5149] <... memfd_create resumed>) = 3 [pid 5147] <... munmap resumed>) = 0 [pid 5144] <... close resumed>) = 0 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 86.109199][ T5143] REISERFS (device loop2): checking transaction log (loop2) [pid 5144] mkdir("./file0", 0777 [pid 5149] <... mmap resumed>) = 0x7f6d35efb000 [pid 5147] <... openat resumed>) = 4 [pid 5144] <... mkdir resumed>) = 0 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5146] <... write resumed>) = 4194304 [pid 5144] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5146] munmap(0x7f6d35efb000, 4194304) = 0 [ 86.152573][ T5145] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.186389][ T5147] loop4: detected capacity change from 0 to 8192 [pid 5146] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5147] <... ioctl resumed>) = 0 [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5147] close(3) = 0 [ 86.202844][ T5144] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.203933][ T5145] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 86.225415][ T5144] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.229578][ T5145] REISERFS (device loop3): using ordered data mode [ 86.235615][ T5146] loop5: detected capacity change from 0 to 8192 [ 86.241307][ T5145] reiserfs: using flush barriers [pid 5147] mkdir("./file0", 0777) = 0 [pid 5147] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5146] <... ioctl resumed>) = 0 [pid 5146] close(3) = 0 [ 86.254572][ T5144] REISERFS (device loop0): using ordered data mode [ 86.261263][ T5144] reiserfs: using flush barriers [ 86.262118][ T5145] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.282976][ T5144] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5149] <... write resumed>) = 4194304 [pid 5146] mkdir("./file0", 0777) = 0 [pid 5146] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [ 86.311302][ T5147] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.317524][ T5145] REISERFS (device loop3): checking transaction log (loop3) [ 86.340314][ T5143] REISERFS (device loop2): Using r5 hash to sort names [ 86.343069][ T5146] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5149] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5143] <... mount resumed>) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file0") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] close(4 [pid 5149] <... openat resumed>) = 4 [pid 5143] <... close resumed>) = 0 [pid 5143] creat("./bus", 000 [pid 5149] ioctl(4, LOOP_SET_FD, 3 [pid 5143] <... creat resumed>) = 4 [pid 5143] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5149] <... ioctl resumed>) = 0 [pid 5143] <... write resumed>) = 32 [pid 5143] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5143] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5149] close(3 [pid 5143] <... mmap resumed>) = 0x20000000 [pid 5143] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5143] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5143] exit_group(0 [pid 5149] <... close resumed>) = 0 [pid 5143] <... exit_group resumed>) = ? [pid 5149] mkdir("./file0", 0777 [pid 5143] +++ exited with 0 +++ [pid 5149] <... mkdir resumed>) = 0 [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [ 86.353459][ T5143] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 86.370304][ T5144] REISERFS (device loop0): checking transaction log (loop0) [ 86.393229][ T5149] loop1: detected capacity change from 0 to 8192 [ 86.393872][ T5147] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [pid 5149] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5086] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./4/binderfs") = 0 [ 86.478441][ T5149] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.484995][ T5146] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 86.525653][ T5147] REISERFS (device loop4): using ordered data mode [ 86.543781][ T5145] REISERFS (device loop3): Using r5 hash to sort names [ 86.549353][ T5149] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 86.558131][ T5146] REISERFS (device loop5): using ordered data mode [ 86.575123][ T5147] reiserfs: using flush barriers [ 86.575771][ T5145] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 86.596326][ T5146] reiserfs: using flush barriers [ 86.599008][ T5147] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.612525][ T5149] REISERFS (device loop1): using ordered data mode [pid 5086] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] <... mount resumed>) = 0 [pid 5145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5145] chdir("./file0") = 0 [pid 5145] ioctl(4, LOOP_CLR_FD) = 0 [pid 5145] close(4) = 0 [pid 5145] creat("./bus", 000) = 4 [pid 5145] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [ 86.641473][ T5146] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.667209][ T5149] reiserfs: using flush barriers [pid 5145] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5145] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5145] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5145] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5145] exit_group(0) = ? [pid 5145] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./4/binderfs") = 0 [ 86.697282][ T5147] REISERFS (device loop4): checking transaction log (loop4) [ 86.705522][ T5149] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.724381][ T5146] REISERFS (device loop5): checking transaction log (loop5) [pid 5087] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... umount2 resumed>) = 0 [pid 5086] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./4/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [ 86.813385][ T5149] REISERFS (device loop1): checking transaction log (loop1) [ 86.823431][ T5144] REISERFS (device loop0): Using r5 hash to sort names [pid 5086] rmdir("./4") = 0 [pid 5086] mkdir("./5", 0777) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5155 ./strace-static-x86_64: Process 5155 attached [ 86.863994][ T5144] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5155] chdir("./5") = 0 [pid 5144] <... mount resumed>) = 0 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5155] setpgid(0, 0 [pid 5144] <... openat resumed>) = 3 [pid 5155] <... setpgid resumed>) = 0 [pid 5144] chdir("./file0" [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5144] <... chdir resumed>) = 0 [pid 5155] <... openat resumed>) = 3 [pid 5144] ioctl(4, LOOP_CLR_FD [pid 5155] write(3, "1000", 4 [pid 5144] <... ioctl resumed>) = 0 [pid 5155] <... write resumed>) = 4 [pid 5144] close(4 [pid 5155] close(3 [pid 5144] <... close resumed>) = 0 [pid 5155] <... close resumed>) = 0 [pid 5144] creat("./bus", 000 [pid 5155] symlink("/dev/binderfs", "./binderfs" [pid 5144] <... creat resumed>) = 4 [pid 5155] <... symlink resumed>) = 0 [pid 5144] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5155] memfd_create("syzkaller", 0 [pid 5144] <... write resumed>) = 32 [pid 5155] <... memfd_create resumed>) = 3 [pid 5144] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5144] <... open resumed>) = 5 [pid 5155] <... mmap resumed>) = 0x7f6d35efb000 [ 86.984338][ T5144] [ 86.986727][ T5144] ====================================================== [ 86.993760][ T5144] WARNING: possible circular locking dependency detected [ 87.000794][ T5144] 6.2.0-next-20230302-syzkaller #0 Not tainted [ 87.006992][ T5144] ------------------------------------------------------ [ 87.014031][ T5144] syz-executor761/5144 is trying to acquire lock: [ 87.020463][ T5144] ffff88807cb8f090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100 [ 87.029606][ T5144] [ 87.029606][ T5144] but task is already holding lock: [ 87.036996][ T5144] ffff8880785fe558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x690 [ 87.046129][ T5144] [ 87.046129][ T5144] which lock already depends on the new lock. [ 87.046129][ T5144] [ 87.056553][ T5144] [ 87.056553][ T5144] the existing dependency chain (in reverse order) is: [ 87.065583][ T5144] [ 87.065583][ T5144] -> #2 (sb_pagefaults){.+.+}-{0:0}: [ 87.065980][ T5147] REISERFS (device loop4): Using r5 hash to sort names [ 87.073079][ T5144] filemap_page_mkwrite+0x174/0x790 [ 87.073112][ T5144] do_page_mkwrite+0x1a1/0x690 [ 87.090960][ T5144] __handle_mm_fault+0x224e/0x3e70 [ 87.096643][ T5144] handle_mm_fault+0x2c0/0x9c0 [ 87.101955][ T5144] do_user_addr_fault+0x511/0x1210 [ 87.107616][ T5144] exc_page_fault+0x98/0x170 [ 87.112750][ T5144] asm_exc_page_fault+0x26/0x30 [ 87.118161][ T5144] [ 87.118161][ T5144] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 87.125743][ T5144] __might_fault+0x10c/0x180 [ 87.130890][ T5144] reiserfs_ioctl+0x1d2/0x330 [ 87.136112][ T5144] __x64_sys_ioctl+0x197/0x210 [ 87.141412][ T5144] do_syscall_64+0x39/0xb0 [ 87.146372][ T5144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.152803][ T5144] [ 87.152803][ T5144] -> #0 (&sbi->lock){+.+.}-{3:3}: [ 87.160029][ T5144] __lock_acquire+0x2ec7/0x5d40 [ 87.165422][ T5144] lock_acquire.part.0+0x11a/0x370 [ 87.171071][ T5144] __mutex_lock+0x12f/0x1350 [ 87.176194][ T5144] reiserfs_write_lock+0x79/0x100 [ 87.181767][ T5144] reiserfs_dirty_inode+0xd2/0x260 [ 87.187430][ T5144] __mark_inode_dirty+0x247/0x1250 [ 87.193082][ T5144] generic_update_time+0x21b/0x2b0 [ 87.198744][ T5144] file_update_time+0x224/0x270 [ 87.204305][ T5144] filemap_page_mkwrite+0x28c/0x790 [ 87.210040][ T5144] do_page_mkwrite+0x1a1/0x690 [ 87.215365][ T5144] __handle_mm_fault+0x224e/0x3e70 [ 87.221052][ T5144] handle_mm_fault+0x2c0/0x9c0 [ 87.226376][ T5144] do_user_addr_fault+0x511/0x1210 [ 87.232052][ T5144] exc_page_fault+0x98/0x170 [ 87.237211][ T5144] asm_exc_page_fault+0x26/0x30 [ 87.242622][ T5144] [ 87.242622][ T5144] other info that might help us debug this: [ 87.242622][ T5144] [ 87.252851][ T5144] Chain exists of: [ 87.252851][ T5144] &sbi->lock --> &mm->mmap_lock --> sb_pagefaults [ 87.252851][ T5144] [ 87.265303][ T5144] Possible unsafe locking scenario: [ 87.265303][ T5144] [ 87.272766][ T5144] CPU0 CPU1 [ 87.278137][ T5144] ---- ---- [ 87.283509][ T5144] lock(sb_pagefaults); [ 87.287772][ T5144] lock(&mm->mmap_lock); [ 87.294660][ T5144] lock(sb_pagefaults); [ 87.301437][ T5144] lock(&sbi->lock); [ 87.305439][ T5144] [ 87.305439][ T5144] *** DEADLOCK *** [ 87.305439][ T5144] [ 87.313590][ T5144] 2 locks held by syz-executor761/5144: [ 87.319141][ T5144] #0: ffff888027170ad8 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x43f/0x1210 [ 87.329116][ T5144] #1: ffff8880785fe558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x690 [ 87.338626][ T5144] [ 87.338626][ T5144] stack backtrace: [ 87.344517][ T5144] CPU: 1 PID: 5144 Comm: syz-executor761 Not tainted 6.2.0-next-20230302-syzkaller #0 [ 87.354070][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 87.364141][ T5144] Call Trace: [ 87.367436][ T5144] [ 87.370374][ T5144] dump_stack_lvl+0xd9/0x150 [ 87.374998][ T5144] check_noncircular+0x25f/0x2e0 [ 87.379953][ T5144] ? print_circular_bug+0x5c0/0x5c0 [ 87.385182][ T5144] ? is_bpf_text_address+0x4/0x1b0 [ 87.390313][ T5144] ? lock_acquire+0x32/0xc0 [ 87.394836][ T5144] __lock_acquire+0x2ec7/0x5d40 [ 87.399711][ T5144] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 87.405731][ T5144] ? print_usage_bug.part.0+0x660/0x660 [ 87.411298][ T5144] ? lock_downgrade+0x690/0x690 [ 87.416168][ T5144] ? trace_lock_acquire+0x1f1/0x2b0 [ 87.421393][ T5144] lock_acquire.part.0+0x11a/0x370 [ 87.426526][ T5144] ? reiserfs_write_lock+0x79/0x100 [ 87.431757][ T5144] ? lock_release+0x780/0x780 [ 87.436460][ T5144] ? reiserfs_write_lock+0x79/0x100 [ 87.441683][ T5144] ? rcu_read_lock_sched_held+0x3e/0x70 [ 87.447253][ T5144] ? trace_lock_acquire+0x1f1/0x2b0 [ 87.452472][ T5144] ? reiserfs_write_lock+0x79/0x100 [ 87.457698][ T5144] ? lock_acquire+0x32/0xc0 [ 87.462370][ T5144] ? reiserfs_write_lock+0x79/0x100 [ 87.467608][ T5144] __mutex_lock+0x12f/0x1350 [ 87.472225][ T5144] ? reiserfs_write_lock+0x79/0x100 [ 87.477473][ T5144] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 87.483509][ T5144] ? reiserfs_write_lock+0x79/0x100 [ 87.488745][ T5144] ? print_usage_bug.part.0+0x660/0x660 [ 87.494317][ T5144] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 87.499883][ T5144] ? find_held_lock+0x2d/0x110 [ 87.504673][ T5144] ? current_time+0x79/0x2c0 [ 87.509310][ T5144] reiserfs_write_lock+0x79/0x100 [ 87.514383][ T5144] reiserfs_dirty_inode+0xd2/0x260 [ 87.519519][ T5144] ? reiserfs_unfreeze+0xa0/0xa0 [ 87.524484][ T5144] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.529698][ T5144] ? ktime_get_coarse_real_ts64+0x1bb/0x200 [ 87.535616][ T5144] ? reiserfs_unfreeze+0xa0/0xa0 [ 87.540582][ T5144] __mark_inode_dirty+0x247/0x1250 [ 87.545711][ T5144] generic_update_time+0x21b/0x2b0 [ 87.550873][ T5144] file_update_time+0x224/0x270 [ 87.555766][ T5144] ? new_inode+0x280/0x280 [ 87.560199][ T5144] filemap_page_mkwrite+0x28c/0x790 [ 87.565417][ T5144] do_page_mkwrite+0x1a1/0x690 [ 87.570213][ T5144] __handle_mm_fault+0x224e/0x3e70 [ 87.575351][ T5144] ? vm_iomap_memory+0x190/0x190 [ 87.580321][ T5144] handle_mm_fault+0x2c0/0x9c0 [ 87.585111][ T5144] do_user_addr_fault+0x511/0x1210 [ 87.590253][ T5144] exc_page_fault+0x98/0x170 [ 87.594857][ T5144] asm_exc_page_fault+0x26/0x30 [ 87.599728][ T5144] RIP: 0033:0x7f6d3e3065a3 [ 87.604156][ T5144] Code: 00 e8 21 26 04 00 48 8b 35 ba 5b 0b 00 31 c9 31 c0 ba 01 76 08 80 bf 10 00 00 00 e8 07 26 04 00 b8 98 00 00 20 b9 20 00 00 00 04 25 80 00 00 20 08 00 00 00 66 c7 04 25 84 00 00 20 20 01 48 [ 87.623777][ T5144] RSP: 002b:00007ffea8c6ad70 EFLAGS: 00010286 [pid 5144] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5144] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5087] <... umount2 resumed>) = 0 [pid 5087] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./4/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./4") = 0 [ 87.629864][ T5144] RAX: 0000000020000098 RBX: 00000000000141a1 RCX: 0000000000000020 [ 87.637859][ T5144] RDX: 0000000000000000 RSI: 0000000080087601 RDI: 0000000000000004 [ 87.645840][ T5144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.653841][ T5144] R10: 0000000000000005 R11: 0000000000000246 R12: 00007ffea8c6ad9c [ 87.661825][ T5144] R13: 00007ffea8c6add0 R14: 00007ffea8c6adb0 R15: 0000000000000004 [ 87.669818][ T5144] [pid 5087] mkdir("./5", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5156 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304./strace-static-x86_64: Process 5156 attached [pid 5156] chdir("./5") = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs") = 0 [ 87.702177][ T5147] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5147] <... mount resumed>) = 0 [pid 5156] memfd_create("syzkaller", 0 [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5156] <... memfd_create resumed>) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] <... openat resumed>) = 3 [pid 5156] <... mmap resumed>) = 0x7f6d35efb000 [pid 5147] chdir("./file0") = 0 [pid 5147] ioctl(4, LOOP_CLR_FD) = 0 [pid 5147] close(4) = 0 [pid 5147] creat("./bus", 000) = 4 [pid 5147] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5147] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5147] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5147] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5147] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5147] exit_group(0) = ? [pid 5147] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5088] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5088] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./4/binderfs") = 0 [ 87.778524][ T5146] REISERFS (device loop5): Using r5 hash to sort names [ 87.787683][ T5149] REISERFS (device loop1): Using r5 hash to sort names [pid 5088] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5088] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] <... write resumed>) = 4194304 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./4/file0" [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5088] <... rmdir resumed>) = 0 [pid 5088] getdents64(3, [pid 5146] <... mount resumed>) = 0 [pid 5088] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5088] <... close resumed>) = 0 [pid 5146] <... openat resumed>) = 3 [pid 5088] rmdir("./4" [ 87.820777][ T5146] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 87.826422][ T5149] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5146] chdir("./file0" [pid 5088] <... rmdir resumed>) = 0 [pid 5146] <... chdir resumed>) = 0 [pid 5088] mkdir("./5", 0777 [pid 5155] munmap(0x7f6d35efb000, 4194304 [pid 5146] ioctl(4, LOOP_CLR_FD [pid 5155] <... munmap resumed>) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5088] <... mkdir resumed>) = 0 [pid 5146] <... ioctl resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5146] close(4) = 0 [pid 5146] creat("./bus", 000) = 4 [pid 5149] <... mount resumed>) = 0 [pid 5146] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5146] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5146] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5149] chdir("./file0") = 0 [pid 5146] <... mmap resumed>) = 0x20000000 [pid 5146] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5149] ioctl(4, LOOP_CLR_FD) = 0 [pid 5146] write(-1, 0x20000080, 296 [pid 5149] close(4 [pid 5146] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5149] <... close resumed>) = 0 [pid 5146] exit_group(0 [pid 5149] creat("./bus", 000) = 4 [pid 5149] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5146] <... exit_group resumed>) = ? [pid 5149] <... write resumed>) = 32 [pid 5149] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5149] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5146] +++ exited with 0 +++ [pid 5149] <... mmap resumed>) = 0x20000000 [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5149] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5149] write(-1, 0x20000080, 296 [pid 5089] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] exit_group(0 [pid 5089] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5149] <... exit_group resumed>) = ? [pid 5089] <... openat resumed>) = 3 [pid 5089] fstat(3, [pid 5155] <... ioctl resumed>) = 0 [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] close(3 [pid 5149] +++ exited with 0 +++ [pid 5089] getdents64(3, [pid 5155] <... close resumed>) = 0 [pid 5089] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5155] mkdir("./file0", 0777 [pid 5089] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... mkdir resumed>) = 0 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5089] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./4/binderfs" [pid 5085] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... unlink resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./4/binderfs") = 0 [ 87.887610][ T5155] loop2: detected capacity change from 0 to 8192 [pid 5085] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... openat resumed>) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5158 ./strace-static-x86_64: Process 5158 attached [pid 5158] chdir("./5") = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] <... write resumed>) = 4194304 [pid 5156] munmap(0x7f6d35efb000, 4194304 [pid 5158] write(3, "1000", 4 [pid 5156] <... munmap resumed>) = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5158] <... write resumed>) = 4 [ 87.942317][ T5155] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.974544][ T5155] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5158] close(3 [pid 5156] <... ioctl resumed>) = 0 [pid 5156] close(3 [pid 5158] <... close resumed>) = 0 [pid 5158] symlink("/dev/binderfs", "./binderfs" [pid 5156] <... close resumed>) = 0 [pid 5158] <... symlink resumed>) = 0 [pid 5156] mkdir("./file0", 0777 [pid 5158] memfd_create("syzkaller", 0 [pid 5156] <... mkdir resumed>) = 0 [pid 5158] <... memfd_create resumed>) = 3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 