ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor3505216619 <...> Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor3505216619", ["ci2-upstream-fs/syz-executor3505216619"], 0x7ffec02ce4a0 /* 10 vars */) = 0 brk(NULL) = 0x5555727ad000 brk(0x5555727add80) = 0x5555727add80 arch_prctl(ARCH_SET_FS, 0x5555727ad400) = 0 set_tid_address(0x5555727ad6d0) = 5601 set_robust_list(0x5555727ad6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor3505216619", 4096) = 44 getrandom("\x4a\x51\xaf\x1e\xa0\x48\xa4\x23", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555727add80 brk(0x5555727ced80) = 0x5555727ced80 brk(0x5555727cf000) = 0x5555727cf000 mprotect(0x7ff75ae07000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5602 attached , child_tidptr=0x5555727ad6d0) = 5602 [pid 5602] set_robust_list(0x5555727ad6e0, 24 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5602] <... set_robust_list resumed>) = 0 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5601] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5602] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5603 attached , NULL, 8) = 0 [pid 5601] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5603 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] set_robust_list(0x5555727ad6e0, 24 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] <... set_robust_list resumed>) = 0 [pid 5602] getrandom( [pid 5601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5602] <... getrandom resumed>"\x07\x46\x68\x21\x10\x19\x3a\xac", 8, GRND_NONBLOCK) = 8 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5602] mkdir("./syzkaller.9XXDXe", 0700 [pid 5601] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5603] getrandom("\x1f\xdc\xc1\x00\xac\x36\xf6\xdd", 8, GRND_NONBLOCK) = 8 ci2-upstream-fs/strace-static-x86_64: Process 5604 attached [pid 5603] mkdir("./syzkaller.7oqkZh", 0700 [pid 5602] <... mkdir resumed>) = 0 [pid 5604] set_robust_list(0x5555727ad6e0, 24 [pid 5602] chmod("./syzkaller.9XXDXe", 0777 [pid 5601] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5604 [pid 5604] <... set_robust_list resumed>) = 0 [pid 5602] <... chmod resumed>) = 0 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] <... mkdir resumed>) = 0 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5602] chdir("./syzkaller.9XXDXe" [pid 5601] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5601] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5604] getrandom( [pid 5601] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5604] <... getrandom resumed>"\xd5\x08\xbd\xbf\x8f\x67\x06\xe1", 8, GRND_NONBLOCK) = 8 [pid 5603] chmod("./syzkaller.7oqkZh", 0777 [pid 5602] <... chdir resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5605 attached [pid 5604] mkdir("./syzkaller.rEyGG7", 0700 [pid 5603] <... chmod resumed>) = 0 [pid 5602] mkdir("./0", 0777 [pid 5601] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5605 [pid 5605] set_robust_list(0x5555727ad6e0, 24 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... set_robust_list resumed>) = 0 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5601] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5605] getrandom( [pid 5603] chdir("./syzkaller.7oqkZh" [pid 5602] <... mkdir resumed>) = 0 [pid 5604] <... mkdir resumed>) = 0 [pid 5603] <... chdir resumed>) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 5605] <... getrandom resumed>"\x08\x65\x98\xd1\xf5\xfc\xb5\x53", 8, GRND_NONBLOCK) = 8 [pid 5603] mkdir("./0", 0777 [pid 5605] mkdir("./syzkaller.4iGKo1", 0700 [pid 5604] chmod("./syzkaller.rEyGG7", 0777 [pid 5603] <... mkdir resumed>) = 0 [pid 5602] <... openat resumed>) = 3 ci2-upstream-fs/strace-static-x86_64: Process 5606 attached [pid 5601] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5606 [pid 5601] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] set_robust_list(0x5555727ad6e0, 24 [pid 5605] <... mkdir resumed>) = 0 [pid 5601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] chmod("./syzkaller.4iGKo1", 0777 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] <... chmod resumed>) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5602] ioctl(3, LOOP_CLR_FD [pid 5606] getrandom( [pid 5605] chdir("./syzkaller.4iGKo1" [pid 5606] <... getrandom resumed>"\xda\xd1\xed\xe7\x6b\x67\x23\xe2", 8, GRND_NONBLOCK) = 8 [pid 5604] <... chmod resumed>) = 0 [pid 5603] <... openat resumed>) = 3 [pid 5602] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5606] mkdir("./syzkaller.MgCS3Y", 0700 [pid 5605] <... chdir resumed>) = 0 [pid 5604] chdir("./syzkaller.rEyGG7" [pid 5603] ioctl(3, LOOP_CLR_FD [pid 5602] close(3) = 0 [pid 5605] mkdir("./0", 0777 [pid 5603] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5604] <... chdir resumed>) = 0 [pid 5602] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5604] mkdir("./0", 0777ci2-upstream-fs/strace-static-x86_64: Process 5607 attached [pid 5603] close(3 [pid 5602] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5607 [pid 5607] set_robust_list(0x5555727ad6e0, 24 [pid 5602] rt_sigprocmask(SIG_SETMASK, [] [pid 5607] <... set_robust_list resumed>) = 0 [pid 5602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] <... mkdir resumed>) = 0 [pid 5605] <... mkdir resumed>) = 0 [pid 5604] <... mkdir resumed>) = 0 [pid 5603] <... close resumed>) = 0 [pid 5606] chmod("./syzkaller.MgCS3Y", 0777 [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 5607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... chmod resumed>) = 0 [pid 5605] <... openat resumed>) = 3 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5607] chdir("./0" [pid 5605] ioctl(3, LOOP_CLR_FD [pid 5604] <... openat resumed>) = 3 [pid 5603] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5607] <... chdir resumed>) = 0 [pid 5606] chdir("./syzkaller.MgCS3Y" [pid 5605] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5604] ioctl(3, LOOP_CLR_FD [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5606] <... chdir resumed>) = 0 [pid 5604] <... ioctl resumed>) = -1 ENXIO (No such device or address) ci2-upstream-fs/strace-static-x86_64: Process 5608 attached [pid 5607] <... prctl resumed>) = 0 [pid 5606] mkdir("./0", 0777 [pid 5605] close(3 [pid 5608] set_robust_list(0x5555727ad6e0, 24 [pid 5607] setpgid(0, 0) = 0 [pid 5605] <... close resumed>) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5608] <... set_robust_list resumed>) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5608 [pid 5605] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5604] close(3 [pid 5608] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5604] <... close resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5608] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] <... openat resumed>) = 3 [pid 5604] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5608] chdir("./0" [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5607] write(3, "1000", 4 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] <... write resumed>) = 4 [pid 5608] <... chdir resumed>) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5607] close(3 [pid 5608] prctl(PR_SET_PDEATHSIG, SIGKILLci2-upstream-fs/strace-static-x86_64: Process 5609 attached ) = 0 [pid 5607] <... close resumed>) = 0 [pid 5608] setpgid(0, 0 [pid 5607] symlink("/dev/binderfs", "./binderfs" [pid 5609] set_robust_list(0x5555727ad6e0, 24 [pid 5608] <... setpgid resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5610 attached [pid 5607] <... symlink resumed>) = 0 [pid 5609] <... set_robust_list resumed>) = 0 [pid 5608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] <... mkdir resumed>) = 0 [pid 5604] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5609 [pid 5607] write(1, "executing program\n", 18 [pid 5610] set_robust_list(0x5555727ad6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... set_robust_list resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5610 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5608] <... openat resumed>) = 3 [pid 5607] <... write resumed>) = 18 [pid 5606] <... openat resumed>) = 3 [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] chdir("./0" [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... chdir resumed>) = 0 [pid 5610] chdir("./0" [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5608] write(3, "1000", 4 [pid 5607] memfd_create("syzkaller", 0 [pid 5606] ioctl(3, LOOP_CLR_FD [pid 5610] <... chdir resumed>) = 0 [pid 5609] <... prctl resumed>) = 0 [pid 5608] <... write resumed>) = 4 [pid 5607] <... memfd_create resumed>) = 3 [pid 5606] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5609] setpgid(0, 0 [pid 5608] close(3 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] <... setpgid resumed>) = 0 [pid 5608] <... close resumed>) = 0 [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5608] symlink("/dev/binderfs", "./binderfs" [pid 5607] <... mmap resumed>) = 0x7ff752943000 [pid 5606] close(3 [pid 5610] <... prctl resumed>) = 0 [pid 5606] <... close resumed>) = 0 [pid 5610] setpgid(0, 0 [pid 5608] <... symlink resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... setpgid resumed>) = 0 [pid 5609] <... openat resumed>) = 3 [pid 5608] write(1, "executing program\n", 18 [pid 5606] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5609] write(3, "1000", 4 [pid 5608] <... write resumed>) = 18 [pid 5609] <... write resumed>) = 4 [pid 5610] <... openat resumed>) = 3 [pid 5609] close(3 [pid 5608] memfd_create("syzkaller", 0 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... close resumed>) = 0 [pid 5609] symlink("/dev/binderfs", "./binderfs" [pid 5608] <... memfd_create resumed>) = 3 [pid 5610] write(3, "1000", 4) = 4 [pid 5610] close(3) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs" [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] <... symlink resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5611 attached [pid 5608] <... mmap resumed>) = 0x7ff752943000 [pid 5606] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5611 [pid 5610] write(1, "executing program\n", 18 executing program [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... write resumed>) = 18 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] set_robust_list(0x5555727ad6e0, 24 [pid 5610] memfd_create("syzkaller", 0 [pid 5611] <... set_robust_list resumed>) = 0 [pid 5609] <... symlink resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5610] <... memfd_create resumed>) = 3 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] chdir("./0" [pid 5610] <... mmap resumed>) = 0x7ff752943000 executing program [pid 5609] write(1, "executing program\n", 18 [pid 5611] <... chdir resumed>) = 0 [pid 5609] <... write resumed>) = 18 [pid 5609] memfd_create("syzkaller", 0 [pid 5611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] <... memfd_create resumed>) = 3 [pid 5611] <... prctl resumed>) = 0 [pid 5611] setpgid(0, 0 [pid 5609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] <... setpgid resumed>) = 0 [pid 5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5609] <... mmap resumed>) = 0x7ff752943000 [pid 5611] <... openat resumed>) = 3 [pid 5611] write(3, "1000", 4) = 4 [pid 5611] close(3) = 0 [pid 5611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] write(1, "executing program\n", 18) = 18 executing program [pid 5611] memfd_create("syzkaller", 0) = 3 [pid 5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5610] <... write resumed>) = 16777216 [pid 5610] munmap(0x7ff752943000, 138412032) = 0 [pid 5608] <... write resumed>) = 16777216 [pid 5607] <... write resumed>) = 16777216 [pid 5610] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5608] munmap(0x7ff752943000, 138412032 [pid 5607] munmap(0x7ff752943000, 138412032 [pid 5610] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... write resumed>) = 16777216 [pid 5611] munmap(0x7ff752943000, 138412032 [pid 5607] <... munmap resumed>) = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5608] <... munmap resumed>) = 0 [pid 5607] <... openat resumed>) = 4 [pid 5607] ioctl(4, LOOP_SET_FD, 3 [pid 5608] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5608] ioctl(4, LOOP_SET_FD, 3 [pid 5611] <... munmap resumed>) = 0 [pid 5609] <... write resumed>) = 16777216 [pid 5611] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5610] <... ioctl resumed>) = 0 [pid 5609] munmap(0x7ff752943000, 138412032 [pid 5611] <... openat resumed>) = 4 [pid 5610] close(3) = 0 [pid 5611] ioctl(4, LOOP_SET_FD, 3 [pid 5610] close(4) = 0 [pid 5610] mkdir("./file1", 0777 [pid 5607] <... ioctl resumed>) = 0 [pid 5610] <... mkdir resumed>) = 0 [ 81.934941][ T5610] loop3: detected capacity change from 0 to 32768 [pid 5610] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5609] <... munmap resumed>) = 0 [pid 5607] close(3 [pid 5609] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5607] <... close resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5608] <... ioctl resumed>) = 0 [pid 5611] close(3) = 0 [pid 5608] close(3 [pid 5611] close(4 [pid 5608] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5608] close(4 [pid 5607] close(4 [pid 5611] mkdir("./file1", 0777 [pid 5609] <... openat resumed>) = 4 [pid 5608] <... close resumed>) = 0 [pid 5607] <... close resumed>) = 0 [pid 5608] mkdir("./file1", 0777 [pid 5607] mkdir("./file1", 0777) = 0 [pid 5609] ioctl(4, LOOP_SET_FD, 3 [pid 5607] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5611] <... mkdir resumed>) = 0 [pid 5608] <... mkdir resumed>) = 0 [pid 5611] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [ 81.992099][ T5607] loop0: detected capacity change from 0 to 32768 [ 82.010971][ T5608] loop1: detected capacity change from 0 to 32768 [ 82.011193][ T5611] loop4: detected capacity change from 0 to 32768 [pid 5608] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3) = 0 [pid 5609] close(4) = 0 [pid 5609] mkdir("./file1", 0777) = 0 [ 82.078914][ T5609] loop2: detected capacity change from 0 to 32768 [pid 5609] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5607] <... mount resumed>) = 0 [pid 5607] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] <... mount resumed>) = 0 [pid 5608] <... mount resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5608] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5607] <... openat resumed>) = 3 [pid 5609] <... mount resumed>) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5608] <... openat resumed>) = 3 [pid 5607] chdir("./file1" [pid 5608] chdir("./file1" [pid 5611] chdir("./file1" [pid 5609] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5608] <... chdir resumed>) = 0 [pid 5607] <... chdir resumed>) = 0 [pid 5610] <... mount resumed>) = 0 [pid 5611] <... chdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5609] <... openat resumed>) = 3 [pid 5608] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 5611] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 5610] <... openat resumed>) = 3 [pid 5609] chdir("./file1" [pid 5608] <... openat resumed>) = 4 [pid 5607] <... openat resumed>) = 4 [pid 5611] <... openat resumed>) = 4 [pid 5610] chdir("./file1" [pid 5609] <... chdir resumed>) = 0 [pid 5608] ioctl(4, LOOP_CLR_FD [pid 5607] ioctl(4, LOOP_CLR_FD [pid 5611] ioctl(4, LOOP_CLR_FD [pid 5610] <... chdir resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 5608] <... ioctl resumed>) = 0 [pid 5607] <... ioctl resumed>) = 0 [pid 5611] <... ioctl resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 5609] <... openat resumed>) = 4 [pid 5608] close(4 [pid 5607] close(4 [pid 5611] close(4 [pid 5610] <... openat resumed>) = 4 [pid 5609] ioctl(4, LOOP_CLR_FD [pid 5608] <... close resumed>) = 0 [pid 5607] <... close resumed>) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] ioctl(4, LOOP_CLR_FD [pid 5609] <... ioctl resumed>) = 0 [pid 5608] rename(NULL, NULL [pid 5607] rename(NULL, NULL [pid 5608] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5611] rename(NULL, NULL [pid 5610] <... ioctl resumed>) = 0 [pid 5609] close(4 [pid 5608] memfd_create("syzkaller", 0 [pid 5607] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5611] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5610] close(4 [pid 5611] memfd_create("syzkaller", 0 [pid 5610] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5608] <... memfd_create resumed>) = 4 [pid 5607] memfd_create("syzkaller", 0 [pid 5610] rename(NULL, NULL [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5609] rename(NULL, NULL [pid 5608] <... mmap resumed>) = 0x7ff752943000 [pid 5607] <... memfd_create resumed>) = 4 [pid 5611] <... memfd_create resumed>) = 4 [pid 5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] memfd_create("syzkaller", 0 [pid 5609] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] <... mmap resumed>) = 0x7ff752943000 [pid 5609] memfd_create("syzkaller", 0 [pid 5607] <... mmap resumed>) = 0x7ff752943000 [pid 5610] <... memfd_create resumed>) = 4 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] <... memfd_create resumed>) = 4 [pid 5610] <... mmap resumed>) = 0x7ff752943000 [pid 5609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5608] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5610] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5611] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5607] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5609] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5608] <... write resumed>) = 20699119 [pid 5608] munmap(0x7ff752943000, 138412032 [pid 5607] <... write resumed>) = 20699119 [pid 5607] munmap(0x7ff752943000, 138412032 [pid 5608] <... munmap resumed>) = 0 [pid 5608] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5607] <... munmap resumed>) = 0 [pid 5608] close(4 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5607] close(4 [pid 5611] <... write resumed>) = 20699119 [pid 5611] munmap(0x7ff752943000, 138412032) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5611] close(4 [pid 5610] <... write resumed>) = 20699119 [pid 5610] munmap(0x7ff752943000, 138412032) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5609] <... write resumed>) = 20699119 [pid 5610] close(4 [pid 5609] munmap(0x7ff752943000, 138412032) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5609] close(4 [pid 5611] <... close resumed>) = 0 [pid 5611] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5611] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5611] exit_group(0 [pid 5608] <... close resumed>) = 0 [pid 5611] <... exit_group resumed>) = ? [pid 5608] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5608] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5608] exit_group(0) = ? [pid 5608] +++ exited with 0 +++ [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5608, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=79 /* 0.79 s */} --- [pid 5611] +++ exited with 0 +++ [pid 5607] <... close resumed>) = 0 [pid 5607] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=86 /* 0.86 s */} --- [pid 5607] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5606] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5603] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5607] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5607] exit_group(0 [pid 5603] <... openat resumed>) = 3 [pid 5607] <... exit_group resumed>) = ? [pid 5603] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5607] +++ exited with 0 +++ [pid 5606] <... restart_syscall resumed>) = 0 [pid 5602] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=75 /* 0.75 s */} --- [pid 5606] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] <... restart_syscall resumed>) = 0 [pid 5606] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5606] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] getdents64(3 [pid 5602] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5602] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] <... openat resumed>) = 3 [pid 5602] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5602] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... close resumed>) = 0 [pid 5609] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5609] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5609] exit_group(0) = ? [pid 5609] +++ exited with 0 +++ [pid 5610] <... close resumed>) = 0 [pid 5610] pwrite64(-1, "", 0, 8715984 [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=64 /* 0.64 s */} --- [pid 5610] <... pwrite64 resumed>) = -1 EBADF (Bad file descriptor) [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5610] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5610] exit_group(0) = ? [pid 5604] <... restart_syscall resumed>) = 0 [pid 5610] +++ exited with 0 +++ [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=72 /* 0.72 s */} --- [pid 5605] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] <... openat resumed>) = 3 [pid 5604] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5605] fstat(3 [pid 5604] fstat(3 [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(3 [pid 5605] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5605] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] <... umount2 resumed>) = 0 [pid 5606] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5606] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5606] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5606] close(4) = 0 [pid 5606] rmdir("./0/file1" [pid 5602] <... umount2 resumed>) = 0 [pid 5606] <... rmdir resumed>) = 0 [pid 5602] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] unlink("./0/binderfs" [pid 5602] <... openat resumed>) = 4 [pid 5606] <... unlink resumed>) = 0 [pid 5602] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5602] close(4) = 0 [pid 5602] rmdir("./0/file1" [pid 5606] getdents64(3 [pid 5603] <... umount2 resumed>) = 0 [pid 5606] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] <... rmdir resumed>) = 0 [pid 5606] close(3 [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] newfstatat(AT_FDCWD, "./0/file1" [pid 5606] <... close resumed>) = 0 [pid 5602] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] rmdir("./0" [pid 5603] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] newfstatat(AT_FDCWD, "./0/binderfs" [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5602] unlink("./0/binderfs" [pid 5603] fstat(4 [pid 5602] <... unlink resumed>) = 0 [pid 5603] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] <... rmdir resumed>) = 0 [pid 5603] getdents64(4 [pid 5602] getdents64(3 [pid 5606] mkdir("./1", 0777 [pid 5602] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] close(3 [pid 5606] <... mkdir resumed>) = 0 [pid 5603] getdents64(4 [pid 5602] <... close resumed>) = 0 [pid 5603] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5602] rmdir("./0" [pid 5603] close(4 [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 5605] <... umount2 resumed>) = 0 [pid 5602] <... rmdir resumed>) = 0 [pid 5606] <... openat resumed>) = 3 [pid 5604] <... umount2 resumed>) = 0 [pid 5603] <... close resumed>) = 0 [pid 5602] mkdir("./1", 0777 [pid 5605] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] rmdir("./0/file1" [pid 5606] ioctl(3, LOOP_CLR_FD [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] <... mkdir resumed>) = 0 [pid 5606] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5605] newfstatat(AT_FDCWD, "./0/file1" [pid 5604] newfstatat(AT_FDCWD, "./0/file1" [pid 5603] <... rmdir resumed>) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 5606] close(3 [pid 5605] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] <... openat resumed>) = 3 [pid 5606] <... close resumed>) = 0 [pid 5605] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] ioctl(3, LOOP_CLR_FD [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5603] newfstatat(AT_FDCWD, "./0/binderfs" [pid 5602] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5606] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5605] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] <... openat resumed>) = 4 [pid 5603] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] close(3 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5605] <... openat resumed>) = 4 [pid 5604] fstat(4 [pid 5603] unlink("./0/binderfs" [pid 5602] <... close resumed>) = 0 [pid 5604] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5622 attached [pid 5605] fstat(4 [pid 5603] <... unlink resumed>) = 0 [pid 5604] getdents64(4 [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5622] set_robust_list(0x5555727ad6e0, 24 [pid 5603] getdents64(3 [pid 5622] <... set_robust_list resumed>) = 0 [pid 5604] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5603] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5622] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] getdents64(4 [pid 5603] close(3 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5623 attached [pid 5622] chdir("./1" [pid 5606] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5622 [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] close(4 [pid 5603] <... close resumed>) = 0 [pid 5623] set_robust_list(0x5555727ad6e0, 24 [pid 5622] <... chdir resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] getdents64(4 [pid 5603] rmdir("./0" [pid 5602] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5623 [pid 5623] <... set_robust_list resumed>) = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5604] <... close resumed>) = 0 [pid 5603] <... rmdir resumed>) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [] [pid 5623] rt_sigprocmask(SIG_SETMASK, [] [pid 5622] <... prctl resumed>) = 0 [pid 5605] getdents64(4 [pid 5623] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5622] setpgid(0, 0 [pid 5605] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5604] rmdir("./0/file1" [pid 5603] mkdir("./1", 0777 [pid 5602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5623] chdir("./1" [pid 5622] <... setpgid resumed>) = 0 [pid 5605] close(4 [pid 5604] <... rmdir resumed>) = 0 [pid 5603] <... mkdir resumed>) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5623] <... chdir resumed>) = 0 [pid 5605] <... close resumed>) = 0 [pid 5623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5622] <... openat resumed>) = 3 [pid 5623] <... prctl resumed>) = 0 [pid 5605] rmdir("./0/file1" [pid 5623] setpgid(0, 0 [pid 5604] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5622] write(3, "1000", 4 [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5622] <... write resumed>) = 4 [pid 5622] close(3 [pid 5604] newfstatat(AT_FDCWD, "./0/binderfs" [pid 5603] <... openat resumed>) = 3 [pid 5622] <... close resumed>) = 0 [pid 5604] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs" [pid 5603] ioctl(3, LOOP_CLR_FD [pid 5623] <... setpgid resumed>) = 0 [pid 5622] <... symlink resumed>) = 0 [pid 5604] unlink("./0/binderfs" [pid 5603] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5604] <... unlink resumed>) = 0 [pid 5622] write(1, "executing program\n", 18 [pid 5603] close(3 [pid 5623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5622] <... write resumed>) = 18 [pid 5605] <... rmdir resumed>) = 0 [pid 5604] getdents64(3 [pid 5603] <... close resumed>) = 0 executing program [pid 5623] <... openat resumed>) = 3 [pid 5622] memfd_create("syzkaller", 0 [pid 5605] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5623] write(3, "1000", 4) = 4 [pid 5623] close(3 [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] close(3 [pid 5603] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5623] <... close resumed>) = 0 [pid 5622] <... memfd_create resumed>) = 3 [pid 5605] newfstatat(AT_FDCWD, "./0/binderfs" [pid 5604] <... close resumed>) = 0 [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5623] symlink("/dev/binderfs", "./binderfs" [pid 5622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5605] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] rmdir("./0" [pid 5622] <... mmap resumed>) = 0x7ff752943000 ci2-upstream-fs/strace-static-x86_64: Process 5624 attached [pid 5623] <... symlink resumed>) = 0 [pid 5605] unlink("./0/binderfs" [pid 5604] <... rmdir resumed>) = 0 [pid 5624] set_robust_list(0x5555727ad6e0, 24 [pid 5623] write(1, "executing program\n", 18) = 18 [pid 5624] <... set_robust_list resumed>) = 0 [pid 5623] memfd_create("syzkaller", 0 executing program [pid 5624] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... unlink resumed>) = 0 [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5624 [pid 5624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5623] <... memfd_create resumed>) = 3 [pid 5604] mkdir("./1", 0777 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5624] chdir("./1" [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5624] <... chdir resumed>) = 0 [pid 5623] <... mmap resumed>) = 0x7ff752943000 [pid 5605] getdents64(3 [pid 5604] <... mkdir resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5624] <... prctl resumed>) = 0 [pid 5624] setpgid(0, 0) = 0 [pid 5624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] close(3 [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 5624] <... openat resumed>) = 3 [pid 5605] <... close resumed>) = 0 [pid 5604] <... openat resumed>) = 3 [pid 5624] write(3, "1000", 4) = 4 [pid 5624] close(3) = 0 [pid 5624] symlink("/dev/binderfs", "./binderfs" [pid 5605] rmdir("./0" [pid 5604] ioctl(3, LOOP_CLR_FD [pid 5624] <... symlink resumed>) = 0 [pid 5605] <... rmdir resumed>) = 0 [pid 5604] <... ioctl resumed>) = -1 ENXIO (No such device or address) executing program [pid 5624] write(1, "executing program\n", 18 [pid 5604] close(3 [pid 5624] <... write resumed>) = 18 [pid 5605] mkdir("./1", 0777 [pid 5604] <... close resumed>) = 0 [pid 5624] memfd_create("syzkaller", 0 [pid 5605] <... mkdir resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 5604] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5624] <... memfd_create resumed>) = 3 [pid 5605] <... openat resumed>) = 3 [pid 5605] ioctl(3, LOOP_CLR_FD [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5605] <... ioctl resumed>) = -1 ENXIO (No such device or address) ci2-upstream-fs/strace-static-x86_64: Process 5625 attached [pid 5605] close(3) = 0 [pid 5604] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5625 [pid 5625] set_robust_list(0x5555727ad6e0, 24 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5625] <... set_robust_list resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] chdir("./1"ci2-upstream-fs/strace-static-x86_64: Process 5626 attached [pid 5626] set_robust_list(0x5555727ad6e0, 24 [pid 5625] <... chdir resumed>) = 0 [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5626 [pid 5626] <... set_robust_list resumed>) = 0 [pid 5625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5625] <... prctl resumed>) = 0 [pid 5626] rt_sigprocmask(SIG_SETMASK, [] [pid 5625] setpgid(0, 0 [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5626] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5625] <... setpgid resumed>) = 0 [pid 5626] chdir("./1" [pid 5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5626] <... chdir resumed>) = 0 [pid 5625] <... openat resumed>) = 3 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5625] write(3, "1000", 4 [pid 5626] <... prctl resumed>) = 0 [pid 5625] <... write resumed>) = 4 [pid 5626] setpgid(0, 0 [pid 5625] close(3 [pid 5626] <... setpgid resumed>) = 0 [pid 5625] <... close resumed>) = 0 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] <... openat resumed>) = 3 [pid 5626] write(3, "1000", 4 executing program [pid 5625] write(1, "executing program\n", 18 [pid 5626] <... write resumed>) = 4 [pid 5625] <... write resumed>) = 18 [pid 5626] close(3) = 0 [pid 5625] memfd_create("syzkaller", 