87.986583][ T5156] loop3: detected capacity change from 0 to 8192 [ 88.000882][ T5155] REISERFS (device loop2): using ordered data mode [ 88.008276][ T5155] reiserfs: using flush barriers [ 88.013643][ T5156] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.027804][ T5156] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [pid 5156] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./4/file0") = 0 [pid 5085] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./4") = 0 [pid 5085] mkdir("./5", 0777) = 0 [ 88.037612][ T5155] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.054184][ T5155] REISERFS (device loop2): checking transaction log (loop2) [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5155] <... mount resumed>) = 0 [pid 5144] write(-1, 0x20000080, 296 [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5144] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5155] <... openat resumed>) = 3 [pid 5144] exit_group(0 [pid 5155] chdir("./file0" [pid 5144] <... exit_group resumed>) = ? [pid 5155] <... chdir resumed>) = 0 [pid 5144] +++ exited with 0 +++ [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5144, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5155] <... ioctl resumed>) = 0 [pid 5155] close(4) = 0 [pid 5084] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] creat("./bus", 000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] <... creat resumed>) = 4 [pid 5084] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5084] <... openat resumed>) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./4/binderfs") = 0 [pid 5084] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5155] <... write resumed>) = 32 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5155] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5155] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5160 [pid 5155] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5155] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5155] exit_group(0) = ? [pid 5155] +++ exited with 0 +++ ./strace-static-x86_64: Process 5160 attached [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5086] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] chdir("./5" [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, [pid 5160] <... chdir resumed>) = 0 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] lstat("./5/binderfs", [pid 5160] <... prctl resumed>) = 0 [pid 5086] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5160] setpgid(0, 0 [pid 5086] unlink("./5/binderfs") = 0 [pid 5086] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... setpgid resumed>) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 88.105691][ T5155] REISERFS (device loop2): Using r5 hash to sort names [ 88.112969][ T5155] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 88.122357][ T5156] REISERFS (device loop3): using ordered data mode [ 88.128884][ T5156] reiserfs: using flush barriers [ 88.134875][ T5156] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./4/file0") = 0 [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3) = 0 [pid 5089] rmdir("./4") = 0 [pid 5089] mkdir("./5", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5089] close(3) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5161 ./strace-static-x86_64: Process 5161 attached [pid 5161] chdir("./5") = 0 [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5161] setpgid(0, 0) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5161] write(3, "1000", 4) = 4 [pid 5161] close(3) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5161] memfd_create("syzkaller", 0) = 3 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 88.240219][ T5156] REISERFS (device loop3): checking transaction log (loop3) [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5158] <... write resumed>) = 4194304 [pid 5158] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5158] ioctl(4, LOOP_SET_FD, 3 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5158] <... ioctl resumed>) = 0 [pid 5158] close(3) = 0 [pid 5158] mkdir("./file0", 0777) = 0 [ 88.346446][ T5158] loop4: detected capacity change from 0 to 8192 [pid 5158] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5160] <... write resumed>) = 4194304 [pid 5160] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5161] <... write resumed>) = 4194304 [pid 5160] <... ioctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5161] munmap(0x7f6d35efb000, 4194304 [ 88.406190][ T5158] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.430497][ T5160] loop1: detected capacity change from 0 to 8192 [ 88.439438][ T5158] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 88.449049][ T5158] REISERFS (device loop4): using ordered data mode [pid 5160] close(3 [pid 5084] lstat("./4/file0", [pid 5161] <... munmap resumed>) = 0 [pid 5160] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5160] mkdir("./file0", 0777 [pid 5161] <... openat resumed>) = 4 [pid 5084] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5160] <... mkdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./4/file0") = 0 [pid 5084] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5160] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5084] close(3 [pid 5161] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5161] close(3 [pid 5084] rmdir("./4" [pid 5161] <... close resumed>) = 0 [pid 5086] <... umount2 resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5161] mkdir("./file0", 0777 [pid 5084] mkdir("./5", 0777 [pid 5161] <... mkdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5161] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 88.456467][ T5158] reiserfs: using flush barriers [ 88.457519][ T5156] REISERFS (device loop3): Using r5 hash to sort names [ 88.468441][ T5158] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.488482][ T5161] loop5: detected capacity change from 0 to 8192 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5165 [pid 5156] <... mount resumed>) = 0 [pid 5086] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] <... openat resumed>) = 3 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5156] chdir("./file0" [pid 5086] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5156] <... chdir resumed>) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5156] ioctl(4, LOOP_CLR_FD [pid 5086] fstat(4, ./strace-static-x86_64: Process 5165 attached [pid 5156] <... ioctl resumed>) = 0 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5165] chdir("./5" [pid 5086] getdents64(4, [pid 5165] <... chdir resumed>) = 0 [pid 5086] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] getdents64(4, [pid 5165] <... prctl resumed>) = 0 [pid 5086] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [ 88.499832][ T5158] REISERFS (device loop4): checking transaction log (loop4) [ 88.523053][ T5156] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 88.533262][ T5160] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5165] setpgid(0, 0 [pid 5086] close(4 [pid 5165] <... setpgid resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] rmdir("./5/file0" [pid 5165] <... openat resumed>) = 3 [pid 5156] close(4 [pid 5086] <... rmdir resumed>) = 0 [pid 5165] write(3, "1000", 4 [pid 5086] getdents64(3, [pid 5165] <... write resumed>) = 4 [pid 5086] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5165] close(3 [pid 5086] close(3 [pid 5165] <... close resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5165] symlink("/dev/binderfs", "./binderfs" [pid 5086] rmdir("./5" [pid 5165] <... symlink resumed>) = 0 [pid 5086] <... rmdir resumed>) = 0 [pid 5165] memfd_create("syzkaller", 0 [pid 5086] mkdir("./6", 0777 [pid 5165] <... memfd_create resumed>) = 3 [pid 5086] <... mkdir resumed>) = 0 [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5165] <... mmap resumed>) = 0x7f6d35efb000 [pid 5086] <... openat resumed>) = 3 [pid 5156] <... close resumed>) = 0 [pid 5086] ioctl(3, LOOP_CLR_FD [pid 5156] creat("./bus", 000 [pid 5086] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5086] close(3 [pid 5156] <... creat resumed>) = 4 [pid 5086] <... close resumed>) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5156] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5086] <... clone resumed>, child_tidptr=0x5555566815d0) = 5166 ./strace-static-x86_64: Process 5166 attached [pid 5166] chdir("./6") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5156] <... write resumed>) = 32 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5156] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5166] <... openat resumed>) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5156] <... open resumed>) = 5 [ 88.549577][ T5160] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 88.560847][ T5161] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.574973][ T5161] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 88.585236][ T5160] REISERFS (device loop1): using ordered data mode [ 88.592278][ T5160] reiserfs: using flush barriers [ 88.598733][ T5161] REISERFS (device loop5): using ordered data mode [pid 5166] memfd_create("syzkaller", 0 [pid 5156] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5166] <... memfd_create resumed>) = 3 [pid 5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5156] <... mmap resumed>) = 0x20000000 [pid 5156] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [ 88.608328][ T5160] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.630983][ T5161] reiserfs: using flush barriers [ 88.638192][ T5160] REISERFS (device loop1): checking transaction log (loop1) [pid 5156] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5156] exit_group(0) = ? [pid 5156] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} --- [pid 5087] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./5/binderfs") = 0 [ 88.644118][ T5161] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5087] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5158] <... mount resumed>) = 0 [ 88.690889][ T5158] REISERFS (device loop4): Using r5 hash to sort names [ 88.713767][ T5158] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./file0") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4 [pid 5165] <... write resumed>) = 4194304 [pid 5158] <... close resumed>) = 0 [ 88.749936][ T5161] REISERFS (device loop5): checking transaction log (loop5) [pid 5165] munmap(0x7f6d35efb000, 4194304 [pid 5158] creat("./bus", 000 [pid 5165] <... munmap resumed>) = 0 [pid 5158] <... creat resumed>) = 4 [pid 5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5158] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5165] <... openat resumed>) = 4 [pid 5165] ioctl(4, LOOP_SET_FD, 3 [pid 5158] <... write resumed>) = 32 [pid 5158] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5158] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5165] <... ioctl resumed>) = 0 [pid 5158] <... mmap resumed>) = 0x20000000 [pid 5165] close(3 [pid 5158] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5165] <... close resumed>) = 0 [pid 5158] write(-1, 0x20000080, 296 [pid 5165] mkdir("./file0", 0777 [pid 5158] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5158] exit_group(0 [pid 5165] <... mkdir resumed>) = 0 [pid 5158] <... exit_group resumed>) = ? [pid 5165] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5158] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5166] <... write resumed>) = 4194304 [pid 5088] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] munmap(0x7f6d35efb000, 4194304 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 88.814258][ T5160] REISERFS (device loop1): Using r5 hash to sort names [ 88.828497][ T5165] loop0: detected capacity change from 0 to 8192 [ 88.840180][ T5160] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5166] <... munmap resumed>) = 0 [pid 5160] <... mount resumed>) = 0 [pid 5088] fstat(3, [pid 5087] <... umount2 resumed>) = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] <... openat resumed>) = 4 [pid 5160] <... openat resumed>) = 3 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5166] ioctl(4, LOOP_SET_FD, 3 [pid 5160] chdir("./file0") = 0 [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] lstat("./5/file0", [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5087] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5160] <... ioctl resumed>) = 0 [pid 5087] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] close(4 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5160] creat("./bus", 000) = 4 [pid 5087] <... openat resumed>) = 4 [pid 5160] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./5/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5160] <... write resumed>) = 32 [pid 5088] getdents64(3, [pid 5087] rmdir("./5" [pid 5160] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] <... rmdir resumed>) = 0 [pid 5160] <... open resumed>) = 5 [pid 5088] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5087] mkdir("./6", 0777 [pid 5160] <... mmap resumed>) = 0x20000000 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... mkdir resumed>) = 0 [pid 5160] ioctl(4, FS_IOC_GETVERSION [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5160] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5088] lstat("./5/binderfs", [pid 5087] <... openat resumed>) = 3 [pid 5160] write(-1, 0x20000080, 296 [pid 5088] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5160] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] ioctl(3, LOOP_CLR_FD [pid 5160] exit_group(0 [pid 5088] unlink("./5/binderfs" [pid 5160] <... exit_group resumed>) = ? [pid 5087] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5160] +++ exited with 0 +++ [pid 5088] <... unlink resumed>) = 0 [pid 5087] close(3 [pid 5088] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... close resumed>) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5168 ./strace-static-x86_64: Process 5168 attached [pid 5168] chdir("./6") = 0 [pid 5085] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 88.863181][ T5165] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.867661][ T5166] loop2: detected capacity change from 0 to 8192 [ 88.878193][ T5165] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./5/binderfs") = 0 [pid 5085] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5168] close(3) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5166] <... ioctl resumed>) = 0 [pid 5166] close(3) = 0 [pid 5166] mkdir("./file0", 0777) = 0 [pid 5166] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5085] <... umount2 resumed>) = 0 [ 88.912492][ T5161] REISERFS (device loop5): Using r5 hash to sort names [pid 5161] <... mount resumed>) = 0 [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5161] chdir("./file0") = 0 [pid 5161] ioctl(4, LOOP_CLR_FD) = 0 [pid 5161] close(4) = 0 [pid 5161] creat("./bus", 000) = 4 [pid 5161] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5085] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5161] <... open resumed>) = 5 [pid 5161] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5085] lstat("./5/file0", [pid 5161] <... mmap resumed>) = 0x20000000 [pid 5161] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5161] write(-1, 0x20000080, 296 [pid 5085] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5161] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5161] exit_group(0) = ? [pid 5085] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./5/file0") = 0 [pid 5085] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./5" [pid 5161] +++ exited with 0 +++ [pid 5085] <... rmdir resumed>) = 0 [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5085] mkdir("./6", 0777) = 0 [pid 5089] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 88.941329][ T5161] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 88.941426][ T5166] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5089] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5089] <... openat resumed>) = 3 [pid 5089] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./5/binderfs") = 0 [ 88.988445][ T5165] REISERFS (device loop0): using ordered data mode [ 89.006230][ T5165] reiserfs: using flush barriers [ 89.017262][ T5166] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5089] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5170 ./strace-static-x86_64: Process 5170 attached [pid 5170] chdir("./6") = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3) = 0 [pid 5170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5170] memfd_create("syzkaller", 0) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 89.034309][ T5165] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5168] <... write resumed>) = 4194304 [pid 5168] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 89.083642][ T5166] REISERFS (device loop2): using ordered data mode [ 89.113297][ T5166] reiserfs: using flush barriers [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5088] <... umount2 resumed>) = 0 [pid 5088] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5168] <... ioctl resumed>) = 0 [pid 5168] close(3) = 0 [pid 5168] mkdir("./file0", 0777 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./5/file0" [pid 5168] <... mkdir resumed>) = 0 [pid 5088] <... rmdir resumed>) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5168] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5088] close(3) = 0 [pid 5088] rmdir("./5") = 0 [pid 5088] mkdir("./6", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5172 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5089] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5172 attached [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] chdir("./6" [pid 5089] getdents64(4, [pid 5172] <... chdir resumed>) = 0 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] getdents64(4, [pid 5172] <... prctl resumed>) = 0 [ 89.129743][ T5168] loop3: detected capacity change from 0 to 8192 [ 89.137264][ T5165] REISERFS (device loop0): checking transaction log (loop0) [ 89.154244][ T5166] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5172] setpgid(0, 0 [pid 5089] close(4 [pid 5172] <... setpgid resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] rmdir("./5/file0" [pid 5172] <... openat resumed>) = 3 [pid 5089] <... rmdir resumed>) = 0 [pid 5172] write(3, "1000", 4 [pid 5089] getdents64(3, [pid 5172] <... write resumed>) = 4 [pid 5089] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5172] close(3 [pid 5089] close(3 [pid 5172] <... close resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs" [pid 5089] rmdir("./5" [pid 5172] <... symlink resumed>) = 0 [pid 5089] <... rmdir resumed>) = 0 [pid 5172] memfd_create("syzkaller", 0 [pid 5089] mkdir("./6", 0777 [pid 5172] <... memfd_create resumed>) = 3 [pid 5089] <... mkdir resumed>) = 0 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5172] <... mmap resumed>) = 0x7f6d35efb000 [pid 5089] <... openat resumed>) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5089] close(3) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5173 ./strace-static-x86_64: Process 5173 attached [pid 5173] chdir("./6") = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5173] setpgid(0, 0) = 0 [ 89.202834][ T5168] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 89.253434][ T5166] REISERFS (device loop2): checking transaction log (loop2) [ 89.275477][ T5168] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5170] <... write resumed>) = 4194304 [pid 5170] munmap(0x7f6d35efb000, 4194304) = 0 [ 89.328698][ T5166] REISERFS (device loop2): Using r5 hash to sort names [ 89.342716][ T5168] REISERFS (device loop3): using ordered data mode [ 89.343887][ T5166] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 89.349234][ T5168] reiserfs: using flush barriers [pid 5170] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5172] <... write resumed>) = 4194304 [pid 5170] ioctl(4, LOOP_SET_FD, 3 [pid 5166] <... mount resumed>) = 0 [pid 5172] munmap(0x7f6d35efb000, 4194304 [pid 5166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5172] <... munmap resumed>) = 0 [pid 5166] <... openat resumed>) = 3 [pid 5172] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5166] chdir("./file0" [pid 5172] <... openat resumed>) = 4 [pid 5166] <... chdir resumed>) = 0 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5166] ioctl(4, LOOP_CLR_FD [pid 5172] <... ioctl resumed>) = 0 [pid 5166] <... ioctl resumed>) = 0 [pid 5172] close(3 [pid 5166] close(4 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5172] <... close resumed>) = 0 [pid 5170] <... ioctl resumed>) = 0 [pid 5166] <... close resumed>) = 0 [pid 5172] mkdir("./file0", 0777 [pid 5170] close(3 [pid 5166] creat("./bus", 000 [pid 5172] <... mkdir resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5166] <... creat resumed>) = 4 [pid 5172] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5170] mkdir("./file0", 0777 [pid 5166] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5170] <... mkdir resumed>) = 0 [pid 5170] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5166] <... write resumed>) = 32 [pid 5166] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [ 89.372481][ T5168] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.373302][ T5170] loop1: detected capacity change from 0 to 8192 [ 89.389185][ T5168] REISERFS (device loop3): checking transaction log (loop3) [ 89.412298][ T5172] loop4: detected capacity change from 0 to 8192 [pid 5166] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5166] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5166] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5166] exit_group(0) = ? [pid 5166] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5086] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5086] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 89.458324][ T5172] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.471447][ T5170] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.491284][ T5172] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 89.501105][ T5165] REISERFS (device loop0): Using r5 hash to sort names [pid 5086] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, [pid 5173] <... write resumed>) = 4194304 [ 89.503578][ T5172] REISERFS (device loop4): using ordered data mode [ 89.508195][ T5165] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 89.514734][ T5172] reiserfs: using flush barriers [ 89.528020][ T5170] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 89.531062][ T5172] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5173] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./6/binderfs") = 0 [ 89.548160][ T5170] REISERFS (device loop1): using ordered data mode [ 89.554875][ T5172] REISERFS (device loop4): checking transaction log (loop4) [ 89.563306][ T5173] loop5: detected capacity change from 0 to 8192 [ 89.574244][ T5168] REISERFS (device loop3): Using r5 hash to sort names [ 89.583546][ T5170] reiserfs: using flush barriers [ 89.590288][ T5168] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5086] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] <... mount resumed>) = 0 [pid 5165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5165] chdir("./file0") = 0 [pid 5165] ioctl(4, LOOP_CLR_FD) = 0 [pid 5165] close(4) = 0 [pid 5165] creat("./bus", 000) = 4 [pid 5165] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5173] <... ioctl resumed>) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./file0", 0777) = 0 [pid 5173] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5168] <... mount resumed>) = 0 [pid 5165] <... write resumed>) = 32 [pid 5165] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5165] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5165] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5165] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5165] exit_group(0) = ? [pid 5165] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5165, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5168] chdir("./file0") = 0 [pid 5084] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, [pid 5168] ioctl(4, LOOP_CLR_FD) = 0 [pid 5084] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./5/binderfs" [pid 5168] close(4 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... close resumed>) = 0 [pid 5168] creat("./bus", 000) = 4 [pid 5168] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5168] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [ 89.599575][ T5170] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.638204][ T5173] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5168] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5168] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5168] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5168] exit_group(0) = ? [pid 5168] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5087] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5172] <... mount resumed>) = 0 [pid 5087] unlink("./6/binderfs") = 0 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] chdir("./file0") = 0 [pid 5172] ioctl(4, LOOP_CLR_FD) = 0 [pid 5172] close(4) = 0 [pid 5172] creat("./bus", 000) = 4 [pid 5172] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [ 89.686371][ T5170] REISERFS (device loop1): checking transaction log (loop1) [ 89.694738][ T5172] REISERFS (device loop4): Using r5 hash to sort names [ 89.702354][ T5172] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5172] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5172] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5172] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5172] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5172] exit_group(0) = ? [pid 5172] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} --- [pid 5088] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5086] <... umount2 resumed>) = 0 [pid 5086] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] lstat("./6/file0", [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... openat resumed>) = 3 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] fstat(3, [ 89.733414][ T5173] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [pid 5086] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5088] getdents64(3, [pid 5086] fstat(4, [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] getdents64(4, [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./6/binderfs", [pid 5086] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] getdents64(4, [pid 5088] unlink("./6/binderfs" [pid 5086] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] <... unlink resumed>) = 0 [pid 5086] close(4 [pid 5088] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... close resumed>) = 0 [pid 5086] rmdir("./6/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./6") = 0 [pid 5086] mkdir("./7", 0777) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5177 [ 89.776075][ T5173] REISERFS (device loop5): using ordered data mode [ 89.782873][ T5173] reiserfs: using flush barriers [ 89.788656][ T5173] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 ./strace-static-x86_64: Process 5177 attached [pid 5177] chdir("./7") = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5177] setpgid(0, 0) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5177] write(3, "1000", 4) = 4 [pid 5177] close(3) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5177] memfd_create("syzkaller", 0) = 3 [pid 5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5087] <... umount2 resumed>) = 0 [pid 5087] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [ 89.834202][ T5173] REISERFS (device loop5): checking transaction log (loop5) [pid 5087] rmdir("./6/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./6") = 0 [pid 5087] mkdir("./7", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5178 ./strace-static-x86_64: Process 5178 attached [pid 5178] chdir("./7") = 0 [pid 5177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... umount2 resumed>) = 0 [pid 5178] <... openat resumed>) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] memfd_create("syzkaller", 0) = 3 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... mmap resumed>) = 0x7f6d35efb000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./5/file0") = 0 [pid 5084] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./5") = 0 [pid 5084] mkdir("./6", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5179 attached [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5179 [pid 5179] chdir("./6") = 0 [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] setpgid(0, 0) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5179] write(3, "1000", 4) = 4 [pid 5179] close(3) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5088] <... umount2 resumed>) = 0 [pid 5088] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5170] <... mount resumed>) = 0 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5088] getdents64(4, [ 89.983445][ T5170] REISERFS (device loop1): Using r5 hash to sort names [ 89.990590][ T5170] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [pid 5170] chdir("./file0") = 0 [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5088] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5170] <... ioctl resumed>) = 0 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5170] close(4 [pid 5088] close(4 [pid 5170] <... close resumed>) = 0 [pid 5088] <... close resumed>) = 0 [pid 5170] creat("./bus", 000 [pid 5088] rmdir("./6/file0" [pid 5170] <... creat resumed>) = 4 [pid 5088] <... rmdir resumed>) = 0 [pid 5170] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3) = 0 [pid 5088] rmdir("./6") = 0 [pid 5088] mkdir("./7", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5177] <... write resumed>) = 4194304 [pid 5170] <... write resumed>) = 32 [pid 5177] munmap(0x7f6d35efb000, 4194304 [pid 5170] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5177] <... munmap resumed>) = 0 [pid 5170] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5177] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5170] <... mmap resumed>) = 0x20000000 [pid 5177] <... openat resumed>) = 4 [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5180 [pid 5177] ioctl(4, LOOP_SET_FD, 3 [pid 5170] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5170] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5170] exit_group(0) = ? [pid 5170] +++ exited with 0 +++ ./strace-static-x86_64: Process 5180 attached [pid 5180] chdir("./7") = 0 [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5180] setpgid(0, 0) = 0 [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5177] <... ioctl resumed>) = 0 [pid 5085] <... restart_syscall resumed>) = 0 [pid 5177] close(3) = 0 [pid 5177] mkdir("./file0", 0777 [pid 5180] write(3, "1000", 4 [pid 5085] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] <... write resumed>) = 4 [pid 5177] <... mkdir resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] close(3 [pid 5177] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5085] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5180] <... close resumed>) = 0 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] <... openat resumed>) = 3 [pid 5180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5180] memfd_create("syzkaller", 0) = 3 [ 90.060460][ T5173] REISERFS (device loop5): Using r5 hash to sort names [ 90.080725][ T5173] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 90.090333][ T5177] loop2: detected capacity change from 0 to 8192 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./6/binderfs", [pid 5173] <... mount resumed>) = 0 [pid 5085] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5085] unlink("./6/binderfs" [pid 5173] <... openat resumed>) = 3 [pid 5173] chdir("./file0" [pid 5085] <... unlink resumed>) = 0 [pid 5173] <... chdir resumed>) = 0 [pid 5085] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] ioctl(4, LOOP_CLR_FD) = 0 [pid 5178] <... write resumed>) = 4194304 [pid 5173] close(4) = 0 [pid 5178] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5173] creat("./bus", 000 [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 90.109151][ T5177] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.136737][ T5177] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5173] <... creat resumed>) = 4 [pid 5173] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5173] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5173] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5173] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5173] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5173] exit_group(0) = ? [pid 5173] +++ exited with 0 +++ [pid 5179] <... write resumed>) = 4194304 [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5089] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5179] munmap(0x7f6d35efb000, 4194304 [pid 5089] <... openat resumed>) = 3 [pid 5089] fstat(3, [pid 5179] <... munmap resumed>) = 0 [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] <... write resumed>) = 4194304 [pid 5179] <... openat resumed>) = 4 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] <... ioctl resumed>) = 0 [pid 5178] close(3) = 0 [pid 5178] mkdir("./file0", 0777) = 0 [pid 5178] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5180] munmap(0x7f6d35efb000, 4194304 [pid 5179] ioctl(4, LOOP_SET_FD, 3 [ 90.172080][ T5178] loop3: detected capacity change from 0 to 8192 [ 90.207318][ T5177] REISERFS (device loop2): using ordered data mode [ 90.215297][ T5179] loop0: detected capacity change from 0 to 8192 [pid 5089] lstat("./6/binderfs", [pid 5180] <... munmap resumed>) = 0 [pid 5089] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5180] ioctl(4, LOOP_SET_FD, 3 [pid 5089] unlink("./6/binderfs" [pid 5085] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5179] <... ioctl resumed>) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777 [pid 5089] <... unlink resumed>) = 0 [pid 5089] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 90.219748][ T5178] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.240963][ T5178] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 90.250227][ T5178] REISERFS (device loop3): using ordered data mode [ 90.254167][ T5180] loop4: detected capacity change from 0 to 8192 [ 90.257462][ T5178] reiserfs: using flush barriers [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./6/file0") = 0 [pid 5085] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5179] <... mkdir resumed>) = 0 [pid 5085] rmdir("./6") = 0 [pid 5085] mkdir("./7", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5179] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5184 ./strace-static-x86_64: Process 5184 attached [ 90.274630][ T5177] reiserfs: using flush barriers [ 90.279923][ T5178] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.297823][ T5177] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.314966][ T5177] REISERFS (device loop2): checking transaction log (loop2) [pid 5184] chdir("./7") = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5180] <... ioctl resumed>) = 0 [pid 5184] <... prctl resumed>) = 0 [pid 5180] close(3) = 0 [pid 5180] mkdir("./file0", 0777) = 0 [pid 5180] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5184] setpgid(0, 0) = 0 [ 90.361178][ T5177] REISERFS (device loop2): Using r5 hash to sort names [ 90.365494][ T5178] REISERFS (device loop3): checking transaction log (loop3) [ 90.368942][ T5177] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 90.385444][ T5180] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] write(3, "1000", 4) = 4 [pid 5184] close(3) = 0 [pid 5184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5184] memfd_create("syzkaller", 0) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 90.398762][ T5179] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5177] <... mount resumed>) = 0 [pid 5177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5177] chdir("./file0") = 0 [ 90.451289][ T5180] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 90.454607][ T5179] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 90.460874][ T5180] REISERFS (device loop4): using ordered data mode [ 90.477279][ T5180] reiserfs: using flush barriers [ 90.484091][ T5179] REISERFS (device loop0): journal params: device l [ 90.484113][ T5179] reiserfs: using flush barriers [pid 5177] ioctl(4, LOOP_CLR_FD [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5177] <... ioctl resumed>) = 0 [ 90.484113][ T5180] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.484476][ T5180] REISERFS (device loop4): checking transaction log (loop4) [ 90.528844][ T5179] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5177] close(4) = 0 [pid 5177] creat("./bus", 000 [pid 5089] <... umount2 resumed>) = 0 [pid 5177] <... creat resumed>) = 4 [pid 5089] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5177] <... write resumed>) = 32 [pid 5089] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5177] <... open resumed>) = 5 [pid 5089] <... openat resumed>) = 4 [pid 5089] fstat(4, [pid 5177] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5177] <... mmap resumed>) = 0x20000000 [pid 5089] rmdir("./6/file0") = 0 [pid 5177] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3 [pid 5177] write(-1, 0x20000080, 296 [pid 5089] <... close resumed>) = 0 [pid 5089] rmdir("./6" [pid 5177] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5177] exit_group(0 [pid 5089] <... rmdir resumed>) = 0 [pid 5177] <... exit_group resumed>) = ? [pid 5089] mkdir("./7", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5177] +++ exited with 0 +++ [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} --- [pid 5089] close(3) = 0 [pid 5086] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./7/binderfs" [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5186 [pid 5086] <... unlink resumed>) = 0 [ 90.570040][ T5179] REISERFS (device loop0): checking transaction log (loop0) [pid 5086] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5186 attached [pid 5186] chdir("./7") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5186] memfd_create("syzkaller", 0) = 3 [pid 5184] <... write resumed>) = 4194304 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5184] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 90.640510][ T5178] REISERFS (device loop3): Using r5 hash to sort names [ 90.662660][ T5178] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5178] <... mount resumed>) = 0 [pid 5178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5178] chdir("./file0") = 0 [pid 5178] ioctl(4, LOOP_CLR_FD) = 0 [pid 5178] close(4) = 0 [pid 5178] creat("./bus", 000) = 4 [pid 5178] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5178] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5178] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5184] <... ioctl resumed>) = 0 [pid 5178] <... mmap resumed>) = 0x20000000 [pid 5184] close(3) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5178] ioctl(4, FS_IOC_GETVERSION [pid 5184] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5178] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5178] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5178] exit_group(0) = ? [ 90.704972][ T5184] loop1: detected capacity change from 0 to 8192 [pid 5178] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5087] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] <... umount2 resumed>) = 0 [pid 5086] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./7/file0") = 0 [pid 5086] getdents64(3, [pid 5087] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] rmdir("./7" [pid 5087] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./7/binderfs") = 0 [pid 5086] <... rmdir resumed>) = 0 [pid 5086] mkdir("./8", 0777 [pid 