0 [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5625] <... memfd_create resumed>) = 3 [pid 5626] write(1, "executing program\n", 18 executing program [pid 5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5626] <... write resumed>) = 18 [pid 5625] <... mmap resumed>) = 0x7ff752943000 [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5622] <... write resumed>) = 16777216 [pid 5622] munmap(0x7ff752943000, 138412032) = 0 [pid 5622] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5622] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5622] close(3) = 0 [pid 5622] close(4) = 0 [pid 5622] mkdir("./file1", 0777) = 0 [ 85.499296][ T5622] loop4: detected capacity change from 0 to 32768 [pid 5622] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5624] <... write resumed>) = 16777216 [pid 5622] <... mount resumed>) = 0 [pid 5624] munmap(0x7ff752943000, 138412032 [pid 5622] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5622] chdir("./file1") = 0 [pid 5622] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 5622] ioctl(4, LOOP_CLR_FD) = 0 [pid 5622] close(4) = 0 [pid 5622] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5624] <... munmap resumed>) = 0 [pid 5622] memfd_create("syzkaller", 0 [pid 5624] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5622] <... memfd_create resumed>) = 4 [pid 5624] <... openat resumed>) = 4 [pid 5622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5624] ioctl(4, LOOP_SET_FD, 3 [pid 5622] <... mmap resumed>) = 0x7ff752943000 [pid 5624] <... ioctl resumed>) = 0 [pid 5624] close(3) = 0 [pid 5624] close(4) = 0 [pid 5624] mkdir("./file1", 0777) = 0 [pid 5624] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5623] <... write resumed>) = 16777216 [pid 5623] munmap(0x7ff752943000, 138412032 [pid 5625] <... write resumed>) = 16777216 [ 85.632491][ T5624] loop1: detected capacity change from 0 to 32768 [pid 5625] munmap(0x7ff752943000, 138412032) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5625] ioctl(4, LOOP_SET_FD, 3 [pid 5623] <... munmap resumed>) = 0 [pid 5625] <... ioctl resumed>) = 0 [pid 5625] close(3) = 0 [pid 5625] close(4 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5624] <... mount resumed>) = 0 [pid 5624] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5624] chdir("./file1") = 0 [pid 5623] ioctl(4, LOOP_SET_FD, 3 [pid 5624] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 5623] <... ioctl resumed>) = 0 [pid 5624] ioctl(4, LOOP_CLR_FD) = 0 [pid 5624] close(4) = 0 [pid 5624] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5623] close(3 [pid 5625] <... close resumed>) = 0 [pid 5624] memfd_create("syzkaller", 0 [pid 5623] <... close resumed>) = 0 [pid 5623] close(4 [pid 5625] mkdir("./file1", 0777 [pid 5624] <... memfd_create resumed>) = 4 [pid 5626] <... write resumed>) = 16777216 [pid 5623] <... close resumed>) = 0 [pid 5623] mkdir("./file1", 0777) = 0 [pid 5626] munmap(0x7ff752943000, 138412032 [pid 5624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5623] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5625] <... mkdir resumed>) = 0 [ 85.704638][ T5625] loop2: detected capacity change from 0 to 32768 [ 85.725306][ T5623] loop0: detected capacity change from 0 to 32768 [pid 5625] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5625] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5625] chdir("./file1") = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 5625] ioctl(4, LOOP_CLR_FD) = 0 [pid 5625] close(4) = 0 [pid 5625] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5625] memfd_create("syzkaller", 0 [pid 5626] <... munmap resumed>) = 0 [pid 5625] <... memfd_create resumed>) = 4 [pid 5626] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5626] <... openat resumed>) = 4 [pid 5626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5623] <... mount resumed>) = 0 [pid 5623] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5626] close(3 [pid 5623] <... openat resumed>) = 3 [pid 5626] <... close resumed>) = 0 [pid 5623] chdir("./file1") = 0 [pid 5626] close(4 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 5626] <... close resumed>) = 0 [pid 5623] <... openat resumed>) = 4 [pid 5626] mkdir("./file1", 0777 [pid 5623] ioctl(4, LOOP_CLR_FD [pid 5626] <... mkdir resumed>) = 0 [pid 5623] <... ioctl resumed>) = 0 [pid 5623] close(4) = 0 [pid 5623] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5623] memfd_create("syzkaller", 0) = 4 [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5626] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5623] <... mmap resumed>) = 0x7ff752943000 [ 85.828087][ T5626] loop3: detected capacity change from 0 to 32768 [pid 5626] <... mount resumed>) = 0 [pid 5626] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5626] chdir("./file1") = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 5626] ioctl(4, LOOP_CLR_FD) = 0 [pid 5626] close(4) = 0 [pid 5626] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5626] memfd_create("syzkaller", 0) = 4 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5625] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5622] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5624] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5623] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5626] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5624] <... write resumed>) = 20699119 [pid 5624] munmap(0x7ff752943000, 138412032) = 0 [pid 5624] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 86.759086][ T997] cfg80211: failed to load regulatory.db [pid 5624] close(4 [pid 5625] <... write resumed>) = 20699119 [pid 5625] munmap(0x7ff752943000, 138412032) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5625] close(4 [pid 5624] <... close resumed>) = 0 [pid 5622] <... write resumed>) = 20699119 [pid 5624] pwrite64(-1, "", 0, 8715984 [pid 5622] munmap(0x7ff752943000, 138412032 [pid 5624] <... pwrite64 resumed>) = -1 EBADF (Bad file descriptor) [pid 5624] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5622] <... munmap resumed>) = 0 [pid 5624] exit_group(0 [pid 5622] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5624] <... exit_group resumed>) = ? [pid 5622] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5622] close(4 [pid 5624] +++ exited with 0 +++ [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5624, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=76 /* 0.76 s */} --- [pid 5603] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5603] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5603] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5623] <... write resumed>) = 20699119 [pid 5623] munmap(0x7ff752943000, 138412032) = 0 [pid 5626] <... write resumed>) = 20699119 [pid 5626] munmap(0x7ff752943000, 138412032 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5623] close(4 [pid 5626] <... munmap resumed>) = 0 [pid 5625] <... close resumed>) = 0 [pid 5625] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5626] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5625] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5626] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5625] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5626] close(4 [pid 5625] exit_group(0) = ? [pid 5625] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5625, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=69 /* 0.69 s */} --- [pid 5604] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5622] <... close resumed>) = 0 [pid 5622] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5622] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5622] exit_group(0) = ? [pid 5622] +++ exited with 0 +++ [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=70 /* 0.70 s */} --- [pid 5606] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5606] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] <... umount2 resumed>) = 0 [pid 5603] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5603] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5603] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] close(4) = 0 [pid 5603] rmdir("./1/file1") = 0 [pid 5603] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] unlink("./1/binderfs") = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] close(3) = 0 [pid 5603] rmdir("./1") = 0 [pid 5603] mkdir("./2", 0777) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 5603] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5603] close(3) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5628 attached [pid 5628] set_robust_list(0x5555727ad6e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5628 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5628] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5628] chdir("./2") = 0 [pid 5628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5628] setpgid(0, 0) = 0 [pid 5628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5628] write(3, "1000", 4) = 4 [pid 5628] close(3) = 0 [pid 5628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5628] write(1, "executing program\n", 18) = 18 executing program [pid 5628] memfd_create("syzkaller", 0) = 3 [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5623] <... close resumed>) = 0 [pid 5604] <... umount2 resumed>) = 0 [pid 5623] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5623] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5604] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5623] exit_group(0 [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5623] <... exit_group resumed>) = ? [pid 5604] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5623] +++ exited with 0 +++ [pid 5604] close(4) = 0 [pid 5602] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5623, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=67 /* 0.67 s */} --- [pid 5626] <... close resumed>) = 0 [pid 5604] rmdir("./1/file1" [pid 5602] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5626] pwrite64(-1, "", 0, 8715984 [pid 5602] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5626] <... pwrite64 resumed>) = -1 EBADF (Bad file descriptor) [pid 5602] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5626] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5602] <... openat resumed>) = 3 [pid 5626] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5602] fstat(3 [pid 5626] exit_group(0 [pid 5602] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5626] <... exit_group resumed>) = ? [pid 5602] getdents64(3 [pid 5604] <... rmdir resumed>) = 0 [pid 5602] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5626] +++ exited with 0 +++ [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=69 /* 0.69 s */} --- [pid 5604] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./1/binderfs") = 0 [pid 5604] getdents64(3 [pid 5605] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] close(3) = 0 [pid 5605] <... openat resumed>) = 3 [pid 5605] fstat(3 [pid 5604] rmdir("./1" [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5605] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... rmdir resumed>) = 0 [pid 5604] mkdir("./2", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555727ad6d0) = 5629 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5629 attached [pid 5629] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5629] chdir("./2") = 0 [pid 5629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5629] setpgid(0, 0) = 0 [pid 5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5629] write(3, "1000", 4) = 4 [pid 5629] close(3) = 0 [pid 5629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5629] write(1, "executing program\n", 18) = 18 executing program [pid 5629] memfd_create("syzkaller", 0) = 3 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5606] <... umount2 resumed>) = 0 [pid 5606] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5606] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5606] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5606] close(4) = 0 [pid 5606] rmdir("./1/file1") = 0 [pid 5606] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] unlink("./1/binderfs") = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5606] close(3) = 0 [pid 5606] rmdir("./1") = 0 [pid 5606] mkdir("./2", 0777) = 0 [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 5606] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5606] close(3) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5630 attached [pid 5630] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5606] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5630 [pid 5630] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5630] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5630] chdir("./2") = 0 [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5630] setpgid(0, 0) = 0 [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5630] write(3, "1000", 4) = 4 [pid 5630] close(3) = 0 [pid 5630] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5630] write(1, "executing program\n", 18) = 18 [pid 5630] memfd_create("syzkaller", 0) = 3 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5602] <... umount2 resumed>) = 0 [pid 5602] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5602] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5602] close(4) = 0 [pid 5602] rmdir("./1/file1") = 0 [pid 5602] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] unlink("./1/binderfs") = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5602] close(3) = 0 [pid 5602] rmdir("./1") = 0 [pid 5602] mkdir("./2", 0777) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5602] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5602] close(3) = 0 [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5605] <... umount2 resumed>) = 0 [pid 5605] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOWci2-upstream-fs/strace-static-x86_64: Process 5631 attached [pid 5602] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5631 [pid 5631] set_robust_list(0x5555727ad6e0, 24 [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5631] <... set_robust_list resumed>) = 0 [pid 5605] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5602] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... openat resumed>) = 4 [pid 5631] rt_sigprocmask(SIG_SETMASK, [] [pid 5602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5631] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] fstat(4 [pid 5631] chdir("./2" [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5631] <... chdir resumed>) = 0 [pid 5605] getdents64(4 [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5605] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5631] write(3, "1000", 4 [pid 5605] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5605] close(4 [pid 5631] <... write resumed>) = 4 [pid 5605] <... close resumed>) = 0 [pid 5605] rmdir("./1/file1" [pid 5631] close(3 [pid 5605] <... rmdir resumed>) = 0 [pid 5631] <... close resumed>) = 0 [pid 5631] symlink("/dev/binderfs", "./binderfs" [pid 5605] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5631] <... symlink resumed>) = 0 executing program [pid 5631] write(1, "executing program\n", 18) = 18 [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5631] memfd_create("syzkaller", 0 [pid 5605] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] unlink("./1/binderfs" [pid 5631] <... memfd_create resumed>) = 3 [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5605] <... unlink resumed>) = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5605] close(3) = 0 [pid 5605] rmdir("./1") = 0 [pid 5605] mkdir("./2", 0777) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 5605] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5605] close(3) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5632 attached [pid 5628] <... write resumed>) = 16777216 [pid 