5087] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... mkdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5188 [ 90.748757][ T5184] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.764233][ T5180] REISERFS (device loop4): Using r5 hash to sort names [ 90.785055][ T5184] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304./strace-static-x86_64: Process 5188 attached [pid 5188] chdir("./8" [pid 5179] <... mount resumed>) = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [pid 5179] creat("./bus", 000) = 4 [pid 5179] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5188] <... chdir resumed>) = 0 [ 90.799590][ T5179] REISERFS (device loop0): Using r5 hash to sort names [ 90.803581][ T5180] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 90.807296][ T5184] REISERFS (device loop1): using ordered data mode [ 90.823452][ T5179] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.836716][ T5184] reiserfs: using flush barriers [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5179] <... write resumed>) = 32 [pid 5179] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5179] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5179] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5179] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5179] exit_group(0) = ? [pid 5179] +++ exited with 0 +++ [pid 5180] <... mount resumed>) = 0 [pid 5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5180] chdir("./file0") = 0 [pid 5180] ioctl(4, LOOP_CLR_FD) = 0 [pid 5180] close(4) = 0 [pid 5180] creat("./bus", 000) = 4 [pid 5180] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5180] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5188] <... prctl resumed>) = 0 [pid 5188] setpgid(0, 0 [pid 5180] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5180] ioctl(4, FS_IOC_GETVERSION [pid 5188] <... setpgid resumed>) = 0 [pid 5180] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] write(-1, 0x20000080, 296 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] <... openat resumed>) = 3 [pid 5180] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5084] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5188] write(3, "1000", 4 [pid 5084] <... openat resumed>) = 3 [pid 5180] exit_group(0 [pid 5188] <... write resumed>) = 4 [pid 5084] fstat(3, [pid 5188] close(3 [pid 5180] <... exit_group resumed>) = ? [pid 5188] <... close resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5084] getdents64(3, [pid 5088] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] <... symlink resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] memfd_create("syzkaller", 0 [pid 5088] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] <... memfd_create resumed>) = 3 [pid 5088] fstat(3, [pid 5084] lstat("./6/binderfs", [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] getdents64(3, [pid 5084] unlink("./6/binderfs" [pid 5088] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] <... unlink resumed>) = 0 [pid 5088] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] <... mmap resumed>) = 0x7f6d35efb000 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./7/binderfs") = 0 [pid 5088] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... write resumed>) = 4194304 [pid 5186] munmap(0x7f6d35efb000, 4194304) = 0 [ 90.843772][ T5184] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5186] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5186] close(3) = 0 [pid 5186] mkdir("./file0", 0777) = 0 [pid 5186] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... umount2 resumed>) = 0 [pid 5084] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] fstat(4, [pid 5088] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(4, [pid 5088] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] <... openat resumed>) = 4 [pid 5084] close(4 [pid 5088] fstat(4, [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./6/file0" [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, [pid 5084] <... rmdir resumed>) = 0 [pid 5088] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, [pid 5084] getdents64(3, [pid 5088] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./7/file0" [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./6" [pid 5088] <... rmdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] mkdir("./7", 0777 [pid 5088] close(3) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5088] rmdir("./7" [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5088] <... rmdir resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5088] mkdir("./8", 0777 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3 [pid 5088] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 90.893633][ T5184] REISERFS (device loop1): checking transaction log (loop1) [ 90.901601][ T5186] loop5: detected capacity change from 0 to 8192 [ 90.910382][ T5186] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5088] ioctl(3, LOOP_CLR_FD) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5190 ./strace-static-x86_64: Process 5190 attached [pid 5190] chdir("./7") = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5191 [pid 5190] <... openat resumed>) = 3 [pid 5190] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5191 attached [pid 5190] close(3) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs" [pid 5191] chdir("./8" [pid 5190] <... symlink resumed>) = 0 [pid 5191] <... chdir resumed>) = 0 [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 90.957368][ T5186] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 90.995580][ T5186] REISERFS (device loop5): using ordered data mode [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] <... umount2 resumed>) = 0 [pid 5191] <... prctl resumed>) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... mmap resumed>) = 0x7f6d35efb000 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 91.010262][ T5186] reiserfs: using flush barriers [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./7/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./7") = 0 [pid 5087] mkdir("./8", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5192 ./strace-static-x86_64: Process 5192 attached [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5192] chdir("./8") = 0 [ 91.052621][ T5186] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5192] setpgid(0, 0) = 0 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5192] write(3, "1000", 4 [pid 5188] <... write resumed>) = 4194304 [pid 5192] <... write resumed>) = 4 [pid 5188] munmap(0x7f6d35efb000, 4194304 [pid 5192] close(3) = 0 [pid 5192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5188] <... munmap resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5188] close(3) = 0 [pid 5188] mkdir("./file0", 0777) = 0 [ 91.123295][ T5186] REISERFS (device loop5): checking transaction log (loop5) [ 91.140366][ T5184] REISERFS (device loop1): Using r5 hash to sort names [ 91.152829][ T5188] loop2: detected capacity change from 0 to 8192 [pid 5188] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5191] <... write resumed>) = 4194304 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5191] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 91.189150][ T5188] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.203692][ T5184] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 91.224727][ T5191] loop4: detected capacity change from 0 to 8192 [pid 5191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file0", 0777 [pid 5184] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5191] <... mkdir resumed>) = 0 [pid 5191] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5184] <... openat resumed>) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4 [pid 5190] <... write resumed>) = 4194304 [pid 5190] munmap(0x7f6d35efb000, 4194304 [pid 5184] <... close resumed>) = 0 [ 91.226086][ T5188] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5184] creat("./bus", 000) = 4 [pid 5184] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5184] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5184] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5184] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5184] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5184] exit_group(0 [pid 5190] <... munmap resumed>) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 91.285806][ T5191] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.287471][ T5188] REISERFS (device loop2): using ordered data mode [ 91.305748][ T5188] reiserfs: using flush barriers [ 91.307685][ T5190] loop0: detected capacity change from 0 to 8192 [ 91.318725][ T5188] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5192] <... write resumed>) = 4194304 [pid 5184] <... exit_group resumed>) = ? [pid 5184] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5085] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5192] munmap(0x7f6d35efb000, 4194304 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./7/binderfs") = 0 [pid 5085] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... ioctl resumed>) = 0 [ 91.334826][ T5191] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 91.334909][ T5191] REISERFS (device loop4): using ordered data mode [ 91.354581][ T5191] reiserfs: using flush barriers [ 91.360001][ T5186] REISERFS (device loop5): Using r5 hash to sort names [ 91.368992][ T5191] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5192] <... munmap resumed>) = 0 [pid 5190] close(3 [pid 5186] <... mount resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5190] mkdir("./file0", 0777) = 0 [pid 5190] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5192] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5192] <... openat resumed>) = 4 [pid 5186] <... openat resumed>) = 3 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5186] chdir("./file0") = 0 [pid 5186] ioctl(4, LOOP_CLR_FD [pid 5192] <... ioctl resumed>) = 0 [pid 5186] <... ioctl resumed>) = 0 [pid 5192] close(3 [pid 5186] close(4 [pid 5192] <... close resumed>) = 0 [pid 5186] <... close resumed>) = 0 [ 91.369342][ T5186] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 91.394799][ T5188] REISERFS (device loop2): checking transaction log (loop2) [ 91.410231][ T5192] loop3: detected capacity change from 0 to 8192 [ 91.425205][ T5191] REISERFS (device loop4): checking transaction log (loop4) [pid 5192] mkdir("./file0", 0777 [pid 5186] creat("./bus", 000 [pid 5192] <... mkdir resumed>) = 0 [pid 5186] <... creat resumed>) = 4 [pid 5192] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5186] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5186] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5186] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5186] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [ 91.458574][ T5190] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.482966][ T5190] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 91.497119][ T5188] REISERFS (device loop2): Using r5 hash to sort names [pid 5186] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5186] exit_group(0) = ? [pid 5186] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5089] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5089] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./7/binderfs") = 0 [pid 5089] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] <... mount resumed>) = 0 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file0") = 0 [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [pid 5188] close(4) = 0 [pid 5188] creat("./bus", 000) = 4 [ 91.497520][ T5190] REISERFS (device loop0): using ordered data mode [ 91.513729][ T5192] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.535227][ T5190] reiserfs: using flush barriers [ 91.541427][ T5188] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5188] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5188] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5188] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5188] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5188] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5188] exit_group(0) = ? [pid 5188] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5188, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5086] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./8/binderfs") = 0 [pid 5086] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = 0 [ 91.558562][ T5192] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 91.579670][ T5190] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.596428][ T1138] cfg80211: failed to load regulatory.db [pid 5085] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./7/file0") = 0 [pid 5085] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./7") = 0 [pid 5085] mkdir("./8", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5197 ./strace-static-x86_64: Process 5197 attached [ 91.603269][ T5190] REISERFS (device loop0): checking transaction log (loop0) [ 91.611180][ T5192] REISERFS (device loop3): using ordered data mode [ 91.618313][ T5192] reiserfs: using flush barriers [ 91.625458][ T5192] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5197] chdir("./8") = 0 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5197] memfd_create("syzkaller", 0) = 3 [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./7/file0") = 0 [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3) = 0 [pid 5089] rmdir("./7") = 0 [pid 5089] mkdir("./8", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5089] close(3) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5198 ./strace-static-x86_64: Process 5198 attached [pid 5198] chdir("./8") = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5198] write(3, "1000", 4) = 4 [pid 5198] close(3) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5198] memfd_create("syzkaller", 0) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 91.738866][ T5192] REISERFS (device loop3): checking transaction log (loop3) [ 91.751175][ T5190] REISERFS (device loop0): Using r5 hash to sort names [ 91.759037][ T5191] REISERFS (device loop4): Using r5 hash to sort names [ 91.773802][ T5190] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5190] <... mount resumed>) = 0 [pid 5190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5190] chdir("./file0") = 0 [pid 5190] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] close(4) = 0 [pid 5190] creat("./bus", 000) = 4 [pid 5190] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5190] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5190] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5190] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5190] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5190] exit_group(0) = ? [pid 5190] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... mount resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] lstat("./7/binderfs", [pid 5191] <... openat resumed>) = 3 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [ 91.788494][ T5191] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5191] chdir("./file0" [pid 5084] unlink("./7/binderfs" [pid 5191] <... chdir resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] ioctl(4, LOOP_CLR_FD [pid 5086] <... umount2 resumed>) = 0 [pid 5086] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5191] <... ioctl resumed>) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./8/file0" [pid 5191] close(4 [pid 5086] <... rmdir resumed>) = 0 [pid 5191] <... close resumed>) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3 [pid 5191] creat("./bus", 000 [pid 5086] <... close resumed>) = 0 [pid 5086] rmdir("./8" [pid 5191] <... creat resumed>) = 4 [pid 5086] <... rmdir resumed>) = 0 [pid 5086] mkdir("./9", 0777 [pid 5191] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5086] <... mkdir resumed>) = 0 [pid 5191] <... write resumed>) = 32 [pid 5191] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD [pid 5191] <... open resumed>) = 5 [pid 5086] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5086] close(3 [pid 5191] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5086] <... close resumed>) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5199 [pid 5191] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 5199 attached [pid 5199] chdir("./9") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] ioctl(4, FS_IOC_GETVERSION [pid 5199] write(3, "1000", 4) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5199] memfd_create("syzkaller", 0 [pid 5191] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5191] exit_group(0) = ? [pid 5199] <... memfd_create resumed>) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5191] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5088] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./8/binderfs") = 0 [pid 5088] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] <... write resumed>) = 4194304 [pid 5198] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5198] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5197] <... write resumed>) = 4194304 [pid 5198] <... ioctl resumed>) = 0 [pid 5198] close(3) = 0 [pid 5198] mkdir("./file0", 0777) = 0 [pid 5197] munmap(0x7f6d35efb000, 4194304 [pid 5198] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5197] <... munmap resumed>) = 0 [pid 5197] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 91.975861][ T5192] REISERFS (device loop3): Using r5 hash to sort names [ 91.990052][ T5198] loop5: detected capacity change from 0 to 8192 [ 92.005299][ T5192] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5197] ioctl(4, LOOP_SET_FD, 3 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5084] <... umount2 resumed>) = 0 [pid 5197] <... ioctl resumed>) = 0 [pid 5192] <... mount resumed>) = 0 [pid 5088] <... umount2 resumed>) = 0 [pid 5084] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./7/file0", [pid 5197] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5197] mkdir("./file0", 0777 [pid 5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5088] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... mkdir resumed>) = 0 [pid 5084] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5197] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5084] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./8/file0" [pid 5192] <... openat resumed>) = 3 [pid 5192] chdir("./file0") = 0 [ 92.026132][ T5197] loop1: detected capacity change from 0 to 8192 [ 92.036923][ T5198] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.057376][ T5198] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [pid 5192] ioctl(4, LOOP_CLR_FD [pid 5088] <... rmdir resumed>) = 0 [pid 5192] <... ioctl resumed>) = 0 [pid 5192] close(4 [pid 5084] getdents64(4, [pid 5192] <... close resumed>) = 0 [pid 5192] creat("./bus", 000) = 4 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3) = 0 [pid 5088] rmdir("./8") = 0 [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5192] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5088] mkdir("./9", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3 [pid 5084] close(4 [pid 5192] <... write resumed>) = 32 [pid 5192] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] <... close resumed>) = 0 [pid 5192] <... open resumed>) = 5 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5192] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0./strace-static-x86_64: Process 5202 attached ) = 0x20000000 [pid 5084] <... close resumed>) = 0 [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5202 [pid 5192] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5192] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5192] exit_group(0) = ? [pid 5192] +++ exited with 0 +++ [pid 5202] chdir("./9" [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5192, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5084] rmdir("./7/file0" [pid 5202] <... chdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] getdents64(3, [pid 5202] <... prctl resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5202] setpgid(0, 0 [pid 5084] close(3 [pid 5202] <... setpgid resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./7" [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... rmdir resumed>) = 0 [ 92.057776][ T5197] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.081421][ T5197] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 92.091053][ T5197] REISERFS (device loop1): using ordered data mode [ 92.098301][ T5197] reiserfs: using flush barriers [ 92.105541][ T5197] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5202] <... openat resumed>) = 3 [pid 5084] mkdir("./8", 0777 [pid 5087] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5087] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5087] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5087] fstat(3, [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] close(3 [pid 5202] write(3, "1000", 4 [pid 5087] getdents64(3, [pid 5084] <... close resumed>) = 0 [pid 5087] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5203 [pid 5087] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./8/binderfs") = 0 [pid 5087] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5203 attached [pid 5203] chdir("./8") = 0 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5203] close(3) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5203] memfd_create("syzkaller", 0) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5202] <... write resumed>) = 4 [pid 5202] close(3) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5199] <... write resumed>) = 4194304 [pid 5199] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 92.131181][ T5198] REISERFS (device loop5): using ordered data mode [ 92.138113][ T5198] reiserfs: using flush barriers [ 92.144544][ T5198] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5199] close(3) = 0 [pid 5199] mkdir("./file0", 0777) = 0 [pid 5199] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [ 92.182822][ T5199] loop2: detected capacity change from 0 to 8192 [ 92.187421][ T5197] REISERFS (device loop1): checking transaction log (loop1) [ 92.203078][ T5199] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5203] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 92.225957][ T5199] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 92.232391][ T5198] REISERFS (device loop5): checking transaction log (loop5) [ 92.244443][ T5199] REISERFS (device loop2): using ordered data mode [ 92.258238][ T5199] reiserfs: using flush barriers [ 92.264191][ T5199] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.301485][ T5203] loop0: detected capacity change from 0 to 8192 [ 92.313767][ T5199] REISERFS (device loop2): checking transaction log (loop2) [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3) = 0 [pid 5203] mkdir("./file0", 0777) = 0 [pid 5203] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5087] <... umount2 resumed>) = 0 [pid 5202] <... write resumed>) = 4194304 [pid 5087] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 92.376685][ T5198] REISERFS (device loop5): Using r5 hash to sort names [ 92.376722][ T5199] REISERFS (device loop2): Using r5 hash to sort names [ 92.386518][ T5203] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5087] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, [pid 5202] munmap(0x7f6d35efb000, 4194304 [pid 5199] <... mount resumed>) = 0 [pid 5198] <... mount resumed>) = 0 [pid 5087] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5202] <... munmap resumed>) = 0 [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5202] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5199] <... openat resumed>) = 3 [pid 5198] <... openat resumed>) = 3 [pid 5202] <... openat resumed>) = 4 [pid 5199] chdir("./file0" [pid 5198] chdir("./file0" [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5199] <... chdir resumed>) = 0 [pid 5198] <... chdir resumed>) = 0 [pid 5202] <... ioctl resumed>) = 0 [pid 5199] ioctl(4, LOOP_CLR_FD [pid 5198] ioctl(4, LOOP_CLR_FD [pid 5197] <... mount resumed>) = 0 [pid 5087] getdents64(4, [pid 5202] close(3 [pid 5199] <... ioctl resumed>) = 0 [pid 5198] <... ioctl resumed>) = 0 [pid 5202] <... close resumed>) = 0 [pid 5199] close(4 [pid 5198] close(4 [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5202] mkdir("./file0", 0777 [pid 5199] <... close resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5197] <... openat resumed>) = 3 [pid 5087] close(4 [pid 5202] <... mkdir resumed>) = 0 [pid 5199] creat("./bus", 000 [pid 5198] creat("./bus", 000 [pid 5197] chdir("./file0" [pid 5087] <... close resumed>) = 0 [pid 5202] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5199] <... creat resumed>) = 4 [pid 5198] <... creat resumed>) = 4 [pid 5197] <... chdir resumed>) = 0 [pid 5087] rmdir("./8/file0" [pid 5199] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5198] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5197] ioctl(4, LOOP_CLR_FD [pid 5087] <... rmdir resumed>) = 0 [pid 5199] <... write resumed>) = 32 [pid 5198] <... write resumed>) = 32 [pid 5197] <... ioctl resumed>) = 0 [pid 5087] getdents64(3, [pid 5199] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5198] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5197] close(4 [pid 5087] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5199] <... open resumed>) = 5 [pid 5198] <... open resumed>) = 5 [pid 5197] <... close resumed>) = 0 [pid 5087] close(3 [pid 5199] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5198] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5197] creat("./bus", 000 [pid 5087] <... close resumed>) = 0 [pid 5199] <... mmap resumed>) = 0x20000000 [pid 5198] <... mmap resumed>) = 0x20000000 [pid 5197] <... creat resumed>) = 4 [ 92.418279][ T5199] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 92.427772][ T5198] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 92.430377][ T5197] REISERFS (device loop1): Using r5 hash to sort names [ 92.437540][ T5203] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 92.444025][ T5197] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 92.459156][ T5202] loop4: detected capacity change from 0 to 8192 [ 92.462905][ T5203] REISERFS (device loop0): using ordered data mode [pid 5087] rmdir("./8" [pid 5199] ioctl(4, FS_IOC_GETVERSION [pid 5198] ioctl(4, FS_IOC_GETVERSION [pid 5197] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5087] <... rmdir resumed>) = 0 [pid 5199] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5198] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5087] mkdir("./9", 0777 [pid 5199] write(-1, 0x20000080, 296 [pid 5198] write(-1, 0x20000080, 296 [pid 5087] <... mkdir resumed>) = 0 [pid 5199] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5199] exit_group(0 [pid 5198] exit_group(0 [pid 5087] <... openat resumed>) = 3 [pid 5199] <... exit_group resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5087] ioctl(3, LOOP_CLR_FD [pid 5199] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5087] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5087] close(3 [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5089] restart_syscall(<... resuming interrupted clone ...> [pid 5087] <... close resumed>) = 0 [pid 5197] <... write resumed>) = 32 [pid 5089] <... restart_syscall resumed>) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5197] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5087] <... clone resumed>, child_tidptr=0x5555566815d0) = 5207 [pid 5197] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5089] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... mmap resumed>) = 0x20000000 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] ioctl(4, FS_IOC_GETVERSION [pid 5089] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5197] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5089] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5197] write(-1, 0x20000080, 296 [pid 5089] fstat(3, [pid 5086] fstat(3, [pid 5197] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5197] exit_group(0 [pid 5089] getdents64(3, [pid 5086] getdents64(3, ./strace-static-x86_64: Process 5207 attached [pid 5197] <... exit_group resumed>) = ? [pid 5089] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [ 92.490012][ T5202] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.501272][ T5203] reiserfs: using flush barriers [ 92.503507][ T5202] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 92.518173][ T5202] REISERFS (device loop4): using ordered data mode [pid 5086] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5207] chdir("./9" [pid 5197] +++ exited with 0 +++ [pid 5089] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./8/binderfs", [pid 5086] lstat("./9/binderfs", [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=13 /* 0.13 s */} --- [pid 5089] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5089] unlink("./8/binderfs" [pid 5086] unlink("./9/binderfs" [pid 5085] <... restart_syscall resumed>) = 0 [pid 5207] <... chdir resumed>) = 0 [pid 5089] <... unlink resumed>) = 0 [pid 5086] <... unlink resumed>) = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... prctl resumed>) = 0 [pid 5085] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./8/binderfs") = 0 [pid 5085] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5207] memfd_create("syzkaller", 0) = 3 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5086] <... umount2 resumed>) = 0 [pid 5086] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./9/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./9") = 0 [pid 5086] mkdir("./10", 0777) = 0 [ 92.520705][ T5203] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.525092][ T5202] reiserfs: using flush barriers [ 92.548015][ T5202] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.565223][ T5202] REISERFS (device loop4): checking transaction log (loop4) [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5208 ./strace-static-x86_64: Process 5208 attached [pid 5208] chdir("./10") = 0 [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5208] close(3) = 0 [pid 5208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5208] memfd_create("syzkaller", 0) = 3 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 92.643731][ T5203] REISERFS (device loop0): checking transaction log (loop0) [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] lstat("./8/file0", [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./8/file0", [pid 5085] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] <... write resumed>) = 4194304 [pid 5202] <... mount resumed>) = 0 [pid 5089] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] munmap(0x7f6d35efb000, 4194304 [pid 5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] <... openat resumed>) = 4 [pid 5085] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] <... munmap resumed>) = 0 [pid 5202] <... openat resumed>) = 3 [pid 5089] fstat(4, [pid 5085] <... openat resumed>) = 4 [pid 5207] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5202] chdir("./file0" [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] fstat(4, [pid 5207] <... openat resumed>) = 4 [pid 5202] <... chdir resumed>) = 0 [pid 5089] getdents64(4, [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5207] ioctl(4, LOOP_SET_FD, 3 [pid 5202] ioctl(4, LOOP_CLR_FD [pid 5089] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5207] <... ioctl resumed>) = 0 [pid 5202] <... ioctl resumed>) = 0 [pid 5089] getdents64(4, [pid 5085] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5202] close(4 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] getdents64(4, [pid 5208] <... write resumed>) = 4194304 [pid 5207] close(3 [pid 5202] <... close resumed>) = 0 [pid 5089] close(4 [pid 5085] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5207] <... close resumed>) = 0 [pid 5202] creat("./bus", 000 [pid 5089] <... close resumed>) = 0 [pid 5208] munmap(0x7f6d35efb000, 4194304 [pid 5207] mkdir("./file0", 0777 [pid 5085] close(4 [pid 5202] <... creat resumed>) = 4 [pid 5089] rmdir("./8/file0" [pid 5207] <... mkdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5089] <... rmdir resumed>) = 0 [pid 5207] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5202] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5089] getdents64(3, [pid 5085] rmdir("./8/file0") = 0 [pid 5089] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3 [pid 5085] getdents64(3, [pid 5202] <... write resumed>) = 32 [pid 5089] <... close resumed>) = 0 [pid 5202] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5085] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5202] <... open resumed>) = 5 [pid 5089] rmdir("./8" [pid 5085] close(3 [pid 5202] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5089] <... rmdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5202] <... mmap resumed>) = 0x20000000 [pid 5085] rmdir("./8" [pid 5202] ioctl(4, FS_IOC_GETVERSION [pid 5089] mkdir("./9", 0777 [pid 5085] <... rmdir resumed>) = 0 [pid 5089] <... mkdir resumed>) = 0 [ 92.791710][ T5202] REISERFS (device loop4): Using r5 hash to sort names [ 92.811250][ T5202] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 92.833705][ T5207] loop3: detected capacity change from 0 to 8192 [pid 5202] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5085] mkdir("./9", 0777 [pid 5208] <... munmap resumed>) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5202] write(-1, 0x20000080, 296 [pid 5089] <... openat resumed>) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5208] <... ioctl resumed>) = 0 [pid 5208] close(3) = 0 [pid 5208] mkdir("./file0", 0777) = 0 [pid 5208] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5202] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] ioctl(3, LOOP_CLR_FD [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5202] exit_group(0 [pid 5089] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] <... openat resumed>) = 3 [pid 5202] <... exit_group resumed>) = ? [pid 5089] close(3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5202] +++ exited with 0 +++ [pid 5089] <... close resumed>) = 0 [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] close(3) = 0 [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5211 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5212 ./strace-static-x86_64: Process 5212 attached [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5212] chdir("./9") = 0 [ 92.861518][ T5207] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.874142][ T5208] loop2: detected capacity change from 0 to 8192 [ 92.877508][ T5207] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 92.891966][ T5207] REISERFS (device loop3): using ordered data mode [ 92.898823][ T5207] reiserfs: using flush barriers [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5211 attached ) = 0 [pid 5088] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./9/binderfs") = 0 [pid 5088] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5212] setpgid(0, 0 [pid 5211] chdir("./9" [pid 5212] <... setpgid resumed>) = 0 [pid 5211] <... chdir resumed>) = 0 [ 92.910420][ T5207] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.927754][ T5208] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.928686][ T5207] REISERFS (device loop3): checking transaction log (loop3) [ 92.942001][ T5208] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5212] <... openat resumed>) = 3 [pid 5211] <... prctl resumed>) = 0 [pid 5212] write(3, "1000", 4 [pid 5211] setpgid(0, 0 [pid 5212] <... write resumed>) = 4 [pid 5211] <... setpgid resumed>) = 0 [pid 5212] close(3 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5212] <... close resumed>) = 0 [pid 5211] <... openat resumed>) = 3 [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5211] write(3, "1000", 4 [pid 5203] <... mount resumed>) = 0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4 [pid 5212] <... symlink resumed>) = 0 [pid 5211] <... write resumed>) = 4 [pid 5212] memfd_create("syzkaller", 0 [pid 5211] close(3) = 0 [pid 5211] symlink("/dev/binderfs", "./binderfs" [pid 5212] <... memfd_create resumed>) = 3 [pid 5211] <... symlink resumed>) = 0 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5203] <... close resumed>) = 0 [pid 5203] creat("./bus", 000) = 4 [pid 5212] <... mmap resumed>) = 0x7f6d35efb000 [pid 5203] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5211] memfd_create("syzkaller", 0) = 3 [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5203] <... write resumed>) = 32 [pid 5203] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5203] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5203] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5203] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5203] exit_group(0) = ? [pid 5203] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./8/binderfs") = 0 [ 92.957860][ T5203] REISERFS (device loop0): Using r5 hash to sort names [ 92.965894][ T5203] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 92.976805][ T5208] REISERFS (device loop2): using ordered data mode [ 93.000257][ T5208] reiserfs: using flush barriers [pid 5084] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [ 93.048485][ T5208] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5088] <... umount2 resumed>) = 0 [pid 5088] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./9/file0") = 0 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3) = 0 [pid 5088] rmdir("./9") = 0 [pid 5088] mkdir("./10", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5213 [pid 5084] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5213 attached [pid 5213] chdir("./10") = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] setpgid(0, 0) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] memfd_create("syzkaller", 0) = 3 [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5084] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5212] <... write resumed>) = 4194304 [pid 5212] munmap(0x7f6d35efb000, 4194304 [pid 5084] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./8/file0") = 0 [pid 5084] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5212] <... munmap resumed>) = 0 [pid 5211] <... write resumed>) = 4194304 [pid 5207] <... mount resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./8") = 0 [pid 5084] mkdir("./9", 0777 [pid 5212] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5211] munmap(0x7f6d35efb000, 4194304 [pid 5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 93.130741][ T5207] REISERFS (device loop3): Using r5 hash to sort names [ 93.139616][ T5208] REISERFS (device loop2): checking transaction log (loop2) [ 93.161442][ T5207] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [pid 5084] close(3 [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5212] <... openat resumed>) = 4 [pid 5211] <... munmap resumed>) = 0 [pid 5207] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5212] ioctl(4, LOOP_SET_FD, 3 [pid 5211] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5207] chdir("./file0" [pid 5084] <... clone resumed>, child_tidptr=0x5555566815d0) = 5214 [pid 5211] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5214 attached [pid 5214] chdir("./9") = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5214] memfd_create("syzkaller", 0) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5212] <... ioctl resumed>) = 0 [pid 5207] <... chdir resumed>) = 0 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5211] ioctl(4, LOOP_SET_FD, 3 [pid 5207] <... ioctl resumed>) = 0 [pid 5207] close(4) = 0 [pid 5207] creat("./bus", 000) = 4 [pid 5207] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5207] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5207] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5207] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5207] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5207] exit_group(0) = ? [pid 