5632] set_robust_list(0x5555727ad6e0, 24 [pid 5628] munmap(0x7ff752943000, 138412032 [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5632 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5632] chdir("./2") = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] symlink("/dev/binderfs", "./binderfs" [pid 5628] <... munmap resumed>) = 0 [pid 5632] <... symlink resumed>) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5628] ioctl(4, LOOP_SET_FD, 3 [pid 5632] write(1, "executing program\n", 18) = 18 executing program [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5628] <... ioctl resumed>) = 0 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5628] close(3 [pid 5632] <... mmap resumed>) = 0x7ff752943000 [pid 5628] <... close resumed>) = 0 [pid 5628] close(4) = 0 [pid 5628] mkdir("./file1", 0777) = 0 [pid 5628] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5628] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5628] chdir("./file1") = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 5628] ioctl(4, LOOP_CLR_FD) = 0 [pid 5628] close(4) = 0 [pid 5628] rename(NULL, NULL) = -1 EFAULT (Bad address) [ 88.404112][ T5628] loop1: detected capacity change from 0 to 32768 [pid 5628] memfd_create("syzkaller", 0) = 4 [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5629] <... write resumed>) = 16777216 [pid 5629] munmap(0x7ff752943000, 138412032) = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5629] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5629] close(3) = 0 [pid 5629] close(4) = 0 [pid 5629] mkdir("./file1", 0777 [pid 5628] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5629] <... mkdir resumed>) = 0 [pid 5629] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5629] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5629] chdir("./file1") = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 5629] ioctl(4, LOOP_CLR_FD) = 0 [pid 5629] close(4) = 0 [ 88.795265][ T5629] loop2: detected capacity change from 0 to 32768 [pid 5629] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5629] memfd_create("syzkaller", 0) = 4 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5630] <... write resumed>) = 16777216 [pid 5630] munmap(0x7ff752943000, 138412032) = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5630] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5630] close(3) = 0 [pid 5630] close(4) = 0 [pid 5630] mkdir("./file1", 0777) = 0 [ 88.921184][ T5630] loop4: detected capacity change from 0 to 32768 [pid 5630] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5630] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5630] chdir("./file1") = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 5630] ioctl(4, LOOP_CLR_FD) = 0 [pid 5630] close(4) = 0 [pid 5630] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5630] memfd_create("syzkaller", 0) = 4 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5632] <... write resumed>) = 16777216 [pid 5632] munmap(0x7ff752943000, 138412032) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5632] close(3) = 0 [pid 5632] close(4) = 0 [pid 5632] mkdir("./file1", 0777) = 0 [pid 5632] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [ 89.173471][ T5632] loop3: detected capacity change from 0 to 32768 [pid 5629] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5632] <... mount resumed>) = 0 [pid 5632] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./file1") = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 5632] ioctl(4, LOOP_CLR_FD) = 0 [pid 5632] close(4) = 0 [pid 5632] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5632] memfd_create("syzkaller", 0) = 4 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5630] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5631] <... write resumed>) = 16777216 [pid 5631] munmap(0x7ff752943000, 138412032) = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5631] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5631] close(3) = 0 [pid 5631] close(4) = 0 [pid 5631] mkdir("./file1", 0777) = 0 [pid 5631] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5631] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5631] chdir("./file1") = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 89.493267][ T5631] loop0: detected capacity change from 0 to 32768 [pid 5631] ioctl(4, LOOP_CLR_FD) = 0 [pid 5631] close(4) = 0 [pid 5631] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5631] memfd_create("syzkaller", 0) = 4 [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5632] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5628] <... write resumed>) = 20699119 [pid 5628] munmap(0x7ff752943000, 138412032) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5628] close(4 [pid 5631] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5629] <... write resumed>) = 20699119 [pid 5629] munmap(0x7ff752943000, 138412032) = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5629] close(4 [pid 5630] <... write resumed>) = 20699119 [pid 5630] munmap(0x7ff752943000, 138412032) = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5630] close(4 [pid 5628] <... close resumed>) = 0 [pid 5628] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5628] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5628] exit_group(0) = ? [pid 5628] +++ exited with 0 +++ [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5628, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=60 /* 0.60 s */} --- [pid 5603] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5603] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5603] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5632] <... write resumed>) = 20699119 [pid 5632] munmap(0x7ff752943000, 138412032) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5632] close(4 [pid 5629] <... close resumed>) = 0 [pid 5629] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5629] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5629] exit_group(0) = ? [pid 5629] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5629, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=70 /* 0.70 s */} --- [pid 5604] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5630] <... close resumed>) = 0 [pid 5630] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5630] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5630] exit_group(0) = ? [pid 5630] +++ exited with 0 +++ [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5630, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=70 /* 0.70 s */} --- [pid 5606] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5606] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5606] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5631] <... write resumed>) = 20699119 [pid 5631] munmap(0x7ff752943000, 138412032 [pid 5603] <... umount2 resumed>) = 0 [pid 5603] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5631] <... munmap resumed>) = 0 [pid 5603] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5631] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5603] <... openat resumed>) = 4 [pid 5631] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5603] fstat(4 [pid 5631] close(4 [pid 5603] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5603] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] close(4) = 0 [pid 5603] rmdir("./2/file1") = 0 [pid 5603] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] unlink("./2/binderfs") = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] close(3) = 0 [pid 5603] rmdir("./2") = 0 [pid 5603] mkdir("./3", 0777) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 5603] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5603] close(3) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5633 attached [pid 5633] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5633 [pid 5633] chdir("./3" [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5633] <... chdir resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5633] setpgid(0, 0) = 0 [pid 5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5633] write(3, "1000", 4) = 4 [pid 5633] close(3) = 0 [pid 5633] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5633] write(1, "executing program\n", 18) = 18 [pid 5633] memfd_create("syzkaller", 0) = 3 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5632] <... close resumed>) = 0 [pid 5632] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5632] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5632] exit_group(0) = ? [pid 5632] +++ exited with 0 +++ [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=66 /* 0.66 s */} --- [pid 5605] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5605] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5605] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... umount2 resumed>) = 0 [pid 5604] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./2/file1") = 0 [pid 5604] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./2/binderfs") = 0 [pid 5604] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./2") = 0 [pid 5604] mkdir("./3", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5606] <... umount2 resumed>) = 0 [pid 5604] close(3 [pid 5606] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... close resumed>) = 0 [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5606] newfstatat(AT_FDCWD, "./2/file1" [pid 5604] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5606] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5606] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5606] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5606] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5606] close(4) = 0 [pid 5606] rmdir("./2/file1"ci2-upstream-fs/strace-static-x86_64: Process 5634 attached [pid 5604] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5634 [pid 5634] set_robust_list(0x5555727ad6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5634] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] <... rmdir resumed>) = 0 [pid 5634] chdir("./3") = 0 [pid 5606] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5634] <... prctl resumed>) = 0 [pid 5606] newfstatat(AT_FDCWD, "./2/binderfs" [pid 5634] setpgid(0, 0) = 0 [pid 5606] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] unlink("./2/binderfs" [pid 5634] <... openat resumed>) = 3 [pid 5606] <... unlink resumed>) = 0 [pid 5606] getdents64(3 [pid 5634] write(3, "1000", 4) = 4 [pid 5606] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5634] close(3) = 0 [pid 5606] close(3 [pid 5634] symlink("/dev/binderfs", "./binderfs" [pid 5606] <... close resumed>) = 0 [pid 5634] <... symlink resumed>) = 0 [pid 5606] rmdir("./2") = 0 [pid 5634] write(1, "executing program\n", 18) = 18 executing program [pid 5634] memfd_create("syzkaller", 0 [pid 5606] mkdir("./3", 0777 [pid 5634] <... memfd_create resumed>) = 3 [pid 5606] <... mkdir resumed>) = 0 [pid 5634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5606] <... openat resumed>) = 3 [pid 5606] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5606] close(3) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5635 attached , child_tidptr=0x5555727ad6d0) = 5635 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5635] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5635] chdir("./3") = 0 [pid 5635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5635] setpgid(0, 0) = 0 [pid 5635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5635] write(3, "1000", 4) = 4 [pid 5635] close(3) = 0 [pid 5635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5635] write(1, "executing program\n", 18) = 18 executing program [pid 5635] memfd_create("syzkaller", 0) = 3 [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5631] <... close resumed>) = 0 [pid 5631] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5631] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5631] exit_group(0) = ? [pid 5631] +++ exited with 0 +++ [pid 5602] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=64 /* 0.64 s */} --- [pid 5602] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5602] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5602] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5602] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] <... umount2 resumed>) = 0 [pid 5605] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5605] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(4 [pid 5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5605] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5605] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5605] close(4) = 0 [pid 5605] rmdir("./2/file1") = 0 [pid 5605] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] unlink("./2/binderfs") = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5605] close(3) = 0 [pid 5605] rmdir("./2") = 0 [pid 5605] mkdir("./3", 0777) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 5605] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5605] close(3) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5636 attached [pid 5636] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5636 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5636] chdir("./3") = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] setpgid(0, 0) = 0 [pid 5636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1000", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5636] write(1, "executing program\n", 18) = 18 executing program [pid 5636] memfd_create("syzkaller", 0) = 3 [pid 5636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5602] <... umount2 resumed>) = 0 [pid 5602] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5602] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5602] close(4) = 0 [pid 5602] rmdir("./2/file1") = 0 [pid 5602] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] unlink("./2/binderfs") = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5602] close(3) = 0 [pid 5602] rmdir("./2") = 0 [pid 5602] mkdir("./3", 0777) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5633] <... write resumed>) = 16777216 [pid 5635] <... write resumed>) = 16777216 [pid 5602] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5635] munmap(0x7ff752943000, 138412032 [pid 5633] munmap(0x7ff752943000, 138412032 [pid 5602] close(3) = 0 [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5637 attached [pid 5637] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5602] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5637 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5633] <... munmap resumed>) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] chdir("./3" [pid 5635] <... munmap resumed>) = 0 [pid 5637] <... chdir resumed>) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0 [pid 5633] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5637] <... setpgid resumed>) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5635] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5633] <... openat resumed>) = 4 [pid 5635] <... openat resumed>) = 4 [pid 5637] <... openat resumed>) = 3 [pid 5633] ioctl(4, LOOP_SET_FD, 3 [pid 5635] ioctl(4, LOOP_SET_FD, 3 [pid 5637] write(3, "1000", 4 [pid 5633] <... ioctl resumed>) = 0 [pid 5633] close(3 [pid 5637] <... write resumed>) = 4 [pid 5633] <... close resumed>) = 0 [pid 5635] <... ioctl resumed>) = 0 [pid 5633] close(4) = 0 [pid 5637] close(3 [pid 5633] mkdir("./file1", 0777 [pid 5637] <... close resumed>) = 0 [pid 5635] close(3 [pid 5637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5635] <... close resumed>) = 0 [pid 5635] close(4) = 0 [pid 5635] mkdir("./file1", 0777 [pid 5637] write(1, "executing program\n", 18) = 18 executing program [pid 5637] memfd_create("syzkaller", 0) = 3 [pid 5637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5635] <... mkdir resumed>) = 0 [pid 5637] <... mmap resumed>) = 0x7ff752943000 [pid 