5207] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5087] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] <... ioctl resumed>) = 0 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5212] close(3) = 0 [pid 5212] mkdir("./file0", 0777 [pid 5087] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5211] close(3 [pid 5087] <... openat resumed>) = 3 [pid 5211] <... close resumed>) = 0 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5211] mkdir("./file0", 0777 [pid 5087] getdents64(3, [pid 5212] <... mkdir resumed>) = 0 [pid 5211] <... mkdir resumed>) = 0 [pid 5211] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5087] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5212] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5087] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./9/binderfs") = 0 [ 93.230886][ T5212] loop1: detected capacity change from 0 to 8192 [ 93.238727][ T5211] loop5: detected capacity change from 0 to 8192 [pid 5087] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 93.281856][ T5212] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.310096][ T5211] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5087] <... umount2 resumed>) = 0 [pid 5087] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [ 93.346586][ T5212] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 93.369137][ T5211] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 93.379175][ T5211] REISERFS (device loop5): using ordered data mode [ 93.387660][ T5211] reiserfs: using flush barriers [pid 5087] close(4) = 0 [pid 5214] <... write resumed>) = 4194304 [pid 5087] rmdir("./9/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5214] munmap(0x7f6d35efb000, 4194304 [pid 5087] close(3 [pid 5214] <... munmap resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5087] rmdir("./9") = 0 [pid 5087] mkdir("./10", 0777 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5087] <... mkdir resumed>) = 0 [pid 5214] <... openat resumed>) = 4 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... openat resumed>) = 3 [pid 5214] <... ioctl resumed>) = 0 [pid 5087] ioctl(3, LOOP_CLR_FD [pid 5214] close(3 [pid 5087] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5214] <... close resumed>) = 0 [pid 5087] close(3 [pid 5214] mkdir("./file0", 0777 [pid 5087] <... close resumed>) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5217 ./strace-static-x86_64: Process 5217 attached [pid 5214] <... mkdir resumed>) = 0 [pid 5217] chdir("./10" [pid 5214] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5217] <... chdir resumed>) = 0 [ 93.398691][ T5211] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.416504][ T5211] REISERFS (device loop5): checking transaction log (loop5) [ 93.416509][ T5214] loop0: detected capacity change from 0 to 8192 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] <... write resumed>) = 4194304 [pid 5217] setpgid(0, 0 [pid 5213] munmap(0x7f6d35efb000, 4194304 [pid 5217] <... setpgid resumed>) = 0 [pid 5213] <... munmap resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5213] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] <... openat resumed>) = 3 [pid 5213] <... openat resumed>) = 4 [pid 5217] write(3, "1000", 4 [pid 5213] ioctl(4, LOOP_SET_FD, 3 [pid 5217] <... write resumed>) = 4 [pid 5217] close(3) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5213] <... ioctl resumed>) = 0 [pid 5213] close(3) = 0 [ 93.450054][ T5212] REISERFS (device loop1): using ordered data mode [ 93.459351][ T5214] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.466214][ T5213] loop4: detected capacity change from 0 to 8192 [ 93.474134][ T5212] reiserfs: using flush barriers [ 93.484763][ T5214] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [pid 5213] mkdir("./file0", 0777) = 0 [pid 5213] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5208] <... mount resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file0") = 0 [pid 5208] ioctl(4, LOOP_CLR_FD) = 0 [pid 5208] close(4) = 0 [pid 5208] creat("./bus", 000) = 4 [ 93.498145][ T5212] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.511915][ T5214] REISERFS (device loop0): using ordered data mode [ 93.515283][ T5208] REISERFS (device loop2): Using r5 hash to sort names [ 93.525822][ T5214] reiserfs: using flush barriers [ 93.528231][ T5208] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5208] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5208] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5208] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5208] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5208] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5208] exit_group(0) = ? [pid 5208] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5086] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./10/binderfs") = 0 [ 93.546723][ T5212] REISERFS (device loop1): checking transaction log (loop1) [pid 5086] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 93.594305][ T5214] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.614665][ T5213] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.617154][ T5214] REISERFS (device loop0): checking transaction log (loop0) [ 93.630747][ T5211] REISERFS (device loop5): Using r5 hash to sort names [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5211] <... mount resumed>) = 0 [pid 5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5211] chdir("./file0") = 0 [pid 5211] ioctl(4, LOOP_CLR_FD) = 0 [pid 5211] close(4) = 0 [ 93.658760][ T5213] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 93.661250][ T5212] REISERFS (device loop1): Using r5 hash to sort names [ 93.676014][ T5211] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 93.691450][ T5213] REISERFS (device loop4): using ordered data mode [pid 5211] creat("./bus", 000) = 4 [pid 5211] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5211] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5211] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5211] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5211] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5211] exit_group(0) = ? [ 93.709645][ T5213] reiserfs: using flush barriers [pid 5211] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5089] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] <... umount2 resumed>) = 0 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] <... openat resumed>) = 3 [pid 5086] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] fstat(3, [pid 5086] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] getdents64(3, [pid 5086] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5089] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] <... openat resumed>) = 4 [pid 5089] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] getdents64(4, [pid 5089] lstat("./9/binderfs", [pid 5086] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./9/binderfs" [pid 5086] getdents64(4, [pid 5089] <... unlink resumed>) = 0 [pid 5086] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] close(4) = 0 [pid 5086] rmdir("./10/file0") = 0 [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./10") = 0 [pid 5086] mkdir("./11", 0777) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3 [pid 5212] <... mount resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5220 [pid 5212] <... openat resumed>) = 3 [pid 5212] chdir("./file0") = 0 [pid 5212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5212] close(4) = 0 [pid 5212] creat("./bus", 000) = 4 [pid 5212] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5212] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5217] <... write resumed>) = 4194304 [pid 5212] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5212] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [ 93.735378][ T5213] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.738747][ T5212] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 93.765548][ T5213] REISERFS (device loop4): checking transaction log (loop4) [pid 5212] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5212] exit_group(0) = ? ./strace-static-x86_64: Process 5220 attached [pid 5220] chdir("./11" [pid 5217] munmap(0x7f6d35efb000, 4194304 [pid 5212] +++ exited with 0 +++ [pid 5217] <... munmap resumed>) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5220] <... chdir resumed>) = 0 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] setpgid(0, 0) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5220] <... openat resumed>) = 3 [pid 5085] <... openat resumed>) = 3 [pid 5220] write(3, "1000", 4 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] fstat(3, [pid 5220] <... write resumed>) = 4 [pid 5217] <... openat resumed>) = 4 [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] close(3 [pid 5217] ioctl(4, LOOP_SET_FD, 3 [pid 5085] getdents64(3, [pid 5220] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5089] <... umount2 resumed>) = 0 [pid 5085] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] memfd_create("syzkaller", 0 [pid 5089] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] <... memfd_create resumed>) = 3 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./9/binderfs", [pid 5089] lstat("./9/file0", [pid 5085] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] unlink("./9/binderfs" [pid 5217] <... ioctl resumed>) = 0 [pid 5089] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... unlink resumed>) = 0 [pid 5217] close(3 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] <... close resumed>) = 0 [pid 5089] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] mkdir("./file0", 0777 [pid 5214] <... mount resumed>) = 0 [pid 5089] <... openat resumed>) = 4 [pid 5217] <... mkdir resumed>) = 0 [pid 5214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] fstat(4, [pid 5217] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5089] getdents64(4, [pid 5214] chdir("./file0" [pid 5089] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5214] <... chdir resumed>) = 0 [pid 5089] getdents64(4, [pid 5214] ioctl(4, LOOP_CLR_FD [pid 5089] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5214] <... ioctl resumed>) = 0 [pid 5089] close(4 [pid 5214] close(4 [pid 5089] <... close resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5214] creat("./bus", 000 [pid 5089] rmdir("./9/file0") = 0 [pid 5214] <... creat resumed>) = 4 [pid 5089] getdents64(3, [pid 5214] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5089] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3 [pid 5214] <... write resumed>) = 32 [pid 5089] <... close resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5089] rmdir("./9" [pid 5214] <... open resumed>) = 5 [pid 5089] <... rmdir resumed>) = 0 [pid 5089] mkdir("./10", 0777 [pid 5214] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5089] <... mkdir resumed>) = 0 [pid 5214] <... mmap resumed>) = 0x20000000 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5214] ioctl(4, FS_IOC_GETVERSION [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5214] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5214] write(-1, 0x20000080, 296 [pid 5089] close(3 [pid 5214] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5089] <... close resumed>) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] exit_group(0) = ? [pid 5089] <... clone resumed>, child_tidptr=0x5555566815d0) = 5222 [ 93.835680][ T5217] loop3: detected capacity change from 0 to 8192 [ 93.844064][ T5214] REISERFS (device loop0): Using r5 hash to sort names [ 93.873921][ T5214] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5214] +++ exited with 0 +++ ./strace-static-x86_64: Process 5222 attached [pid 5222] chdir("./10") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5222] write(3, "1000", 4) = 4 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] memfd_create("syzkaller", 0) = 3 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5084] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./9/binderfs") = 0 [ 93.917764][ T5217] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5084] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5085] <... umount2 resumed>) = 0 [ 93.978628][ T5217] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [pid 5085] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./9/file0") = 0 [pid 5085] getdents64(3, [pid 5084] <... umount2 resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5084] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./9" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... rmdir resumed>) = 0 [pid 5084] lstat("./9/file0", [pid 5085] mkdir("./10", 0777) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] close(3 [pid 5084] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... openat resumed>) = 4 [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5223 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5223 attached [pid 5084] getdents64(4, [pid 5223] chdir("./10" [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5223] <... chdir resumed>) = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] close(4 [pid 5223] <... prctl resumed>) = 0 [ 94.028245][ T5217] REISERFS (device loop3): using ordered data mode [ 94.035379][ T5217] reiserfs: using flush barriers [ 94.041650][ T5217] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.063686][ T5217] REISERFS (device loop3): checking transaction log (loop3) [pid 5223] setpgid(0, 0 [pid 5084] <... close resumed>) = 0 [pid 5223] <... setpgid resumed>) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] rmdir("./9/file0" [pid 5223] <... openat resumed>) = 3 [pid 5223] write(3, "1000", 4 [pid 5084] <... rmdir resumed>) = 0 [pid 5223] <... write resumed>) = 4 [pid 5084] getdents64(3, [pid 5223] close(3) = 0 [pid 5084] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] close(3 [pid 5223] memfd_create("syzkaller", 0 [pid 5084] <... close resumed>) = 0 [pid 5223] <... memfd_create resumed>) = 3 [pid 5084] rmdir("./9" [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5223] <... mmap resumed>) = 0x7f6d35efb000 [pid 5084] mkdir("./10", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5224 ./strace-static-x86_64: Process 5224 attached [pid 5224] chdir("./10") = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4 [pid 5222] <... write resumed>) = 4194304 [pid 5224] <... write resumed>) = 4 [pid 5222] munmap(0x7f6d35efb000, 4194304 [ 94.115910][ T5213] REISERFS (device loop4): Using r5 hash to sort names [ 94.150669][ T5213] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5224] close(3 [pid 5222] <... munmap resumed>) = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5224] <... close resumed>) = 0 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] mkdir("./file0", 0777) = 0 [pid 5222] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5220] <... write resumed>) = 4194304 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5220] munmap(0x7f6d35efb000, 4194304 [pid 5213] <... mount resumed>) = 0 [pid 5213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5213] chdir("./file0") = 0 [pid 5220] <... munmap resumed>) = 0 [pid 5213] ioctl(4, LOOP_CLR_FD [pid 5220] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5213] <... ioctl resumed>) = 0 [pid 5220] <... openat resumed>) = 4 [pid 5213] close(4 [pid 5220] ioctl(4, LOOP_SET_FD, 3 [pid 5213] <... close resumed>) = 0 [pid 5213] creat("./bus", 000) = 4 [pid 5213] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5213] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5213] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [ 94.176306][ T5217] REISERFS (device loop3): Using r5 hash to sort names [ 94.179448][ T5222] loop5: detected capacity change from 0 to 8192 [ 94.187708][ T5217] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 94.215472][ T5220] loop2: detected capacity change from 0 to 8192 [pid 5217] <... mount resumed>) = 0 [pid 5213] ioctl(4, FS_IOC_GETVERSION [pid 5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5213] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5217] <... openat resumed>) = 3 [pid 5213] write(-1, 0x20000080, 296 [pid 5217] chdir("./file0" [pid 5213] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5217] <... chdir resumed>) = 0 [pid 5213] exit_group(0 [pid 5217] ioctl(4, LOOP_CLR_FD [pid 5213] <... exit_group resumed>) = ? [pid 5217] <... ioctl resumed>) = 0 [pid 5213] +++ exited with 0 +++ [pid 5217] close(4 [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5217] <... close resumed>) = 0 [pid 5088] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./10/binderfs") = 0 [pid 5088] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] <... ioctl resumed>) = 0 [pid 5220] close(3) = 0 [pid 5220] mkdir("./file0", 0777) = 0 [pid 5217] creat("./bus", 000 [pid 5220] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5217] <... creat resumed>) = 4 [pid 5217] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [ 94.231448][ T5222] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5223] <... write resumed>) = 4194304 [pid 5217] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5217] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5217] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5217] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5217] exit_group(0) = ? [pid 5217] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5087] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5223] munmap(0x7f6d35efb000, 4194304 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] <... munmap resumed>) = 0 [pid 5223] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5223] ioctl(4, LOOP_SET_FD, 3 [pid 5087] getdents64(3, [pid 5223] <... ioctl resumed>) = 0 [pid 5087] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5223] close(3) = 0 [pid 5223] mkdir("./file0", 0777 [pid 5087] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./10/binderfs") = 0 [pid 5223] <... mkdir resumed>) = 0 [pid 5087] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 94.274711][ T5222] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 94.289727][ T5220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.300482][ T5223] loop1: detected capacity change from 0 to 8192 [ 94.314472][ T5222] REISERFS (device loop5): using ordered data mode [ 94.321173][ T5222] reiserfs: using flush barriers [ 94.327319][ T5220] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 94.331247][ T5222] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.336879][ T5220] REISERFS (device loop2): using ordered data mode [ 94.359383][ T5220] reiserfs: using flush barriers [ 94.359577][ T5223] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.364700][ T5222] REISERFS (device loop5): checking transaction log (loop5) [pid 5223] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5087] <... umount2 resumed>) = 0 [pid 5087] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./10/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./10") = 0 [pid 5087] mkdir("./11", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5228 ./strace-static-x86_64: Process 5228 attached [pid 5228] chdir("./11") = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [ 94.411386][ T5220] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5228] close(3) = 0 [pid 5224] <... write resumed>) = 4194304 [pid 5228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5228] memfd_create("syzkaller", 0) = 3 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5224] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5224] <... ioctl resumed>) = 0 [ 94.483227][ T5223] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 94.514390][ T5220] REISERFS (device loop2): checking transaction log (loop2) [ 94.522071][ T5224] loop0: detected capacity change from 0 to 8192 [pid 5224] close(3) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [pid 5224] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5088] <... umount2 resumed>) = 0 [pid 5088] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./10/file0") = 0 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3) = 0 [pid 5088] rmdir("./10") = 0 [pid 5088] mkdir("./11", 0777) = 0 [pid 5228] <... write resumed>) = 4194304 [ 94.536329][ T5223] REISERFS (device loop1): using ordered data mode [ 94.557137][ T5224] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.578523][ T5223] reiserfs: using flush barriers [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5228] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5228] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5230 attached [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5230 [pid 5230] chdir("./11") = 0 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] setpgid(0, 0) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [ 94.591234][ T5224] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 94.601233][ T5224] REISERFS (device loop0): using ordered data mode [ 94.608396][ T5224] reiserfs: using flush barriers [ 94.610394][ T5228] loop3: detected capacity change from 0 to 8192 [pid 5230] close(3 [pid 5228] <... ioctl resumed>) = 0 [pid 5228] close(3) = 0 [pid 5228] mkdir("./file0", 0777) = 0 [pid 5228] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5230] <... close resumed>) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 94.626330][ T5224] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.629096][ T5228] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.642792][ T5223] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.672146][ T5223] REISERFS (device loop1): checking transaction log (loop1) [pid 5222] <... mount resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5222] chdir("./file0") = 0 [pid 5222] ioctl(4, LOOP_CLR_FD) = 0 [pid 5222] close(4) = 0 [ 94.704952][ T5222] REISERFS (device loop5): Using r5 hash to sort names [ 94.726165][ T5224] REISERFS (device loop0): checking transaction log (loop0) [ 94.728722][ T5222] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5222] creat("./bus", 000 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5222] <... creat resumed>) = 4 [pid 5222] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5222] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5222] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5222] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5222] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5222] exit_group(0) = ? [pid 5222] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5089] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [ 94.761134][ T5228] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 94.771724][ T5228] REISERFS (device loop3): using ordered data mode [ 94.778639][ T5228] reiserfs: using flush barriers [ 94.799737][ T5223] REISERFS (device loop1): Using r5 hash to sort names [pid 5089] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... mount resumed>) = 0 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./10/binderfs" [pid 5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] <... unlink resumed>) = 0 [pid 5089] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... openat resumed>) = 3 [pid 5223] chdir("./file0") = 0 [pid 5223] ioctl(4, LOOP_CLR_FD) = 0 [ 94.811198][ T5228] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.821166][ T5223] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 94.841793][ T5228] REISERFS (device loop3): checking transaction log (loop3) [ 94.851433][ T5220] REISERFS (device loop2): Using r5 hash to sort names [pid 5223] close(4 [pid 5230] <... write resumed>) = 4194304 [pid 5223] <... close resumed>) = 0 [pid 5230] munmap(0x7f6d35efb000, 4194304 [pid 5223] creat("./bus", 000 [pid 5220] <... mount resumed>) = 0 [pid 5230] <... munmap resumed>) = 0 [pid 5223] <... creat resumed>) = 4 [pid 5230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5223] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5230] <... openat resumed>) = 4 [pid 5230] ioctl(4, LOOP_SET_FD, 3 [pid 5223] <... write resumed>) = 32 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5223] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5220] <... openat resumed>) = 3 [pid 5230] <... ioctl resumed>) = 0 [pid 5223] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5220] chdir("./file0" [pid 5223] <... mmap resumed>) = 0x20000000 [pid 5220] <... chdir resumed>) = 0 [pid 5220] ioctl(4, LOOP_CLR_FD [pid 5223] ioctl(4, FS_IOC_GETVERSION [pid 5230] close(3 [pid 5220] <... ioctl resumed>) = 0 [pid 5230] <... close resumed>) = 0 [pid 5223] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5220] close(4 [pid 5230] mkdir("./file0", 0777 [pid 5223] write(-1, 0x20000080, 296 [pid 5220] <... close resumed>) = 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5223] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5220] creat("./bus", 000 [pid 5223] exit_group(0 [pid 5230] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5223] <... exit_group resumed>) = ? [pid 5220] <... creat resumed>) = 4 [pid 5223] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5220] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5085] <... restart_syscall resumed>) = 0 [pid 5085] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5220] <... write resumed>) = 32 [pid 5085] <... openat resumed>) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 94.863159][ T5220] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 94.888126][ T5230] loop4: detected capacity change from 0 to 8192 [pid 5085] lstat("./10/binderfs", [pid 5220] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5085] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./10/binderfs") = 0 [pid 5085] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] <... open resumed>) = 5 [pid 5220] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5220] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5220] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5220] exit_group(0) = ? [pid 5220] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} --- [pid 5086] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5086] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 94.947267][ T5230] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5086] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./11/binderfs") = 0 [ 94.990316][ T5230] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 95.017891][ T5230] REISERFS (device loop4): using ordered data mode [ 95.024926][ T5228] REISERFS (device loop3): Using r5 hash to sort names [pid 5086] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5228] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, [pid 5228] <... openat resumed>) = 3 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5228] chdir("./file0") = 0 [pid 5228] ioctl(4, LOOP_CLR_FD) = 0 [pid 5089] getdents64(4, [pid 5228] close(4 [pid 5089] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./10/file0" [pid 5228] <... close resumed>) = 0 [pid 5089] <... rmdir resumed>) = 0 [pid 5228] creat("./bus", 000 [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [ 95.044307][ T5228] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 95.066957][ T5230] reiserfs: using flush barriers [pid 5089] close(3 [pid 5228] <... creat resumed>) = 4 [pid 5089] <... close resumed>) = 0 [pid 5089] rmdir("./10") = 0 [pid 5089] mkdir("./11", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5089] close(3) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5233 ./strace-static-x86_64: Process 5233 attached [pid 5233] chdir("./11") = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5228] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5228] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5228] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5228] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5228] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5228] exit_group(0) = ? [pid 5228] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] unlink("./11/binderfs") = 0 [pid 5087] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [ 95.093213][ T5224] REISERFS (device loop0): Using r5 hash to sort names [ 95.100325][ T5230] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.118352][ T5224] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5085] close(4) = 0 [pid 5224] <... mount resumed>) = 0 [pid 5085] rmdir("./10/file0" [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5085] <... rmdir resumed>) = 0 [pid 5224] <... openat resumed>) = 3 [pid 5224] chdir("./file0") = 0 [pid 5224] ioctl(4, LOOP_CLR_FD [pid 5085] getdents64(3, [pid 5224] <... ioctl resumed>) = 0 [pid 5224] close(4) = 0 [pid 5224] creat("./bus", 000) = 4 [pid 5224] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5085] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5224] <... write resumed>) = 32 [pid 5085] <... close resumed>) = 0 [pid 5224] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5085] rmdir("./10" [pid 5224] <... open resumed>) = 5 [pid 5224] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5085] <... rmdir resumed>) = 0 [pid 5224] ioctl(4, FS_IOC_GETVERSION [pid 5085] mkdir("./11", 0777 [pid 5224] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5224] write(-1, 0x20000080, 296 [pid 5086] <... umount2 resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5224] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] exit_group(0) = ? [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5224] +++ exited with 0 +++ [pid 5085] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5085] close(3 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5085] <... close resumed>) = 0 [pid 5084] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5234 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./10/binderfs") = 0 [pid 5084] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5234 attached ) = 4 [pid 5086] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5086] close(4) = 0 [pid 5086] rmdir("./11/file0") = 0 [ 95.174983][ T5230] REISERFS (device loop4): checking transaction log (loop4) [pid 5234] chdir("./11" [pid 5086] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./11") = 0 [pid 5234] <... chdir resumed>) = 0 [pid 5086] mkdir("./12", 0777 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... mkdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5234] <... prctl resumed>) = 0 [pid 5234] setpgid(0, 0 [pid 5086] <... openat resumed>) = 3 [pid 5234] <... setpgid resumed>) = 0 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5234] <... openat resumed>) = 3 [pid 5086] <... clone resumed>, child_tidptr=0x5555566815d0) = 5235 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304./strace-static-x86_64: Process 5235 attached [pid 5235] chdir("./12") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5087] <... umount2 resumed>) = 0 [pid 5087] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5087] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./11/file0") = 0 [pid 5087] getdents64(3, [pid 5233] <... write resumed>) = 4194304 [pid 5087] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./11") = 0 [pid 5087] mkdir("./12", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5236 ./strace-static-x86_64: Process 5236 attached [pid 5236] chdir("./12") = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... umount2 resumed>) = 0 [pid 5236] <... openat resumed>) = 3 [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./10/file0", [pid 5236] memfd_create("syzkaller", 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5236] <... memfd_create resumed>) = 3 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... mmap resumed>) = 0x7f6d35efb000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5233] munmap(0x7f6d35efb000, 4194304 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, [pid 5233] <... munmap resumed>) = 0 [pid 5084] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5233] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5084] getdents64(4, [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5233] <... ioctl resumed>) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./10/file0") = 0 [pid 5084] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./10") = 0 [pid 5084] mkdir("./11", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5237 ./strace-static-x86_64: Process 5237 attached [pid 5237] chdir("./11") = 0 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5237] setpgid(0, 0) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] close(3 [pid 5237] write(3, "1000", 4 [pid 5233] <... close resumed>) = 0 [pid 5237] <... write resumed>) = 4 [pid 5233] mkdir("./file0", 0777 [pid 5237] close(3 [pid 5233] <... mkdir resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5233] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5237] memfd_create("syzkaller", 0) = 3 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 95.391572][ T5233] loop5: detected capacity change from 0 to 8192 [ 95.441564][ T5233] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.457205][ T5230] REISERFS (device loop4): Using r5 hash to sort names [ 95.471498][ T5230] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 95.481170][ T5233] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5230] <... mount resumed>) = 0 [pid 5230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5230] chdir("./file0") = 0 [pid 5230] ioctl(4, LOOP_CLR_FD) = 0 [pid 5230] close(4) = 0 [pid 5230] creat("./bus", 000 [pid 5234] <... write resumed>) = 4194304 [pid 5230] <... creat resumed>) = 4 [pid 5230] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5234] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5230] <... write resumed>) = 32 [pid 5230] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5230] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5230] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5230] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5230] exit_group(0) = ? [pid 5230] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5088] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] <... write resumed>) = 4194304 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./11/binderfs") = 0 [ 95.490358][ T5233] REISERFS (device loop5): using ordered data mode [ 95.497116][ T5233] reiserfs: using flush barriers [ 95.504921][ T5233] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.521828][ T5233] REISERFS (device loop5): checking transaction log (loop5) [ 95.528454][ T5234] loop1: detected capacity change from 0 to 8192 [pid 5088] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5235] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5235] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5234] <... ioctl resumed>) = 0 [pid 5235] <... openat resumed>) = 4 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5234] close(3) = 0 [pid 5235] <... ioctl resumed>) = 0 [pid 5235] close(3) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5235] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5234] mkdir("./file0", 0777) = 0 [pid 5234] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file0") = 0 [ 95.595762][ T5233] REISERFS (device loop5): Using r5 hash to sort names [ 95.601706][ T5235] loop2: detected capacity change from 0 to 8192 [ 95.611374][ T5233] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [pid 5237] <... write resumed>) = 4194304 [pid 5236] <... write resumed>) = 4194304 [pid 5233] ioctl(4, LOOP_CLR_FD [pid 5088] <... umount2 resumed>) = 0 [pid 5237] munmap(0x7f6d35efb000, 4194304 [pid 5236] munmap(0x7f6d35efb000, 4194304 [pid 5233] <... ioctl resumed>) = 0 [pid 5088] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... munmap resumed>) = 0 [pid 5233] close(4 [pid 5088] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5237] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5236] <... munmap resumed>) = 0 [pid 5233] <... close resumed>) = 0 [pid 5088] lstat("./11/file0", [pid 5237] <... openat resumed>) = 4 [pid 5236] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5233] creat("./bus", 000 [pid 5088] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5237] ioctl(4, LOOP_SET_FD, 3 [pid 5236] <... openat resumed>) = 4 [pid 5233] <... creat resumed>) = 4 [ 95.636738][ T5235] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.656946][ T5234] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5088] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5236] ioctl(4, LOOP_SET_FD, 3 [pid 5233] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5088] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5233] <... write resumed>) = 32 [pid 5088] fstat(4, [pid 5233] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, [pid 5233] <... open resumed>) = 5 [ 95.685118][ T5234] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 95.685550][ T5237] loop0: detected capacity change from 0 to 8192 [ 95.695428][ T5234] REISERFS (device loop1): using ordered data mode [ 95.708240][ T5236] loop3: detected capacity change from 0 to 8192 [ 95.708331][ T5234] reiserfs: using flush barriers [ 95.720987][ T5235] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 95.730694][ T5235] REISERFS (device loop2): using ordered data mode [pid 5088] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5233] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5088] getdents64(4, [pid 5233] <... mmap resumed>) = 0x20000000 [pid 5088] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5233] ioctl(4, FS_IOC_GETVERSION [pid 5088] close(4 [pid 5233] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5088] <... close resumed>) = 0 [pid 5233] write(-1, 0x20000080, 296 [pid 5088] rmdir("./11/file0" [pid 5233] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5088] <... rmdir resumed>) = 0 [pid 5233] exit_group(0 [pid 5088] getdents64(3, [pid 5233] <... exit_group resumed>) = ? [pid 5088] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5237] <... ioctl resumed>) = 0 [pid 5237] close(3) = 0 [pid 5237] mkdir("./file0", 0777 [pid 5233] +++ exited with 0 +++ [pid 5088] close(3 [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5088] <... close resumed>) = 0 [pid 5088] rmdir("./11" [pid 5089] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... mkdir resumed>) = 0 [pid 5237] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [pid 5088] <... rmdir resumed>) = 0 [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] mkdir("./12", 0777 [pid 5089] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5088] <... mkdir resumed>) = 0 [pid 5089] <... openat resumed>) = 3 [pid 5089] fstat(3, [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5089] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] ioctl(3, LOOP_CLR_FD [pid 5089] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] close(3 [pid 5089] unlink("./11/binderfs" [pid 5088] <... close resumed>) = 0 [pid 5089] <... unlink resumed>) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... clone resumed>, child_tidptr=0x5555566815d0) = 5242 [ 95.737758][ T5235] reiserfs: using flush barriers [ 95.751167][ T5235] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.752604][ T5234] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 ./strace-static-x86_64: Process 5242 attached [pid 5236] <... ioctl resumed>) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [pid 5236] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [pid 5242] chdir("./12") = 0 [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5242] setpgid(0, 0) = 0 [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] write(3, "1000", 4) = 4 [pid 5242] close(3) = 0 [ 95.773128][ T5237] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.806433][ T5235] REISERFS (device loop2): checking transaction log (loop2) [ 95.816630][ T5236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5242] memfd_create("syzkaller", 0) = 3 [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 95.827298][ T5237] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 95.841417][ T5234] REISERFS (device loop1): checking transaction log (loop1) [ 95.863482][ T5236] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 95.878800][ T5237] REISERFS (device loop0): using ordered data mode [ 95.881150][ T5236] REISERFS (device loop3): using ordered data mode [ 95.892180][ T5236] reiserfs: using flush barriers [ 95.898290][ T5237] reiserfs: using flush barriers [ 95.903329][ T5236] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.921091][ T5236] REISERFS (device loop3): checking transaction log (loop3) [ 95.928645][ T5237] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.960464][ T5237] REISERFS (device loop0): checking transaction log (loop0) [pid 5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./11/file0") = 0 [pid 5089] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5089] close(3) = 0 [ 95.987985][ T5234] REISERFS (device loop1): Using r5 hash to sort names [ 96.016751][ T5234] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.028358][ T5235] REISERFS (device loop2): Using r5 hash to sort names [pid 5089] rmdir("./11") = 0 [pid 5089] mkdir("./12", 0777) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5089] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5089] close(3 [pid 5234] <... mount resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5244 [pid 5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5234] chdir("./file0") = 0 [pid 5234] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5244 attached ) = 0 [pid 5244] chdir("./12" [pid 5234] close(4 [pid 5244] <... chdir resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] creat("./bus", 000 [pid 5244] setpgid(0, 0) = 0 [pid 5234] <... creat resumed>) = 4 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5234] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5244] <... openat resumed>) = 3 [pid 5234] <... write resumed>) = 32 [pid 5244] write(3, "1000", 4) = 4 [pid 5234] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5244] close(3) = 0 [pid 5234] <... open resumed>) = 5 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5234] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5244] <... symlink resumed>) = 0 [pid 5234] <... mmap resumed>) = 0x20000000 [pid 5244] memfd_create("syzkaller", 0 [pid 5235] <... mount resumed>) = 0 [ 96.047544][ T5235] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [pid 5234] ioctl(4, FS_IOC_GETVERSION [pid 5244] <... memfd_create resumed>) = 3 [pid 5242] <... write resumed>) = 4194304 [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5234] <... ioctl resumed>, 0) = -1 EFAULT (Bad address) [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5242] munmap(0x7f6d35efb000, 4194304 [pid 5244] <... mmap resumed>) = 0x7f6d35efb000 [pid 5235] <... openat resumed>) = 3 [pid 5234] write(-1, 0x20000080, 296 [pid 5242] <... munmap resumed>) = 0 [pid 5235] chdir("./file0" [pid 5234] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5242] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5235] <... chdir resumed>) = 0 [pid 5234] exit_group(0 [pid 5242] <... openat resumed>) = 4 [pid 5235] ioctl(4, LOOP_CLR_FD [pid 5234] <... exit_group resumed>) = ? [pid 5242] ioctl(4, LOOP_SET_FD, 3 [pid 5235] <... ioctl resumed>) = 0 [pid 5234] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5085] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] unlink("./11/binderfs") = 0 [pid 5085] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] <... ioctl resumed>) = 0 [pid 5235] close(4 [pid 5242] close(3 [pid 5235] <... close resumed>) = 0 [pid 5235] creat("./bus", 000 [pid 5242] <... close resumed>) = 0 [pid 5242] mkdir("./file0", 0777 [pid 5235] <... creat resumed>) = 4 [pid 5235] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5242] <... mkdir resumed>) = 0 [pid 5242] mount("/dev/loop4", "./file0", "reiserfs", 0, "" [pid 5235] <... write resumed>) = 32 [ 96.102161][ T5236] REISERFS (device loop3): Using r5 hash to sort names [ 96.125334][ T5242] loop4: detected capacity change from 0 to 8192 [pid 5235] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5235] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5235] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5235] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5235] exit_group(0) = ? [pid 5235] +++ exited with 0 +++ [pid 5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5086] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5086] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5086] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] getdents64(3, [pid 5236] <... mount resumed>) = 0 [pid 5086] <... getdents64 resumed>0x555556682620 /* 4 entries */, 32768) = 112 [pid 5086] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5086] lstat("./12/binderfs", [pid 5236] <... openat resumed>) = 3 [pid 5086] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5086] unlink("./12/binderfs" [pid 5236] chdir("./file0") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD [pid 5086] <... unlink resumed>) = 0 [pid 5086] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... ioctl resumed>) = 0 [pid 5236] close(4) = 0 [pid 5236] creat("./bus", 000) = 4 [pid 5236] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5236] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5236] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5236] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5236] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5236] exit_group(0) = ? [pid 5236] +++ exited with 0 +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5087] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5087] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5087] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5087] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 96.145006][ T5236] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 96.157160][ T5242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.170629][ T5237] REISERFS (device loop0): Using r5 hash to sort names [ 96.183029][ T5237] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 96.193507][ T5242] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [pid 5087] unlink("./12/binderfs") = 0 [pid 5087] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... mount resumed>) = 0 [pid 5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5237] chdir("./file0") = 0 [pid 5237] ioctl(4, LOOP_CLR_FD) = 0 [pid 5237] close(4) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5237] creat("./bus", 000) = 4 [pid 5237] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5237] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5237] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5237] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5237] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5237] exit_group(0) = ? [pid 5237] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5085] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] unlink("./11/binderfs" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 96.240832][ T5242] REISERFS (device loop4): using ordered data mode [pid 5085] fstat(4, [pid 5244] <... write resumed>) = 4194304 [pid 5085] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5244] munmap(0x7f6d35efb000, 4194304 [pid 5085] getdents64(4, [pid 5244] <... munmap resumed>) = 0 [pid 5086] <... umount2 resumed>) = 0 [pid 5085] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5244] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5086] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] getdents64(4, [pid 5244] <... openat resumed>) = 4 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5086] lstat("./12/file0", [ 96.294921][ T5242] reiserfs: using flush barriers [pid 5085] close(4 [pid 5086] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./11/file0", [pid 5086] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] rmdir("./11/file0" [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5086] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] getdents64(3, [pid 5084] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5086] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./11/file0" [pid 5244] <... ioctl resumed>) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5085] close(3 [pid 5084] <... rmdir resumed>) = 0 [pid 5244] close(3 [pid 5086] fstat(4, [pid 5085] <... close resumed>) = 0 [pid 5084] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./11") = 0 [pid 5084] mkdir("./12", 0777 [pid 5244] <... close resumed>) = 0 [pid 5086] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5085] rmdir("./11" [pid 5244] mkdir("./file0", 0777 [pid 5084] <... mkdir resumed>) = 0 [pid 5244] <... mkdir resumed>) = 0 [pid 5086] getdents64(4, [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5244] mount("/dev/loop5", "./file0", "reiserfs", 0, "" [pid 5086] <... getdents64 resumed>0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5085] mkdir("./12", 0777 [pid 5086] getdents64(4, [pid 5085] <... mkdir resumed>) = 0 [pid 5086] <... getdents64 resumed>0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5086] close(4 [pid 5085] <... openat resumed>) = 3 [pid 5086] <... close resumed>) = 0 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5086] rmdir("./12/file0" [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 96.322033][ T5244] loop5: detected capacity change from 0 to 8192 [ 96.342625][ T5242] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5086] <... rmdir resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5247 attached [pid 5247] chdir("./12") = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] memfd_create("syzkaller", 0) = 3 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5086] getdents64(3, [pid 5085] <... clone resumed>, child_tidptr=0x5555566815d0) = 5247 [pid 5086] <... getdents64 resumed>0x555556682620 /* 0 entries */, 32768) = 0 [pid 5086] close(3) = 0 [pid 5086] rmdir("./12") = 0 [pid 5086] mkdir("./13", 0777) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5086] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] close(3) = 0 [pid 5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5248 ./strace-static-x86_64: Process 5248 attached [pid 5248] chdir("./13") = 0 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5248] setpgid(0, 0) = 0 [pid 5087] <... umount2 resumed>) = 0 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5248] <... openat resumed>) = 3 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 96.375326][ T5244] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5248] write(3, "1000", 4) = 4 [pid 5248] close(3 [pid 5087] lstat("./12/file0", [pid 5248] <... close resumed>) = 0 [pid 5248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5249 [pid 5248] memfd_create("syzkaller", 0) = 3 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [pid 5087] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5249 attached [pid 5249] chdir("./12") = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] write(3, "1000", 4 [pid 5087] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] <... write resumed>) = 4 [pid 5249] close(3) = 0 [pid 5087] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] <... openat resumed>) = 4 [pid 5249] memfd_create("syzkaller", 0 [pid 5087] fstat(4, [pid 5249] <... memfd_create resumed>) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 96.416010][ T5242] REISERFS (device loop4): checking transaction log (loop4) [ 96.423829][ T5244] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 96.451728][ T5244] REISERFS (device loop5): using ordered data mode [pid 5087] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5087] close(4) = 0 [pid 5087] rmdir("./12/file0") = 0 [pid 5087] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [pid 5087] rmdir("./12") = 0 [pid 5087] mkdir("./13", 0777) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5087] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5087] close(3) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5250 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304./strace-static-x86_64: Process 5250 attached [ 96.463176][ T5244] reiserfs: using flush barriers [ 96.480499][ T5244] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [pid 5250] chdir("./13") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs" [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5250] <... symlink resumed>) = 0 [pid 5250] memfd_create("syzkaller", 0) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d35efb000 [ 96.529296][ T5244] REISERFS (device loop5): checking transaction log (loop5) [ 96.547332][ T5242] REISERFS (device loop4): Using r5 hash to sort names [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5242] <... mount resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5242] chdir("./file0" [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304 [pid 5242] <... chdir resumed>) = 0 [pid 5242] ioctl(4, LOOP_CLR_FD) = 0 [ 96.579499][ T5242] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [pid 5242] close(4) = 0 [pid 5242] creat("./bus", 000) = 4 [pid 5242] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5242] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5242] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5242] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5242] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5242] exit_group(0) = ? [pid 5242] +++ exited with 0 +++ [pid 5088] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5242, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} --- [pid 5088] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5088] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5088] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5088] unlink("./12/binderfs") = 0 [pid 5088] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] <... write resumed>) = 4194304 [pid 5247] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5247] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5250] <... write resumed>) = 4194304 [pid 5250] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5250] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... write resumed>) = 4194304 [pid 5248] munmap(0x7f6d35efb000, 4194304) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5247] <... ioctl resumed>) = 0 [pid 5247] close(3) = 0 [pid 5249] <... write resumed>) = 4194304 [pid 5248] <... ioctl resumed>) = 0 [pid 5247] mkdir("./file0", 0777 [pid 5250] <... ioctl resumed>) = 0 [pid 5249] munmap(0x7f6d35efb000, 4194304 [pid 5248] close(3 [pid 5250] close(3 [pid 5247] <... mkdir resumed>) = 0 [pid 5250] <... close resumed>) = 0 [pid 5249] <... munmap resumed>) = 0 [pid 5248] <... close resumed>) = 0 [pid 5247] mount("/dev/loop1", "./file0", "reiserfs", 0, "" [pid 5244] <... mount resumed>) = 0 [pid 5250] mkdir("./file0", 0777 [pid 5249] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5248] mkdir("./file0", 0777 [pid 5250] <... mkdir resumed>) = 0 [pid 5249] <... openat resumed>) = 4 [pid 5248] <... mkdir resumed>) = 0 [pid 5250] mount("/dev/loop3", "./file0", "reiserfs", 0, "" [ 96.688852][ T5244] REISERFS (device loop5): Using r5 hash to sort names [ 96.692907][ T5247] loop1: detected capacity change from 0 to 8192 [ 96.699755][ T5244] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 96.718461][ T5250] loop3: detected capacity change from 0 to 8192 [ 96.724150][ T5248] loop2: detected capacity change from 0 to 8192 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5248] mount("/dev/loop2", "./file0", "reiserfs", 0, "" [pid 5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5244] chdir("./file0") = 0 [pid 5249] <... ioctl resumed>) = 0 [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5249] close(3 [pid 5244] <... ioctl resumed>) = 0 [pid 5249] <... close resumed>) = 0 [pid 5249] mkdir("./file0", 0777 [pid 5244] close(4) = 0 [pid 5244] creat("./bus", 000) = 4 [pid 5249] <... mkdir resumed>) = 0 [pid 5249] mount("/dev/loop0", "./file0", "reiserfs", 0, "" [ 96.739519][ T5249] loop0: detected capacity change from 0 to 8192 [ 96.746933][ T5250] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.746970][ T5247] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.776623][ T5248] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [pid 5244] write(4, "\x00\x00\x00\x00\x18\x00\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5244] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5244] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5244] ioctl(4, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address) [pid 5244] write(-1, 0x20000080, 296) = -1 EBADF (Bad file descriptor) [pid 5244] exit_group(0) = ? [pid 5244] +++ exited with 0 +++ [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5089] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5089] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(3, 0x555556682620 /* 4 entries */, 32768) = 112 [pid 5089] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5089] unlink("./12/binderfs") = 0 [ 96.787637][ T5250] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 96.799548][ T5249] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.799639][ T5250] REISERFS (device loop3): using ordered data mode [ 96.812908][ T5247] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 96.819361][ T5250] reiserfs: using flush barriers [ 96.835773][ T5250] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.852399][ T5250] REISERFS (device loop3): checking transaction log (loop3) [ 96.854816][ T5248] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 96.898974][ T5249] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 96.923231][ T5249] REISERFS (device loop0): using ordered data mode [ 96.929539][ T5247] REISERFS (device loop1): using ordered data mode [ 96.929786][ T5249] reiserfs: using flush barriers [pid 5089] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... umount2 resumed>) = 0 [pid 5088] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5088] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5088] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5088] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5088] close(4) = 0 [pid 5088] rmdir("./12/file0") = 0 [pid 5088] getdents64(3, 0x555556682620 /* 0 entries */, 32768) = 0 [pid 5088] close(3) = 0 [pid 5088] rmdir("./12") = 0 [pid 5088] mkdir("./13", 0777) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5088] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5088] close(3) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566815d0) = 5255 ./strace-static-x86_64: Process 5255 attached [ 96.943354][ T5249] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.956153][ T5248] REISERFS (device loop2): using ordered data mode [ 96.982702][ T5248] reiserfs: using flush barriers [ 96.990424][ T5247] reiserfs: using flush barriers [pid 5255] chdir("./13") = 0 [pid 5255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5255] setpgid(0, 0) = 0 [pid 5255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5255] write(3, "1000", 4) = 4 [pid 5255] close(3) = 0 [pid 5255] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5255] memfd_create("syzkaller", 0) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] <... umount2 resumed>) = 0 [pid 5089] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5089] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] getdents64(4, 0x55555668a660 /* 2 entries */, 32768) = 48 [pid 5089] getdents64(4, 0x55555668a660 /* 0 entries */, 32768) = 0 [pid 5089] close(4) = 0 [pid 5089] rmdir("./12/file0") = 0 [pid 5089] getdents64(3, [pid 5255] <... mmap resumed>) = 0x7f6d35efb000