5635] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5633] <... mkdir resumed>) = 0 [pid 5633] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5635] <... mount resumed>) = 0 [ 91.599965][ T5633] loop1: detected capacity change from 0 to 32768 [ 91.613284][ T5635] loop4: detected capacity change from 0 to 32768 [pid 5635] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5635] chdir("./file1") = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 5635] ioctl(4, LOOP_CLR_FD) = 0 [pid 5635] close(4) = 0 [pid 5633] <... mount resumed>) = 0 [pid 5635] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5635] memfd_create("syzkaller", 0 [pid 5633] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5635] <... memfd_create resumed>) = 4 [pid 5633] chdir("./file1") = 0 [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5633] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5635] <... mmap resumed>) = 0x7ff752943000 [pid 5633] <... openat resumed>) = 4 [pid 5634] <... write resumed>) = 16777216 [pid 5633] ioctl(4, LOOP_CLR_FD [pid 5634] munmap(0x7ff752943000, 138412032 [pid 5633] <... ioctl resumed>) = 0 [pid 5633] close(4) = 0 [pid 5633] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5633] memfd_create("syzkaller", 0) = 4 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5634] <... munmap resumed>) = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5634] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5634] close(3) = 0 [pid 5634] close(4) = 0 [pid 5634] mkdir("./file1", 0777) = 0 [ 91.770942][ T5634] loop2: detected capacity change from 0 to 32768 [pid 5634] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5634] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5634] chdir("./file1") = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 5634] ioctl(4, LOOP_CLR_FD) = 0 [pid 5634] close(4) = 0 [pid 5634] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5634] memfd_create("syzkaller", 0) = 4 [pid 5634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5635] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5633] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5634] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5636] <... write resumed>) = 16777216 [pid 5636] munmap(0x7ff752943000, 138412032) = 0 [pid 5636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5636] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5636] close(3) = 0 [pid 5636] close(4) = 0 [pid 5636] mkdir("./file1", 0777) = 0 [pid 5636] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5636] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5636] chdir("./file1") = 0 [ 92.459456][ T5636] loop3: detected capacity change from 0 to 32768 [pid 5636] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 5636] ioctl(4, LOOP_CLR_FD) = 0 [pid 5636] close(4) = 0 [pid 5636] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5636] memfd_create("syzkaller", 0) = 4 [pid 5636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5637] <... write resumed>) = 16777216 [pid 5636] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5637] munmap(0x7ff752943000, 138412032 [pid 5635] <... write resumed>) = 20699119 [pid 5637] <... munmap resumed>) = 0 [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5637] ioctl(4, LOOP_SET_FD, 3 [pid 5635] munmap(0x7ff752943000, 138412032 [pid 5637] <... ioctl resumed>) = 0 [pid 5637] close(3 [pid 5635] <... munmap resumed>) = 0 [pid 5637] <... close resumed>) = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5637] close(4 [pid 5635] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5635] close(4 [pid 5637] <... close resumed>) = 0 [pid 5637] mkdir("./file1", 0777) = 0 [ 92.809937][ T5637] loop0: detected capacity change from 0 to 32768 [pid 5637] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5637] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5637] chdir("./file1") = 0 [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5637] ioctl(4, LOOP_CLR_FD) = 0 [pid 5637] close(4) = 0 [pid 5637] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5637] memfd_create("syzkaller", 0) = 4 [pid 5637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5634] <... write resumed>) = 20699119 [pid 5634] munmap(0x7ff752943000, 138412032) = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5634] close(4 [pid 5633] <... write resumed>) = 20699119 [pid 5633] munmap(0x7ff752943000, 138412032) = 0 [pid 5633] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5633] close(4 [pid 5637] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5635] <... close resumed>) = 0 [pid 5635] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5635] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5635] exit_group(0) = ? [pid 5635] +++ exited with 0 +++ [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5635, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=63 /* 0.63 s */} --- [pid 5606] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5606] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5606] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5636] <... write resumed>) = 20699119 [pid 5636] munmap(0x7ff752943000, 138412032) = 0 [pid 5636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5636] close(4 [pid 5634] <... close resumed>) = 0 [pid 5634] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5634] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5634] exit_group(0) = ? [pid 5634] +++ exited with 0 +++ [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5634, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=73 /* 0.73 s */} --- [pid 5604] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5604] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5633] <... close resumed>) = 0 [pid 5633] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5633] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5633] exit_group(0) = ? [pid 5633] +++ exited with 0 +++ [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=62 /* 0.62 s */} --- [pid 5603] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5603] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5603] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] <... umount2 resumed>) = 0 [pid 5606] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5606] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5606] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5606] close(4) = 0 [pid 5606] rmdir("./3/file1") = 0 [pid 5606] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] unlink("./3/binderfs") = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5606] close(3) = 0 [pid 5606] rmdir("./3" [pid 5636] <... close resumed>) = 0 [pid 5636] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5636] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5636] exit_group(0) = ? [pid 5636] +++ exited with 0 +++ [pid 5606] <... rmdir resumed>) = 0 [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5636, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=77 /* 0.77 s */} --- [pid 5605] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5606] mkdir("./4", 0777 [pid 5605] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5605] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] <... mkdir resumed>) = 0 [pid 5605] getdents64(3 [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 5605] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] <... openat resumed>) = 3 [pid 5605] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5606] close(3) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5638 attached [pid 5637] <... write resumed>) = 20699119 [pid 5637] munmap(0x7ff752943000, 138412032 [pid 5638] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5637] <... munmap resumed>) = 0 [pid 5606] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5638 [pid 5638] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] chdir("./4" [pid 5637] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5638] <... chdir resumed>) = 0 [pid 5637] close(4 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] setpgid(0, 0) = 0 [pid 5638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1000", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5638] write(1, "executing program\n", 18) = 18 executing program [pid 5638] memfd_create("syzkaller", 0) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5604] <... umount2 resumed>) = 0 [pid 5604] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./3/file1") = 0 [pid 5604] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./3/binderfs") = 0 [pid 5603] <... umount2 resumed>) = 0 [pid 5604] getdents64(3 [pid 5603] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./3/file1" [pid 5604] close(3 [pid 5603] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] <... close resumed>) = 0 [pid 5603] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] rmdir("./3" [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5603] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5603] getdents64(4 [pid 5604] <... rmdir resumed>) = 0 [pid 5603] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] close(4 [pid 5604] mkdir("./4", 0777 [pid 5603] <... close resumed>) = 0 [pid 5604] <... mkdir resumed>) = 0 [pid 5603] rmdir("./3/file1") = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 5603] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] ioctl(3, LOOP_CLR_FD [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5604] close(3 [pid 5603] newfstatat(AT_FDCWD, "./3/binderfs" [pid 5604] <... close resumed>) = 0 [pid 5603] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5603] unlink("./3/binderfs" [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5603] <... unlink resumed>) = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] close(3) = 0 [pid 5603] rmdir("./3"ci2-upstream-fs/strace-static-x86_64: Process 5639 attached ) = 0 [pid 5604] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5639 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5639] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] mkdir("./4", 0777 [pid 5639] chdir("./4" [pid 5603] <... mkdir resumed>) = 0 [pid 5639] <... chdir resumed>) = 0 [pid 5639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5639] setpgid(0, 0 [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5639] <... setpgid resumed>) = 0 [pid 5603] <... openat resumed>) = 3 [pid 5603] ioctl(3, LOOP_CLR_FD [pid 5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5603] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5639] <... openat resumed>) = 3 [pid 5603] close(3) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5639] write(3, "1000", 4ci2-upstream-fs/strace-static-x86_64: Process 5640 attached ) = 4 [pid 5639] close(3) = 0 [pid 5640] set_robust_list(0x5555727ad6e0, 24 [pid 5639] symlink("/dev/binderfs", "./binderfs" [pid 5640] <... set_robust_list resumed>) = 0 [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5640 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5639] <... symlink resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] chdir("./4" [pid 5639] write(1, "executing program\n", 18 executing program [pid 5640] <... chdir resumed>) = 0 [pid 5639] <... write resumed>) = 18 [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5640] setpgid(0, 0 [pid 5639] memfd_create("syzkaller", 0 [pid 5640] <... setpgid resumed>) = 0 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5639] <... memfd_create resumed>) = 3 [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5640] <... openat resumed>) = 3 [pid 5640] write(3, "1000", 4 [pid 5639] <... mmap resumed>) = 0x7ff752943000 [pid 5640] <... write resumed>) = 4 [pid 5640] close(3) = 0 [pid 5640] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5640] write(1, "executing program\n", 18) = 18 [pid 5640] memfd_create("syzkaller", 0) = 3 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5605] <... umount2 resumed>) = 0 [pid 5605] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5605] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5605] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5605] close(4) = 0 [pid 5605] rmdir("./3/file1") = 0 [pid 5605] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] unlink("./3/binderfs") = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5605] close(3) = 0 [pid 5605] rmdir("./3") = 0 [pid 5605] mkdir("./4", 0777) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 5605] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5605] close(3) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5637] <... close resumed>) = 0 [pid 5637] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5637] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5637] exit_group(0) = ? [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5641 ci2-upstream-fs/strace-static-x86_64: Process 5641 attached [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] set_robust_list(0x5555727ad6e0, 24 [pid 5637] +++ exited with 0 +++ [pid 5641] <... set_robust_list resumed>) = 0 [pid 5602] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=50 /* 0.50 s */} --- [pid 5641] rt_sigprocmask(SIG_SETMASK, [] [pid 5602] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5602] <... restart_syscall resumed>) = 0 [pid 5641] chdir("./4") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5602] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5641] <... openat resumed>) = 3 [pid 5602] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5602] fstat(3 [pid 5641] write(3, "1000", 4 [pid 5602] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(3 [pid 5641] <... write resumed>) = 4 [pid 5641] close(3 [pid 5602] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5641] <... close resumed>) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs" [pid 5602] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5641] <... symlink resumed>) = 0 executing program [pid 5641] write(1, "executing program\n", 18) = 18 [pid 5641] memfd_create("syzkaller", 0) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5638] <... write resumed>) = 16777216 [pid 5638] munmap(0x7ff752943000, 138412032) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5638] close(3) = 0 [pid 5602] <... umount2 resumed>) = 0 [pid 5638] close(4) = 0 [pid 5638] mkdir("./file1", 0777 [pid 5602] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5638] <... mkdir resumed>) = 0 [pid 5602] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5638] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5602] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5602] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] getdents64(4 [pid 5638] <... mount resumed>) = 0 [pid 5638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5602] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5638] <... openat resumed>) = 3 [pid 5602] close(4) = 0 [pid 5638] chdir("./file1" [pid 5602] rmdir("./3/file1" [pid 5638] <... chdir resumed>) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 5638] ioctl(4, LOOP_CLR_FD) = 0 [pid 5638] close(4) = 0 [pid 5638] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5638] memfd_create("syzkaller", 0) = 4 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5602] <... rmdir resumed>) = 0 [ 94.618581][ T5638] loop4: detected capacity change from 0 to 32768 [pid 5602] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] unlink("./3/binderfs") = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5602] close(3) = 0 [pid 5602] rmdir("./3") = 0 [pid 5602] mkdir("./4", 0777) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5602] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5602] close(3) = 0 [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5642 attached [pid 5642] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [] [pid 5602] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5642 [pid 5642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [] [pid 5642] chdir("./4" [pid 5602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5642] <... chdir resumed>) = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5642] write(1, "executing program\n", 18) = 18 [pid 5642] memfd_create("syzkaller", 0) = 3 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5638] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5640] <... write resumed>) = 16777216 [pid 5640] munmap(0x7ff752943000, 138412032) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5639] <... write resumed>) = 16777216 [pid 5640] <... openat resumed>) = 4 [pid 5639] munmap(0x7ff752943000, 138412032 [pid 5640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5640] close(3) = 0 [pid 5640] close(4 [pid 5639] <... munmap resumed>) = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5640] <... close resumed>) = 0 [pid 5640] mkdir("./file1", 0777 [pid 5639] <... openat resumed>) = 4 [pid 5639] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5639] close(3 [pid 5640] <... mkdir resumed>) = 0 [pid 5639] <... close resumed>) = 0 [pid 5639] close(4) = 0 [pid 5640] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5639] mkdir("./file1", 0777) = 0 [ 94.949820][ T5640] loop1: detected capacity change from 0 to 32768 [ 94.975623][ T5639] loop2: detected capacity change from 0 to 32768 [pid 5639] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5640] <... mount resumed>) = 0 [pid 5640] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5640] chdir("./file1") = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 5640] ioctl(4, LOOP_CLR_FD) = 0 [pid 5640] close(4) = 0 [pid 5639] <... mount resumed>) = 0 [pid 5640] rename(NULL, NULL [pid 5639] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5640] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5639] <... openat resumed>) = 3 [pid 5640] memfd_create("syzkaller", 0 [pid 5639] chdir("./file1" [pid 5640] <... memfd_create resumed>) = 4 [pid 5639] <... chdir resumed>) = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5639] <... openat resumed>) = 4 [pid 5639] ioctl(4, LOOP_CLR_FD [pid 5640] <... mmap resumed>) = 0x7ff752943000 [pid 5639] <... ioctl resumed>) = 0 [pid 5639] close(4) = 0 [pid 5639] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5639] memfd_create("syzkaller", 0) = 4 [pid 5639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5641] <... write resumed>) = 16777216 [pid 5641] munmap(0x7ff752943000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5641] close(3) = 0 [pid 5641] close(4) = 0 [pid 5641] mkdir("./file1", 0777) = 0 [pid 5641] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5641] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 95.279117][ T5641] loop3: detected capacity change from 0 to 32768 [pid 5641] chdir("./file1") = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] rename(NULL, NULL [pid 5640] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5641] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5641] memfd_create("syzkaller", 0) = 4 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5639] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5641] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5638] <... write resumed>) = 20699119 [pid 5638] munmap(0x7ff752943000, 138412032 [pid 5642] <... write resumed>) = 16777216 [pid 5638] <... munmap resumed>) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5642] munmap(0x7ff752943000, 138412032 [pid 5638] close(4 [pid 5642] <... munmap resumed>) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5642] close(3) = 0 [pid 5642] close(4) = 0 [pid 5642] mkdir("./file1", 0777) = 0 [pid 5642] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5642] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] chdir("./file1") = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4) = 0 [pid 5642] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5642] memfd_create("syzkaller", 0) = 4 [ 95.738474][ T5642] loop0: detected capacity change from 0 to 32768 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5642] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5640] <... write resumed>) = 20699119 [pid 5640] munmap(0x7ff752943000, 138412032) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5640] close(4 [pid 5638] <... close resumed>) = 0 [pid 5638] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5638] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5638] exit_group(0) = ? [pid 5638] +++ exited with 0 +++ [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5638, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=70 /* 0.70 s */} --- [pid 5606] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5639] <... write resumed>) = 20699119 [pid 5639] munmap(0x7ff752943000, 138412032) = 0 [pid 5606] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5639] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5639] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5606] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5639] close(4 [pid 5606] <... openat resumed>) = 3 [pid 5606] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5641] <... write resumed>) = 20699119 [pid 5641] munmap(0x7ff752943000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5641] close(4 [pid 5639] <... close resumed>) = 0 [pid 5639] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5639] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5606] <... umount2 resumed>) = 0 [pid 5639] exit_group(0 [pid 5606] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5639] <... exit_group resumed>) = ? [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5639] +++ exited with 0 +++ [pid 5606] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5640] <... close resumed>) = 0 [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5639, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=69 /* 0.69 s */} --- [pid 5604] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5640] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5606] <... openat resumed>) = 4 [pid 5606] fstat(4 [pid 5604] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5640] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5606] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5640] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5606] getdents64(4 [pid 5640] exit_group(0 [pid 5604] <... openat resumed>) = 3 [pid 5606] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5640] <... exit_group resumed>) = ? [pid 5606] getdents64(4 [pid 5604] fstat(3 [pid 5606] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5604] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] close(4 [pid 5640] +++ exited with 0 +++ [pid 5606] <... close resumed>) = 0 [pid 5604] getdents64(3 [pid 5606] rmdir("./4/file1" [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5640, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=54 /* 0.54 s */} --- [pid 5603] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5603] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5603] fstat(3 [pid 5604] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3 [pid 5604] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] <... rmdir resumed>) = 0 [pid 5606] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] unlink("./4/binderfs") = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5606] close(3) = 0 [pid 5606] rmdir("./4") = 0 [pid 5606] mkdir("./5", 0777) = 0 [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 5606] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5606] close(3) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555727ad6d0) = 5643 [pid 5606] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5643 attached , NULL, 8) = 0 [pid 5643] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5643] chdir("./5") = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5643] write(3, "1000", 4) = 4 [pid 5643] close(3) = 0 executing program [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5643] write(1, "executing program\n", 18) = 18 [pid 5643] memfd_create("syzkaller", 0) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5642] <... write resumed>) = 20699119 [pid 5642] munmap(0x7ff752943000, 138412032) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5642] close(4 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5641] <... close resumed>) = 0 [pid 5641] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5641] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5641] exit_group(0) = ? [pid 5641] +++ exited with 0 +++ [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=79 /* 0.79 s */} --- [pid 5605] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5605] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5605] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5605] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] <... umount2 resumed>) = 0 [pid 5603] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5603] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5603] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] close(4) = 0 [pid 5603] rmdir("./4/file1") = 0 [pid 5603] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] unlink("./4/binderfs") = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] close(3) = 0 [pid 5603] rmdir("./4") = 0 [pid 5603] mkdir("./5", 0777) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 5603] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5603] close(3) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5644 attached , child_tidptr=0x5555727ad6d0) = 5644 [pid 5644] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] chdir("./5") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5644] write(1, "executing program\n", 18) = 18 [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5604] <... umount2 resumed>) = 0 [pid 5604] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5604] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5604] close(4) = 0 [pid 5604] rmdir("./4/file1") = 0 [pid 5604] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5604] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./4/binderfs") = 0 [pid 5604] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5604] rmdir("./4") = 0 [pid 5604] mkdir("./5", 0777) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5604] close(3) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5645 attached , child_tidptr=0x5555727ad6d0) = 5645 [pid 5645] set_robust_list(0x5555727ad6e0, 24 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] chdir("./5") = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5645] write(1, "executing program\n", 18) = 18 executing program [pid 5645] memfd_create("syzkaller", 0) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5642] <... close resumed>) = 0 [pid 5642] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5642] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5642] exit_group(0) = ? [pid 5642] +++ exited with 0 +++ [pid 5602] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=76 /* 0.76 s */} --- [pid 5602] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5602] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5602] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5602] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5605] <... umount2 resumed>) = 0 [pid 5605] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5605] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5605] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5605] close(4) = 0 [pid 5605] rmdir("./4/file1") = 0 [pid 5605] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] unlink("./4/binderfs") = 0 [pid 5605] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5605] close(3) = 0 [pid 5605] rmdir("./4") = 0 [pid 5605] mkdir("./5", 0777) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 5605] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5605] close(3) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5646 attached [pid 5646] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5646 [pid 5646] chdir("./5" [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] <... chdir resumed>) = 0 [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5646] <... setpgid resumed>) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] write(1, "executing program\n", 18) = 18 executing program [pid 5646] memfd_create("syzkaller", 0) = 3 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5643] <... write resumed>) = 16777216 [pid 5643] munmap(0x7ff752943000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5643] close(3) = 0 [pid 5643] close(4) = 0 [pid 5643] mkdir("./file1", 0777) = 0 [pid 5643] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5643] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5643] chdir("./file1") = 0 [ 97.467448][ T5643] loop4: detected capacity change from 0 to 32768 [pid 5643] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5643] close(4) = 0 [pid 5643] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5643] memfd_create("syzkaller", 0) = 4 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5602] <... umount2 resumed>) = 0 [pid 5602] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5602] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5602] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5602] close(4) = 0 [pid 5602] rmdir("./4/file1") = 0 [pid 5602] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] unlink("./4/binderfs") = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5602] close(3) = 0 [pid 5602] rmdir("./4") = 0 [pid 5602] mkdir("./5", 0777) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5602] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5602] close(3) = 0 [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5647 attached , child_tidptr=0x5555727ad6d0) = 5647 [pid 5647] set_robust_list(0x5555727ad6e0, 24 [pid 5643] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] chdir("./5") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] write(1, "executing program\n", 18) = 18 executing program [pid 5647] memfd_create("syzkaller", 0) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5644] <... write resumed>) = 16777216 [pid 5644] munmap(0x7ff752943000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5644] close(3) = 0 [pid 5644] close(4) = 0 [pid 5644] mkdir("./file1", 0777) = 0 [ 97.926038][ T5644] loop1: detected capacity change from 0 to 32768 [pid 5644] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5644] chdir("./file1") = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 5644] ioctl(4, LOOP_CLR_FD) = 0 [pid 5644] close(4) = 0 [pid 5644] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5644] memfd_create("syzkaller", 0) = 4 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5645] <... write resumed>) = 16777216 [pid 5645] munmap(0x7ff752943000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5645] close(3) = 0 [pid 5645] close(4) = 0 [pid 5645] mkdir("./file1", 0777) = 0 [pid 5645] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5646] <... write resumed>) = 16777216 [pid 5645] <... mount resumed>) = 0 [ 98.117353][ T5645] loop2: detected capacity change from 0 to 32768 [pid 5646] munmap(0x7ff752943000, 138412032 [pid 5645] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5645] chdir("./file1") = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 5645] ioctl(4, LOOP_CLR_FD) = 0 [pid 5645] close(4) = 0 [pid 5645] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5645] memfd_create("syzkaller", 0) = 4 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5646] <... munmap resumed>) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5646] close(3) = 0 [pid 5646] close(4) = 0 [pid 5646] mkdir("./file1", 0777) = 0 [pid 5646] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5646] chdir("./file1") = 0 [ 98.234261][ T5646] loop3: detected capacity change from 0 to 32768 [pid 5646] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 5646] ioctl(4, LOOP_CLR_FD) = 0 [pid 5646] close(4) = 0 [pid 5646] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5646] memfd_create("syzkaller", 0) = 4 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5644] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5645] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5647] <... write resumed>) = 16777216 [pid 5647] munmap(0x7ff752943000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] mkdir("./file1", 0777) = 0 [pid 5646] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 98.646026][ T5647] loop0: detected capacity change from 0 to 32768 [pid 5647] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5647] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file1") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [pid 5647] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5647] memfd_create("syzkaller", 0) = 4 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5643] <... write resumed>) = 20699119 [pid 5643] munmap(0x7ff752943000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5643] close(4 [pid 5644] <... write resumed>) = 20699119 [pid 5644] munmap(0x7ff752943000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5644] close(4 [pid 5647] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5643] <... close resumed>) = 0 [pid 5643] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5644] <... close resumed>) = 0 [pid 5643] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5644] pwrite64(-1, "", 0, 8715984 [pid 5643] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5644] <... pwrite64 resumed>) = -1 EBADF (Bad file descriptor) [pid 5644] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5643] exit_group(0 [pid 5644] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5644] exit_group(0 [pid 5643] <... exit_group resumed>) = ? [pid 5644] <... exit_group resumed>) = ? [pid 5643] +++ exited with 0 +++ [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=66 /* 0.66 s */} --- [pid 5644] +++ exited with 0 +++ [pid 5606] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=64 /* 0.64 s */} --- [pid 5603] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5606] <... restart_syscall resumed>) = 0 [pid 5606] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5603] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] fstat(3 [pid 5603] <... openat resumed>) = 3 [pid 5606] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3 [pid 5606] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5645] <... write resumed>) = 20699119 [pid 5645] munmap(0x7ff752943000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5645] close(4 [pid 5646] <... write resumed>) = 20699119 [pid 5646] munmap(0x7ff752943000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5646] close(4 [pid 5606] <... umount2 resumed>) = 0 [pid 5606] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5606] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5606] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5606] close(4) = 0 [pid 5606] rmdir("./5/file1") = 0 [pid 5606] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] unlink("./5/binderfs") = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5606] close(3) = 0 [pid 5606] rmdir("./5" [pid 5603] <... umount2 resumed>) = 0 [pid 5606] <... rmdir resumed>) = 0 [pid 5603] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5606] mkdir("./6", 0777) = 0 [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 5603] <... openat resumed>) = 4 [pid 5603] fstat(4 [pid 5606] <... openat resumed>) = 3 [pid 5606] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5606] close(3 [pid 5603] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] <... close resumed>) = 0 [pid 5603] getdents64(4 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5603] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5603] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] close(4) = 0 [pid 5603] rmdir("./5/file1"ci2-upstream-fs/strace-static-x86_64: Process 5648 attached ) = 0 [pid 5648] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5606] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5648 [pid 5603] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] newfstatat(AT_FDCWD, "./5/binderfs" [pid 5646] <... close resumed>) = 0 [pid 5648] chdir("./6" [pid 5647] <... write resumed>) = 20699119 [pid 5645] <... close resumed>) = 0 [pid 5603] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5648] <... chdir resumed>) = 0 [pid 5647] munmap(0x7ff752943000, 138412032 [pid 5645] pwrite64(-1, "", 0, 8715984 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5646] pwrite64(-1, "", 0, 8715984 [pid 5645] <... pwrite64 resumed>) = -1 EBADF (Bad file descriptor) [pid 5646] <... pwrite64 resumed>) = -1 EBADF (Bad file descriptor) [pid 5646] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5648] <... prctl resumed>) = 0 [pid 5647] <... munmap resumed>) = 0 [pid 5646] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5645] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614 [pid 5603] unlink("./5/binderfs" [pid 5648] setpgid(0, 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5646] exit_group(0 [pid 5645] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5603] <... unlink resumed>) = 0 [pid 5648] <... setpgid resumed>) = 0 [pid 5647] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5645] exit_group(0 [pid 5603] getdents64(3 [pid 5646] <... exit_group resumed>) = ? [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5645] <... exit_group resumed>) = ? [pid 5603] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5648] <... openat resumed>) = 3 [pid 5647] close(4 [pid 5648] write(3, "1000", 4 [pid 5603] close(3) = 0 [pid 5648] <... write resumed>) = 4 [pid 5603] rmdir("./5" [pid 5648] close(3 [pid 5603] <... rmdir resumed>) = 0 [pid 5648] <... close resumed>) = 0 [pid 5646] +++ exited with 0 +++ [pid 5645] +++ exited with 0 +++ [pid 5648] symlink("/dev/binderfs", "./binderfs" [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5646, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=77 /* 0.77 s */} --- [pid 5604] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=55 /* 0.55 s */} --- [pid 5603] mkdir("./6", 0777 [pid 5648] <... symlink resumed>) = 0 executing program [pid 5648] write(1, "executing program\n", 18 [pid 5603] <... mkdir resumed>) = 0 [pid 5648] <... write resumed>) = 18 [pid 5648] memfd_create("syzkaller", 0 [pid 5605] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] <... openat resumed>) = 3 [pid 5648] <... memfd_create resumed>) = 3 [pid 5605] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5603] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5603] close(3 [pid 5605] <... openat resumed>) = 3 [pid 5604] <... openat resumed>) = 3 [pid 5605] fstat(3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] <... close resumed>) = 0 [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5648] <... mmap resumed>) = 0x7ff752943000 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5605] getdents64(3 [pid 5604] getdents64(3 [pid 5603] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5605] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5604] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5605] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5649 attached [pid 5649] set_robust_list(0x5555727ad6e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5649 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] chdir("./6") = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5649] write(1, "executing program\n", 18) = 18 [pid 5649] memfd_create("syzkaller", 0) = 3 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5647] <... close resumed>) = 0 [pid 5647] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5647] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5647] exit_group(0) = ? [pid 5647] +++ exited with 0 +++ [pid 5602] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=77 /* 0.77 s */} --- [pid 5602] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5602] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5602] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5602] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] <... umount2 resumed>) = 0 [pid 5604] <... umount2 resumed>) = 0 [pid 5604] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./5/file1" [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5604] newfstatat(AT_FDCWD, "./5/file1" [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] <... openat resumed>) = 4 [pid 5604] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5605] fstat(4 [pid 5604] <... openat resumed>) = 4 [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] fstat(4 [pid 5605] getdents64(4 [pid 5604] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(4 [pid 5605] getdents64(4 [pid 5604] <... getdents64 resumed>, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5605] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5604] getdents64(4 [pid 5605] close(4 [pid 5604] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5605] <... close resumed>) = 0 [pid 5604] close(4 [pid 5605] rmdir("./5/file1" [pid 5604] <... close resumed>) = 0 [pid 5605] <... rmdir resumed>) = 0 [pid 5604] rmdir("./5/file1" [pid 5605] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] newfstatat(AT_FDCWD, "./5/binderfs" [pid 5604] <... rmdir resumed>) = 0 [pid 5605] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] unlink("./5/binderfs" [pid 5604] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] unlink("./5/binderfs") = 0 [pid 5604] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5604] close(3 [pid 5605] <... unlink resumed>) = 0 [pid 5604] <... close resumed>) = 0 [pid 5604] rmdir("./5" [pid 5605] getdents64(3 [pid 5604] <... rmdir resumed>) = 0 [pid 5604] mkdir("./6", 0777 [pid 5605] <... getdents64 resumed>, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5605] close(3) = 0 [pid 5605] rmdir("./5" [pid 5604] <... mkdir resumed>) = 0 [pid 5605] <... rmdir resumed>) = 0 [pid 5605] mkdir("./6", 0777 [pid 5604] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 5605] <... mkdir resumed>) = 0 [pid 5604] <... openat resumed>) = 3 [pid 5604] ioctl(3, LOOP_CLR_FD [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 5604] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5605] <... openat resumed>) = 3 [pid 5604] close(3) = 0 [pid 5605] ioctl(3, LOOP_CLR_FD [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5605] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5604] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5605] close(3) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5651 attached ci2-upstream-fs/strace-static-x86_64: Process 5650 attached [pid 5651] set_robust_list(0x5555727ad6e0, 24 [pid 5604] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5651 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5650 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] set_robust_list(0x5555727ad6e0, 24) = 0 [pid 5651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] chdir("./6") = 0 [pid 5651] chdir("./6" [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] <... chdir resumed>) = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5650] <... prctl resumed>) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5651] <... prctl resumed>) = 0 [pid 5651] setpgid(0, 0 [pid 5650] <... openat resumed>) = 3 [pid 5651] <... setpgid resumed>) = 0 [pid 5650] write(3, "1000", 4 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5650] <... write resumed>) = 4 [pid 5650] close(3) = 0 [pid 5651] <... openat resumed>) = 3 [pid 5650] symlink("/dev/binderfs", "./binderfs" [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 [pid 5651] symlink("/dev/binderfs", "./binderfs" [pid 5650] <... symlink resumed>) = 0 [pid 5651] <... symlink resumed>) = 0 executing program [pid 5651] write(1, "executing program\n", 18 [pid 5650] write(1, "executing program\n", 18 [pid 5651] <... write resumed>) = 18 executing program [pid 5651] memfd_create("syzkaller", 0 [pid 5650] <... write resumed>) = 18 [pid 5651] <... memfd_create resumed>) = 3 [pid 5650] memfd_create("syzkaller", 0 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5650] <... memfd_create resumed>) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5649] <... write resumed>) = 16777216 [pid 5649] munmap(0x7ff752943000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5648] <... write resumed>) = 16777216 [pid 5649] close(3) = 0 [pid 5648] munmap(0x7ff752943000, 138412032 [pid 5649] close(4) = 0 [pid 5649] mkdir("./file1", 0777) = 0 [pid 5649] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5648] <... munmap resumed>) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5649] <... mount resumed>) = 0 [pid 5649] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5648] ioctl(4, LOOP_SET_FD, 3 [pid 5649] <... openat resumed>) = 3 [pid 5602] <... umount2 resumed>) = 0 [pid 5649] chdir("./file1") = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 5602] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5649] <... openat resumed>) = 4 [pid 5648] <... ioctl resumed>) = 0 [pid 5602] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5649] ioctl(4, LOOP_CLR_FD [pid 5602] newfstatat(AT_FDCWD, "./5/file1" [pid 5649] <... ioctl resumed>) = 0 [pid 5648] close(3) = 0 [pid 5602] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5649] close(4 [pid 5648] close(4 [ 100.721040][ T5649] loop1: detected capacity change from 0 to 32768 [pid 5602] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5649] <... close resumed>) = 0 [pid 5648] <... close resumed>) = 0 [pid 5602] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5649] rename(NULL, NULL [pid 5648] mkdir("./file1", 0777 [pid 5602] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5649] <... rename resumed>) = -1 EFAULT (Bad address) [pid 5648] <... mkdir resumed>) = 0 [pid 5602] <... openat resumed>) = 4 [pid 5649] memfd_create("syzkaller", 0 [pid 5602] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5649] <... memfd_create resumed>) = 4 [pid 5602] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5648] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5602] getdents64(4 [pid 5649] <... mmap resumed>) = 0x7ff752943000 [pid 5602] <... getdents64 resumed>, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5602] close(4) = 0 [pid 5602] rmdir("./5/file1") = 0 [pid 5602] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5602] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] unlink("./5/binderfs") = 0 [pid 5602] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5602] close(3) = 0 [pid 5602] rmdir("./5" [pid 5648] <... mount resumed>) = 0 [pid 5602] <... rmdir resumed>) = 0 [pid 5648] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5602] mkdir("./6", 0777 [pid 5648] chdir("./file1") = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 5648] ioctl(4, LOOP_CLR_FD) = 0 [pid 5648] close(4) = 0 [pid 5648] rename(NULL, NULL) = -1 EFAULT (Bad address) [ 100.782227][ T5648] loop4: detected capacity change from 0 to 32768 [pid 5648] memfd_create("syzkaller", 0) = 4 [pid 5602] <... mkdir resumed>) = 0 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5602] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5602] close(3) = 0 [pid 5602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5602] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5652 attached , child_tidptr=0x5555727ad6d0) = 5652 [pid 5602] rt_sigprocmask(SIG_SETMASK, [] [pid 5652] set_robust_list(0x5555727ad6e0, 24 [pid 5602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5652] <... set_robust_list resumed>) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] chdir("./6") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] write(1, "executing program\n", 18) = 18 executing program [pid 5652] memfd_create("syzkaller", 0) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5648] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5650] <... write resumed>) = 16777216 [pid 5650] munmap(0x7ff752943000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5651] <... write resumed>) = 16777216 [pid 5650] ioctl(4, LOOP_SET_FD, 3 [pid 5651] munmap(0x7ff752943000, 138412032 [pid 5650] <... ioctl resumed>) = 0 [pid 5650] close(3) = 0 [pid 5650] close(4) = 0 [pid 5650] mkdir("./file1", 0777) = 0 [pid 5650] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"... [pid 5651] <... munmap resumed>) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3 [pid 5650] <... mount resumed>) = 0 [pid 5650] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5651] <... ioctl resumed>) = 0 [pid 5650] <... openat resumed>) = 3 [pid 5651] close(3 [pid 5650] chdir("./file1") = 0 [pid 5651] <... close resumed>) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 5651] close(4 [pid 5650] <... openat resumed>) = 4 [pid 5651] <... close resumed>) = 0 [pid 5650] ioctl(4, LOOP_CLR_FD [pid 5651] mkdir("./file1", 0777 [pid 5650] <... ioctl resumed>) = 0 [pid 5650] close(4) = 0 [pid 5650] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5650] memfd_create("syzkaller", 0) = 4 [pid 5651] <... mkdir resumed>) = 0 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [ 101.381381][ T5650] loop3: detected capacity change from 0 to 32768 [ 101.427579][ T5651] loop2: detected capacity change from 0 to 32768 [pid 5651] mount("/dev/loop2", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [pid 5651] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5651] chdir("./file1") = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 5651] ioctl(4, LOOP_CLR_FD) = 0 [pid 5651] close(4) = 0 [pid 5651] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5651] memfd_create("syzkaller", 0) = 4 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5650] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5651] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5649] <... write resumed>) = 20699119 [pid 5649] munmap(0x7ff752943000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5649] close(4 [pid 5652] <... write resumed>) = 16777216 [pid 5652] munmap(0x7ff752943000, 138412032) = 0 [pid 5648] <... write resumed>) = 20699119 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5652] ioctl(4, LOOP_SET_FD, 3 [pid 5648] munmap(0x7ff752943000, 138412032 [pid 5652] <... ioctl resumed>) = 0 [pid 5652] close(3) = 0 [pid 5648] <... munmap resumed>) = 0 [pid 5652] close(4) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5652] mkdir("./file1", 0777 [pid 5648] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5652] <... mkdir resumed>) = 0 [pid 5648] close(4 [pid 5652] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODEV|MS_NOATIME|MS_NODIRATIME|MS_LAZYTIME, "errors=continue,discard=0x0000000000000006,iocharset=macromanian,errors=continue,discard,errors=remo"...) = 0 [ 101.980624][ T5652] loop0: detected capacity change from 0 to 32768 [pid 5652] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5652] chdir("./file1") = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5652] ioctl(4, LOOP_CLR_FD) = 0 [pid 5652] close(4) = 0 [pid 5652] rename(NULL, NULL) = -1 EFAULT (Bad address) [pid 5652] memfd_create("syzkaller", 0) = 4 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff752943000 [pid 5652] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5650] <... write resumed>) = 20699119 [pid 5649] <... close resumed>) = 0 [pid 5650] munmap(0x7ff752943000, 138412032 [pid 5649] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5650] <... munmap resumed>) = 0 [pid 5649] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5649] exit_group(0) = ? [pid 5650] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5650] close(4 [pid 5649] +++ exited with 0 +++ [pid 5603] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5649, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=82 /* 0.82 s */} --- [pid 5603] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5603] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5603] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5648] <... close resumed>) = 0 [pid 5648] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5648] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5648] exit_group(0) = ? [pid 5648] +++ exited with 0 +++ [pid 5606] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5648, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=57 /* 0.57 s */} --- [pid 5606] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5606] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5606] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5606] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(3, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5606] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5651] <... write resumed>) = 20699119 [pid 5651] munmap(0x7ff752943000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5651] close(4 [pid 5650] <... close resumed>) = 0 [pid 5650] pwrite64(-1, "", 0, 8715984) = -1 EBADF (Bad file descriptor) [pid 5650] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_LARGEFILE|O_NOATIME, 0614) = -1 EFAULT (Bad address) [pid 5650] exit_group(0) = ? [pid 5650] +++ exited with 0 +++ [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=70 /* 0.70 s */} --- [pid 5603] <... umount2 resumed>) = 0 [pid 5603] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5605] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5603] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] <... openat resumed>) = 3 [pid 5603] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] fstat(3 [pid 5603] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] getdents64(3 [pid 5603] <... openat resumed>) = 4 [pid 5605] <... getdents64 resumed>, 0x5555727ae790 /* 4 entries */, 32768) = 112 [pid 5603] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 [pid 5603] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] close(4) = 0 [pid 5603] rmdir("./6/file1") = 0 [pid 5603] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] unlink("./6/binderfs") = 0 [pid 5603] getdents64(3, 0x5555727ae790 /* 0 entries */, 32768) = 0 [pid 5603] close(3) = 0 [pid 5603] rmdir("./6") = 0 [pid 5603] mkdir("./7", 0777) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 5606] <... umount2 resumed>) = 0 [pid 5603] ioctl(3, LOOP_CLR_FD [pid 5606] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] close(3) = 0 [pid 5606] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5606] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5603] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5606] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5606] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5606] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] getdents64(4, 0x5555727b67d0 /* 2 entries */, 32768) = 48 ci2-upstream-fs/strace-static-x86_64: Process 5653 attached [pid 5606] getdents64(4, 0x5555727b67d0 /* 0 entries */, 32768) = 0 [pid 5603] <... clone resumed>, child_tidptr=0x5555727ad6d0) = 5653 [pid 5653] set_robust_list(0x5555727ad6e0, 24 [pid 5606] close(4 [pid 5653] <... set_robust_list resumed>) = 0 [pid 5606] <... close resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] rmdir("./6/file1" [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] chdir("./7" [pid 5606] <... rmdir resumed>) = 0 [pid 5653] <... chdir resumed>) = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 102.880466][ C1] ================================================================== [ 102.880482][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 102.880524][ C1] Read of size 4 at addr ffff888037232008 by task ktimers/1/28 [ 102.880538][ C1] [ 102.880560][ C1] CPU: 1 UID: 0 PID: 28 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.880575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.880587][ C1] Call Trace: [ 102.880592][ C1] [ 102.880597][ C1] dump_stack_lvl+0xe8/0x150 [ 102.880615][ C1] print_address_description+0x55/0x1e0 [ 102.880632][ C1] ? lbmIODone+0x130e/0x16b0 [ 102.880645][ C1] print_report+0x58/0x70 [ 102.880670][ C1] kasan_report+0x117/0x150 [ 102.880693][ C1] ? lbmIODone+0x130e/0x16b0 [ 102.880718][ C1] lbmIODone+0x130e/0x16b0 [ 102.880741][ C1] ? blkg_put+0x22/0x240 [ 102.880769][ C1] ? blkg_put+0x22/0x240 [ 102.880797][ C1] ? blkg_put+0x18d/0x240 [ 102.880823][ C1] ? bio_endio+0x984/0xac0 [ 102.880842][ C1] blk_update_request+0x57b/0xe50 [ 102.880870][ C1] blk_mq_end_request+0x3e/0x70 [ 102.880891][ C1] blk_done_softirq+0x10a/0x160 [ 102.880923][ C1] handle_softirqs+0x1da/0x6d0 [ 102.880957][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 102.880988][ C1] run_ktimerd+0x6a/0x100 [ 102.881018][ C1] smpboot_thread_fn+0x565/0xa70 [ 102.881048][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 102.881091][ C1] kthread+0x38b/0x470 [ 102.881114][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 102.881144][ C1] ? __pfx_kthread+0x10/0x10 [ 102.881166][ C1] ret_from_fork+0x514/0xb70 [ 102.881188][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 102.881209][ C1] ? __switch_to+0xc89/0x1420 [ 102.881241][ C1] ? __pfx_kthread+0x10/0x10 [ 102.881262][ C1] ret_from_fork_asm+0x1a/0x30 [ 102.881291][ C1] [ 102.881299][ C1] [ 102.881305][ C1] Allocated by task 5650: [ 102.881315][ C1] kasan_save_track+0x3e/0x80 [ 102.881348][ C1] __kasan_kmalloc+0x93/0xb0 [ 102.881365][ C1] __kmalloc_cache_noprof+0x3d5/0x680 [ 102.881395][ C1] lmLogInit+0x3e5/0x1a20 [ 102.881415][ C1] lmLogOpen+0x4e3/0xf90 [ 102.881434][ C1] jfs_mount_rw+0xf3/0x670 [ 102.881452][ C1] jfs_fill_super+0x769/0xda0 [ 102.881476][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 102.881504][ C1] vfs_get_tree+0x92/0x2a0 [ 102.881529][ C1] do_new_mount+0x325/0xb00 [ 102.881550][ C1] __se_sys_mount+0x31d/0x420 [ 102.881569][ C1] do_syscall_64+0x166/0x520 [ 102.881597][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.881617][ C1] [ 102.881621][ C1] Freed by task 5605: [ 102.881631][ C1] kasan_save_track+0x3e/0x80 [ 102.881660][ C1] kasan_save_free_info+0x40/0x50 [ 102.881686][ C1] __kasan_slab_free+0x5c/0x80 [ 102.881702][ C1] kfree+0x1c5/0x6d0 [ 102.881726][ C1] lmLogShutdown+0x456/0x850 [ 102.881748][ C1] lmLogClose+0x28c/0x530 [ 102.881766][ C1] jfs_umount+0x2da/0x3b0 [ 102.881785][ C1] jfs_put_super+0x8c/0x190 [ 102.881811][ C1] generic_shutdown_super+0x13d/0x2d0 [ 102.881834][ C1] kill_block_super+0x44/0xa0 [ 102.881859][ C1] deactivate_locked_super+0xbe/0x110 [ 102.881881][ C1] cleanup_mnt+0x204/0x2a0 [ 102.881906][ C1] task_work_run+0x1d9/0x270 [ 102.881927][ C1] ptrace_notify+0x27c/0x2b0 [ 102.881952][ C1] ptrace_report_syscall_exit+0x2d/0x50 [ 102.881971][ C1] do_syscall_64+0x4a0/0x520 [ 102.881999][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.882018][ C1] [ 102.882023][ C1] The buggy address belongs to the object at ffff888037232000 [ 102.882023][ C1] which belongs to the cache kmalloc-256 of size 256 [ 102.882042][ C1] The buggy address is located 8 bytes inside of [ 102.882042][ C1] freed 256-byte region [ffff888037232000, ffff888037232100) [ 102.882071][ C1] [ 102.882077][ C1] The buggy address belongs to the physical page: [ 102.882096][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37232 [ 102.882123][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.882141][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 102.882162][ C1] page_type: f5(slab) [ 102.882181][ C1] raw: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122 [ 102.882200][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 102.882220][ C1] head: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122 [ 102.882237][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 102.882256][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 102.882272][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 102.882281][ C1] page dumped because: kasan: bad access detected [ 102.882296][ C1] page_owner tracks the page as allocated [ 102.882303][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20848985127 [ 102.882335][ C1] post_alloc_hook+0x1f9/0x250 [ 102.882364][ C1] get_page_from_freelist+0x2591/0x2600 [ 102.882384][ C1] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 102.882403][ C1] allocate_slab+0x7d/0x620 [ 102.882426][ C1] refill_objects+0x2d8/0x350 [ 102.882450][ C1] __pcs_replace_empty_main+0x339/0x690 [ 102.882471][ C1] __kmalloc_node_track_caller_noprof+0x61e/0x7b0 [ 102.882502][ C1] krealloc_node_align_noprof+0x19a/0x390 [ 102.882521][ C1] add_sysfs_param+0xd4/0xb80 [ 102.882547][ C1] kernel_add_sysfs_param+0x7f/0xe0 [ 102.882572][ C1] param_sysfs_builtin+0x199/0x250 [ 102.882598][ C1] param_sysfs_builtin_init+0x23/0x30 [ 102.882624][ C1] do_one_initcall+0x250/0x870 [ 102.882654][ C1] do_initcall_level+0x10a/0x1a0 [ 102.882684][ C1] do_initcalls+0x59/0xa0 [ 102.882711][ C1] kernel_init_freeable+0x29d/0x3e0 [ 102.882740][ C1] page_owner free stack trace missing [ 102.882748][ C1] [ 102.882752][ C1] Memory state around the buggy address: [ 102.882763][ C1] ffff888037231f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.882777][ C1] ffff888037231f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.882789][ C1] >ffff888037232000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.882799][ C1] ^ [ 102.882810][ C1] ffff888037232080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.882824][ C1] ffff888037232100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.882834][ C1] ================================================================== [ 102.883235][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.520534][ C1] CPU: 1 UID: 0 PID: 28 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.530063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.540100][ C1] Call Trace: [ 103.543365][ C1] [ 103.546282][ C1] vpanic+0x56d/0xa60 [ 103.550255][ C1] ? __pfx_vpanic+0x10/0x10 [ 103.554740][ C1] ? __pfx___schedule+0x10/0x10 [ 103.559583][ C1] panic+0xc5/0xd0 [ 103.563287][ C1] ? __pfx_panic+0x10/0x10 [ 103.567689][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 103.573056][ C1] ? lbmIODone+0x130e/0x16b0 [ 103.577633][ C1] check_panic_on_warn+0x89/0xb0 [ 103.582556][ C1] ? lbmIODone+0x130e/0x16b0 [ 103.587131][ C1] end_report+0x73/0x170 [ 103.591361][ C1] ? lbmIODone+0x130e/0x16b0 [ 103.595933][ C1] kasan_report+0x128/0x150 [ 103.600425][ C1] ? lbmIODone+0x130e/0x16b0 [ 103.605004][ C1] lbmIODone+0x130e/0x16b0 [ 103.609403][ C1] ? blkg_put+0x22/0x240 [ 103.613638][ C1] ? blkg_put+0x22/0x240 [ 103.617867][ C1] ? blkg_put+0x18d/0x240 [ 103.622186][ C1] ? bio_endio+0x984/0xac0 [ 103.626583][ C1] blk_update_request+0x57b/0xe50 [ 103.631595][ C1] blk_mq_end_request+0x3e/0x70 [ 103.636430][ C1] blk_done_softirq+0x10a/0x160 [ 103.641271][ C1] handle_softirqs+0x1da/0x6d0 [ 103.646026][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 103.651039][ C1] run_ktimerd+0x6a/0x100 [ 103.655360][ C1] smpboot_thread_fn+0x565/0xa70 [ 103.660297][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 103.665322][ C1] kthread+0x38b/0x470 [ 103.669375][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 103.674834][ C1] ? __pfx_kthread+0x10/0x10 [ 103.679421][ C1] ret_from_fork+0x514/0xb70 [ 103.683997][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 103.689089][ C1] ? __switch_to+0xc89/0x1420 [ 103.693758][ C1] ? __pfx_kthread+0x10/0x10 [ 103.698337][ C1] ret_from_fork_asm+0x1a/0x30 [ 103.703095][ C1] [ 103.706347][ C1] Kernel Offset: disabled [ 103.710653][ C1] Rebooting in 86400 seconds..